GDPR Compliance Statement

Last updated: January 2024

reed-space is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This document outlines our commitment to data protection and your rights under these regulations.

Data Controller

reed-space acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data in connection with our training programmes and business operations.

Principles of Data Processing

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully and explain clearly how we use it
• Purpose limitation: We collect data only for specified, explicit purposes
• Data minimisation: We collect only the data necessary for our stated purposes
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We implement appropriate security measures

Your Data Protection Rights

Under the UK GDPR, you have the following rights:

Right of Access

You may request a copy of the personal data we hold about you. We will respond to such requests within one month.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You may request that we limit the processing of your data in certain circumstances.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing of your personal data based on our legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not make automated decisions about individuals that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with details of your request. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for repetitive or excessive requests.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where required, we will also notify affected individuals without undue delay.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). We encourage you to contact us first so we can address your concerns directly.

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. The date of the most recent revision is shown at the top of this page.