Last updated: August 4, 2026
Our Commitment to GDPR
hollow-egret is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page outlines your rights and how we ensure compliance.
Data Controller
For the purposes of data protection legislation, hollow-egret is the data controller responsible for your personal information.
Contact details:
hollow-egret
85 Ecclesall Road
Sheffield, S11 8HW
United Kingdom
Email: [email protected]
Your Rights Under GDPR
Right to be Informed
You have the right to clear, transparent information about how we use your personal data. This information is provided through our Privacy Policy and this GDPR page.
Right of Access
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to your request within one month.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of this data.
Right to Erasure (Right to be Forgotten)
Under certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and may be limited by legal obligations to retain certain information.
Right to Restrict Processing
You can request that we restrict how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to our processing of your personal data where we rely on legitimate interests as the legal basis for processing.
Rights Related to Automated Decision Making
We do not use automated decision making or profiling in our processing of personal data.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: Processing is necessary to fulfill our contractual obligations when you enroll in our courses
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services
- Legal Obligation: Processing is necessary to comply with legal requirements
- Consent: You have given explicit consent for specific processing activities
Data We Collect
We collect and process the following categories of personal data:
- Identity data (name)
- Contact data (email address, postal address)
- Course enrollment and attendance data
- Technical data (IP address, browser type, device information)
How We Protect Your Data
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication procedures
- Staff training on data protection
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Course enrollment records are typically retained for seven years.
International Data Transfers
We do not transfer personal data outside the United Kingdom or European Economic Area. Should this change in the future, we will ensure appropriate safeguards are in place.
Third-Party Data Sharing
We do not sell or rent personal data to third parties. We may share data with trusted service providers who assist in delivering our services, under strict data processing agreements that ensure GDPR compliance.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected] with:
- Your full name
- Your contact information
- A clear description of your request
- Proof of identity (for security purposes)
We will respond to your request within one month. In complex cases, this may be extended by up to two additional months, and we will inform you of any such extension.
Right to Complain
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Updates to This Page
We may update this GDPR compliance page from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the most recent changes were made.