GDPR Compliance

Our GDPR Commitment

twinkling-trek is committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We process personal data lawfully, fairly, and transparently.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract: Processing necessary to fulfil our educational services agreement with you
• Consent: Marketing communications and optional programme enhancements (you can withdraw consent at any time)
• Legitimate Interests: Improving our services and ensuring safeguarding standards
• Legal Obligation: Maintaining records as required by educational regulations

Your Data Rights

Right to Access

You can request a copy of all personal data we hold about you or your child. We will respond within one month.

Right to Rectification

If information we hold is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

You can request deletion of personal data when it is no longer necessary for the purpose it was collected, subject to legal retention requirements.

Right to Restrict Processing

You can ask us to limit how we use your data in certain circumstances, such as when you contest its accuracy.

Right to Data Portability

You can request your data in a structured, commonly used format and have it transferred to another service provider.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Data Protection Principles

We adhere to the following principles:

• Lawfulness, fairness, and transparency: We process data legally and openly
• Purpose limitation: We collect data only for specified, explicit purposes
• Data minimisation: We collect only what is necessary
• Accuracy: We keep data accurate and up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We protect data through appropriate security measures

Special Category Data

We only collect special category data (such as health information affecting programme participation) with explicit consent and process it under heightened security protocols.

Children's Data

We process children's data with particular care. Parental or guardian consent is always obtained before collecting data from children under 13. We never use children's data for profiling or automated decision-making.

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.

International Data Transfers

Your data is stored and processed within the United Kingdom. If we need to transfer data internationally, we ensure appropriate safeguards are in place.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of your GDPR rights, contact us at:

Email: [email protected]
Address: 47 Meadow Lane, Liverpool, L8 3QR, United Kingdom

Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: twinkling-trek.com
Telephone: 0303 123 1113

Updates to This Statement

We review our GDPR compliance regularly and update this statement as needed to reflect changes in law or our practices.