Our commitment to protecting your data rights
Last updated: September 2024
lunar-path is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting your personal data and respecting your privacy rights.
lunar-path acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
lunar-path
47 Canary Wharf
London, E14 5AB
United Kingdom
Email: [email protected]
We only process personal data when we have a valid lawful basis under UK GDPR. The bases we rely upon include:
Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications or submitting an enquiry.
Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. This applies when you book and pay for our educational services.
Where processing is necessary for our legitimate interests or those of a third party, provided these are not overridden by your rights. Examples include improving our services and ensuring website security.
Where processing is necessary to comply with a legal obligation, such as maintaining financial records for tax purposes.
As a data subject, you have the following rights:
You have the right to know how your personal data is being used. This GDPR notice and our Privacy Policy fulfil this requirement.
You can request a copy of the personal data we hold about you. We will respond to valid requests within one month.
You can request that we correct any inaccurate personal data or complete incomplete data.
In certain circumstances, you can request that we delete your personal data. This right is not absolute and depends on the lawful basis for processing.
You can request that we limit how we use your personal data in certain circumstances, such as when you contest its accuracy.
Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used format.
You can object to processing based on legitimate interests, direct marketing, or processing for research purposes.
You have rights regarding automated decisions that produce legal or similarly significant effects. We do not currently use automated decision-making processes.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods vary based on the type of data and our legal obligations:
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
To exercise any of your data protection rights, please contact us:
Email: [email protected]
We will respond to your request within one month. In complex cases, this may be extended by up to two additional months, and we will inform you if this is necessary.
If you are unsatisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance notice periodically. Any changes will be posted on this page with an updated revision date.