UK GDPR Statement

Tide Education Ltd is committed to protecting and respecting your privacy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

As a data controller and processor, we implement appropriate technical and organisational measures to ensure and demonstrate that processing is performed in accordance with GDPR requirements.

Key Principles

We adhere to the following UK GDPR principles in all our data processing activities:

• Lawfulness, fairness and transparency: We process personal data lawfully, fairly and in a transparent manner.
• Purpose limitation: We collect data for specified, explicit and legitimate purposes only.
• Data minimisation: We ensure data collected is adequate, relevant and limited to what is necessary.
• Accuracy: We keep personal data accurate and up to date.
• Storage limitation: We keep data in a form which permits identification for no longer than necessary.
• Integrity and confidentiality: We process data securely using appropriate technical and organisational measures.
• Accountability: We take responsibility for our data processing and demonstrate compliance.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

• The right to be informed about how we use your data
• The right of access to your personal data
• The right to rectification of inaccurate data
• The right to erasure ('right to be forgotten')
• The right to restrict processing
• The right to data portability
• The right to object to processing
• Rights related to automated decision making and profiling

Data Protection Measures

We implement comprehensive security measures to protect your data:

• Encryption of data at rest and in transit
• Regular security assessments and audits
• Access controls and authentication measures
• Staff training on data protection
• Data protection by design and default
• Regular backup and recovery procedures
• Incident response and breach notification procedures

Data Processing

We process personal data only when we have a lawful basis:

• Consent: You have given clear consent for specific purposes
• Contract: Processing is necessary for a contract we have with you
• Legal obligation: We need to comply with the law
• Legitimate interests: For our legitimate business interests, except where overridden by your rights