Privacy Policy

UKTOBA is a personal development and career education platform registered in England and Wales. Our registered address is 278-280 City Rd, Sheffield S2 5HP. We are the data controller in respect of the personal data described in this policy. You can contact us regarding data protection matters at [email protected].

We are not currently required to register with the Information Commissioner's Office (ICO) as a data controller solely on the basis of the data processing described in this policy, but we comply with all applicable UK GDPR obligations regardless of registration status.

We collect the following categories of personal data:

Contact data: When you use our contact form or email us directly, we collect your email address, any name you choose to provide, and the content of your message.

Usage data: When you visit our website, we may collect technical information such as your IP address, browser type, device type, pages visited, and time spent on each page. This data is collected through cookies and similar technologies.

Enrollment data: If you enroll in a learning program, we collect the information necessary to manage your enrollment and provide access to the program content.

We do not collect special category data (such as health, racial or ethnic origin, religious beliefs, or biometric data). We do not collect data from children under the age of 16.

We use your personal data for the following purposes:

To respond to your enquiries: When you contact us, we use your contact data to respond to your message. The lawful basis for this processing is our legitimate interest in communicating with people who contact us (Article 6(1)(f) UK GDPR).

To manage enrollments: If you enroll in a program, we use your data to manage your access and provide the learning content. The lawful basis is the performance of a contract (Article 6(1)(b) UK GDPR).

To improve the website: We use aggregated usage data to understand how visitors use our website and to improve its content and functionality. The lawful basis is our legitimate interest (Article 6(1)(f) UK GDPR).

To comply with legal obligations: We may process your data where necessary to comply with a legal obligation to which we are subject (Article 6(1)(c) UK GDPR).

We do not use your data for automated decision-making or profiling. We do not send marketing emails without your explicit consent.

We use cookies and similar technologies on uktoba.online. Cookies are small text files placed on your device when you visit our website. Some cookies are strictly necessary for the website to function; others are used for analytics and performance purposes.

We obtain your consent before placing any non-essential cookies on your device, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR. You can manage your cookie preferences at any time using the cookie consent tool on our website.

For full details of the cookies we use, please see our Cookie Policy.

We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes.

We may share your data with the following categories of third-party service providers who assist us in operating the website and delivering our programs:

Hosting and infrastructure providers: Our website is hosted by a third-party provider. They process data on our behalf and are bound by data processing agreements.

Analytics providers: We may use analytics tools to understand website usage. Any such tools are configured to anonymise IP addresses where possible and to process data only in accordance with our instructions.

All third-party processors are required to process your data only on our instructions and in accordance with applicable data protection law. Where any processor is located outside the UK, we ensure appropriate safeguards are in place in accordance with Chapter V of UK GDPR.

We may disclose your data to law enforcement or regulatory authorities where required to do so by law.

We retain personal data only for as long as necessary for the purposes described in this policy, and in any event no longer than required by applicable law.

Contact enquiry data is retained for a period of 12 months from the date of the last communication, unless a longer retention period is required or permitted by law. Enrollment data is retained for the duration of the enrollment and for a reasonable period thereafter for administrative purposes. Usage and analytics data is retained in aggregated form and is not linked to identifiable individuals after the initial processing period.

You have the following rights in relation to your personal data under UK GDPR:

Right of access: You have the right to request a copy of the personal data we hold about you.

Right to rectification: You have the right to request that we correct inaccurate personal data about you.

Right to erasure: You have the right to request that we delete your personal data in certain circumstances.

Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to object: You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our website uses HTTPS encryption. Access to personal data is restricted to those who need it to perform their role.

No method of transmission over the internet is entirely secure. While we take reasonable precautions, we cannot guarantee the absolute security of data transmitted to or from our website.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us:

UKTOBA
278-280 City Rd, Sheffield S2 5HP
Email: [email protected]
Phone: +44 7450 785710