Privacy Policy

Last updated: January 2024

Introduction

crux-mate ("we", "our", "us") is committed to protecting the privacy of our website visitors, programme participants, and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

We may collect information about you in a variety of ways. The information we may collect includes:

• Personal Data: Name, email address, postal address, and other contact information you voluntarily provide when booking programmes or contacting us.
• Child Information: Age, school, and relevant educational details provided by parents or guardians for programme enrolment purposes.
• Payment Information: Payment details are processed through secure third-party payment processors and are not stored on our servers.
• Usage Data: Information about how you use our website, including pages visited, time spent, and navigation paths.

How We Use Your Information

We use the information we collect to:

• Process programme bookings and manage enrolments
• Communicate with you about programmes, schedules, and updates
• Send feedback forms and progress reports to parents
• Improve our website and services
• Respond to enquiries and provide customer support
• Send promotional communications (only with your consent)

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Contract: Processing necessary for the performance of a contract (such as delivering educational programmes)
• Consent: Where you have given consent for specific processing activities
• Legitimate Interest: Processing necessary for our legitimate business interests, provided these are not overridden by your rights

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers who assist in operating our website and services
• Professional advisors such as accountants and legal advisors
• Authorities when required by law

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically, we retain programme participant records for seven years after the last interaction.

Your Rights

Under UK data protection law, you have rights including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure in certain circumstances
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise any of these rights, please contact us using the details below.

Children's Privacy

Our services are designed for children and teenagers. We collect information about minors only with the consent of their parent or guardian. Parents and guardians may review, modify, or request deletion of their child's information at any time.

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

crux-mate
14 Cathedral Road
Pontcanna, Cardiff CF11 9LJ
Email: [email protected]