Privacy policy.
At It’s Your College, we are committed to protecting your privacy and ensuring the security of your personal information. This privacy declaration outlines how we collect, use, disclose, and store your data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations in the European Union (EU).
Data Controller
It’s Your College (a subsidiary company of Emma Stoks) is the data controller responsible for the processing of your personal information.
Collection and Use of Personal Information
We may collect and process the following categories of personal information when you interact with our website, register for our online courses, or contact us:
a. Contact Information: This includes your name, email address, telephone number, and postal address. We collect this information to communicate with you, respond to your inquiries, and provide you with information about our courses and services.
b. Payment Information: When you make a purchase on our website, we collect and process your payment details, including credit card information, to process the transaction and fulfill your order.
c. Course Progress and Performance Data: We may collect data related to your course progress, including assignments, quizzes, and assessments, to monitor your learning journey, provide feedback, and improve our courses.
d. Technical Information: This includes your IP address, browser type, operating system, device information, and other technical data collected through cookies and similar technologies. We use this information to analyze website usage, troubleshoot technical issues, and enhance your browsing experience.
Legal Basis for Processing
We will only process your personal information when we have a legal basis for doing so. The legal bases for processing your data include:
a. Contractual Necessity: Processing is necessary for the performance of a contract with you, such as providing access to our online courses and delivering related services.
b. Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our courses, marketing our services, and ensuring the security of our website.
c. Consent: We will obtain your consent before collecting and processing any personal information, where required by law.
Data Sharing and Disclosure
We may share your personal information with third parties in the following circumstances:
a. Service Providers: We engage trusted service providers to perform certain functions on our behalf, such as payment processing, website hosting, and email communications. These third parties have access to your personal information only to the extent necessary to fulfill their obligations and are contractually obligated to protect your data.
b. Legal Compliance: We may disclose your personal information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government regulations.
International Data Transfers
Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. In such cases, we will ensure that appropriate safeguards are in place to protect your data, such as entering into standard contractual clauses approved by the European Commission or verifying the recipient's compliance with the EU-US Privacy Shield Framework.
Data Retention
We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including any legal or contractual obligations. When determining the appropriate retention period, we consider the nature of the information, the purposes for processing, and any legal requirements.
Data Subject Rights
Under the GDPR, you have the following rights regarding your personal information:
a. Right to Access: You can request a copy of the personal information we hold about you and details about how we process it.
b. Right to Rectification: If you believe that any of your personal information is inaccurate or incomplete, you have the right to request its correction.
c. Right to Erasure: You can request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, and there is no other legal basis for processing.
d. Right to Restriction: You have the right to restrict the processing of your personal information under certain circumstances, such as when you contest its accuracy or the lawfulness of processing.
e. Right to Data Portability: You can request a copy of your personal information in a structured, commonly used, and machine-readable format, and have the right to transmit it to another data controller.
f. Right to Object: You have the right to object to the processing of your personal information based on our legitimate interests or for direct marketing purposes.
g. Right to Withdraw Consent: If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.
To exercise your rights or if you have any questions or concerns regarding the processing of your personal information, please contact us using the details provided in Section 8.
Contact Information
If you have any questions or wish to exercise your data subject rights, please contact us at contact@itsyourcollege.com.
Updates to this Privacy Declaration
We may update this privacy declaration from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website, and the revised version will be effective immediately upon posting.
Last updated: June 2023