1. Information I collect To provide you with my services and deliver your course, you give me certain information, such as your name, email address, postal address, payment information, and the details of the course you are enquiring about or enrolling on. When you complete and submit course assessments, I collect the answers and work you send me. You may also choose to give me additional personal information, for example if you contact me directly with a question or request.

2. Why I need your information and how I use it I rely on a number of legal bases to collect, use, and share your information, including: as needed to provide my services, such as processing your enrolment, delivering your course, marking your assessments, issuing your certificate, providing support, and settling disputes; when you have given your affirmative consent, which you may withdraw at any time, such as by signing up to my mailing list; if necessary to comply with a legal obligation or court order, or in connection with a legal claim, such as keeping records of your payments where required by tax law; and as necessary for my legitimate interests, where those interests are not overridden by your rights or interests, such as providing and improving my courses and services.

3. Information sharing and disclosure Information about my students is important to my business. I share your personal information for limited reasons and in limited circumstances, as follows. Service providers: I work with certain trusted third parties who perform functions and provide services to my business, such as payment processing, website hosting and email delivery. I may share your personal information with them, but only to the extent necessary to provide you with your course and services. Business transfers: if I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law. Compliance with laws: I may collect, use, retain, and share your information where I have a good faith belief that it is reasonably necessary to (a) respond to legal process or government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud or other illegal activity, security, or technical issues; or (d) protect the rights, property and safety of my students or others.

4. Data retention I keep your personal information only for as long as necessary to deliver your course and provide you with my services, and as described in this Privacy Policy. I may also be required to keep this information to comply with my legal and regulatory obligations, such as tax and accounting rules, to resolve disputes, and to enforce my agreements. I generally keep your data for up to six years.

5. Transfers of personal information outside the UK I may store and process your information using third party hosting services in the United States and other countries. As a result, I may transfer your personal information to a country with different data protection laws to your own. Where I transfer personal information outside the UK, I rely on appropriate safeguards recognised under UK data protection law, such as the International Data Transfer Agreement or Standard Contractual Clauses, to protect your information.

6. Your rights If you reside in certain territories, including the UK and the EU, you have a number of rights in relation to your personal information. Some apply generally and others only in certain cases. Access: you may have the right to access and receive a copy of the personal information I hold about you by contacting me using the details below. Change, restrict, delete: you may have the right to change, restrict my use of, or delete your personal information. Other than in exceptional circumstances, such as where I am required to keep data for legal reasons, I will generally delete your personal information on request. Object: you can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after you have given consent to receive them. In such cases I will delete your personal information unless I have compelling and legitimate grounds to continue, or where it is needed for legal reasons. Complain: if you wish to raise a concern about my use of your information, and without affecting any other rights you have, you may contact the Information Commissioner's Office (ICO) in the UK, or your local data protection authority if you reside in the EU.

7. How to contact me For the purposes of UK data protection law, I, Jennifer Oakley, am the data controller of your personal information. If you have any questions or concerns, you may contact me at [email protected].