Our commitment to protecting your data rights
Last updated: November 2024
Storm-soar is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations under data protection law and how you can exercise your rights.
Storm-soar acts as the data controller for personal information collected through our website and training programmes. As the data controller, we determine the purposes and means of processing personal data and are responsible for ensuring that such processing complies with applicable data protection legislation.
Contact details for data protection enquiries:
Storm-soar
45 Media Quarter
London, EC2A 4NE
United Kingdom
Email: [email protected]
We process personal data only when we have a valid lawful basis to do so. The lawful bases we rely upon include:
Where you have given clear consent for us to process your personal data for a specific purpose. This applies to marketing communications and optional data collection through enquiry forms.
Where processing is necessary for the performance of a contract with you. This applies to enrolled students whose data we process to deliver training services.
Where processing is necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights and freedoms. This includes website analytics and service improvement.
Where processing is necessary to comply with a legal obligation. This includes maintaining financial records and responding to regulatory requirements.
Under the UK GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing based on legitimate interests and processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you. We do not currently engage in automated decision-making.
To exercise any of your data protection rights, please contact us using the details above. We will respond to your request within one month. In complex cases or where we receive numerous requests, we may extend this period by up to two months, in which case we will inform you of the extension and the reasons for it.
We may ask you to verify your identity before processing your request to ensure we are releasing data to the correct person.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are:
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
United Kingdom
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.