GDPR Compliance
Our commitment to data protection under the General Data Protection Regulation.
Sage-soar is committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we meet our obligations and support your data protection rights.
Data Controller
Sage-soar acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.
Contact details:
Sage-soar
47 Queen Square
Bristol, BS1 4LH
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We process personal data only when we have a valid lawful basis. Depending on the context, we rely on:
- Performance of a contract: Processing necessary to deliver educational services you have requested or enrolled in
- Legitimate interests: Processing that supports our business operations while respecting your rights and expectations
- Consent: Where you have given specific, informed consent for particular processing activities
- Legal obligation: Processing required to comply with applicable laws
Your Rights Under GDPR
The GDPR provides the following rights regarding your personal data:
Right to Access
You may request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
Right to Rectification
You may request correction of any inaccurate personal data we hold about you.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This right is not absolute and depends on our legal obligations and legitimate interests.
Right to Restrict Processing
You may request that we limit how we use your data in specific circumstances.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have rights regarding decisions made solely by automated processing that significantly affect you. We do not currently make such automated decisions.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] with your request. We may ask for verification of your identity to ensure the security of your data.
We will respond to all valid requests within one month. If your request is complex or we receive numerous requests, we may extend this period by up to two additional months, and we will inform you of any such extension.
Data Protection Principles
We adhere to the following principles when processing personal data:
- Processing data lawfully, fairly, and transparently
- Collecting data for specified, explicit, and legitimate purposes
- Ensuring data is adequate, relevant, and limited to what is necessary
- Keeping data accurate and up to date
- Retaining data only as long as necessary
- Processing data securely with appropriate protections
International Transfers
We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
Supervisory Authority
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk
We encourage you to contact us first so we may address any concerns directly.