Understanding your data protection rights
thicket-muse is committed to full compliance with the General Data Protection Regulation (GDPR) and UK data protection legislation. We respect your privacy rights and implement appropriate measures to ensure lawful, fair, and transparent processing of personal data.
For the purposes of GDPR, thicket-muse acts as the data controller for personal information collected through our website and educational services. We determine how and why your personal data is processed.
Contact details:
thicket-muse
147 Deansgate
Manchester M3 3WR
United Kingdom
Email: [email protected]
We process personal data only when we have a valid legal basis under GDPR:
You have the right to clear, transparent information about how we use your personal data. This information is provided through our privacy policy and this GDPR compliance page.
You can request access to the personal data we hold about you. This is known as a Subject Access Request (SAR). We will provide you with a copy of your data in a commonly used electronic format within one month of your request.
If your personal information is inaccurate or incomplete, you have the right to have it corrected. Contact us to update your information, and we will make changes promptly.
Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, including:
Note that we may retain certain information where legally required, such as financial records for tax purposes.
You can request that we limit how we use your personal data in specific situations:
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another organization where technically feasible.
You can object to processing of your personal data where we rely on legitimate interests as the legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
You have an absolute right to object to processing for direct marketing purposes at any time.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. We do not currently employ automated decision-making processes that would trigger this right.
To exercise any of your GDPR rights, contact us at [email protected] with the subject line "GDPR Request." Please include:
We will respond to valid requests within one month. In complex cases, this may be extended by two additional months, and we will inform you if this occurs.
We implement appropriate technical and organizational security measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to you, we will also notify you directly without undue delay.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods vary based on data type and purpose:
Your personal data is primarily processed and stored within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by regulatory authorities.
We work with carefully selected third-party service providers who process personal data on our behalf. These processors are contractually obligated to process data only according to our instructions and to implement appropriate security measures. We maintain records of our processing activities and third-party relationships as required by GDPR.
If you are dissatisfied with how we handle your personal data or our response to a rights request, you have the right to lodge a complaint with a supervisory authority.
UK supervisory authority:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Significant updates will be communicated through our website or directly to enrolled students.