Your rights under UK GDPR and data protection legislation
noble-field is committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of data protection legislation, the data controller is:
noble-field
47 Pemberton Gardens
London N19 5RR
United Kingdom
Email: [email protected]
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
You have the right to request correction of personal information you believe is inaccurate or incomplete.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request restriction of processing of your personal data in specific situations, such as when you contest the accuracy of the data.
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.
You have the right to request transfer of your personal data to another organisation or directly to you in a structured, commonly used, and machine-readable format.
Where we process your data based on consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two further months where requests are complex or numerous.
When making a request, please provide:
We process personal data under the following lawful bases:
Processing is necessary to deliver training services you have enrolled in or to take steps prior to entering into a contract.
Processing is necessary for our legitimate interests in operating our business, provided these interests are not overridden by your rights and interests.
You have explicitly consented to processing for specific purposes, such as receiving marketing communications.
Processing is necessary to comply with legal requirements, such as accounting and tax obligations.
We collect and process the following categories of personal data:
We may share personal data with:
We ensure appropriate safeguards are in place when sharing data with third parties.
We implement appropriate technical and organisational measures to ensure data security, including:
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, considering:
Programme participant data is typically retained for seven years following course completion.
If we transfer personal data outside the UK, we ensure appropriate safeguards are in place through mechanisms such as:
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Tel: 0303 123 1113
Website: ico.org.uk
We may update this GDPR information periodically. Material changes will be communicated through our website.
For questions about data protection or to exercise your rights, contact us at [email protected]