GDPR Compliance

Our Commitment to Data Protection

microproat is committed to processing personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we uphold your data protection rights and our obligations as a data controller.

Data Controller Information

microproat acts as the data controller for personal information collected through this website and our educational services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection principles.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The legal bases we rely upon include:

Contractual Necessity

When you enrol in our courses or request our services, processing is necessary to fulfil our contractual obligations to you. This includes maintaining course records, communicating about sessions, and providing educational materials.

Legitimate Interests

We may process data based on our legitimate interests, such as improving our services, understanding how our website is used, and communicating relevant information to existing students. We always balance our interests against your rights and freedoms.

Consent

Where required, we obtain your explicit consent before processing. You may withdraw consent at any time by contacting us directly. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

Legal Obligation

We process certain data to comply with legal requirements, including financial record-keeping obligations and regulatory requirements applicable to educational services.

Your Data Protection Rights

Under the UK GDPR, you have the following rights:

Right of Access

You may request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge in most circumstances.

Right to Rectification

If you believe any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will respond to rectification requests promptly.

Right to Erasure

You may request deletion of your personal data where there is no compelling reason for continued processing. This right is subject to certain conditions and legal obligations we must fulfil.

Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances, such as when you contest accuracy or have objected to processing.

Right to Data Portability

Where processing is based on consent or contract, you may request your data in a structured, commonly used format for transfer to another controller.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Data Protection Measures

We implement appropriate technical and organisational measures to ensure security of personal data:

• Secure servers with encryption for data in transit and at rest
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Staff training on data protection obligations
• Incident response procedures for potential data breaches

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware. Where the breach is likely to result in high risk to you, we will also notify you directly without undue delay.

International Transfers

We primarily process data within the United Kingdom. If we transfer personal data to countries outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner.

Contact and Complaints

To exercise your rights or raise concerns about data processing, please contact:

Data Protection Contact
microproat
27 Whitfield Street
London W1T 2LY
United Kingdom
Email: [email protected]

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.