What we hold, and what we refuse to collect

Who is responsible

The controller is Ocubyelyx, 150 Shankly Dr, Morningside, Wishaw ML2 9QZ, United Kingdom. Email [email protected] or phone +44 7700 018231. We have not appointed a statutory data protection officer. Write to the same address and mark the subject “Privacy”.

What we collect

• If you email or phone: your name, email address, phone number if you give it, and whatever you choose to put in the message. Please do not send full account numbers. A scheme name and a rounded figure are enough for a course question.
• If you enrol: the details needed to take payment and open lessons, including your name, email, billing address if the payment provider requires it, and a record of the fee.
• Card numbers: our payment provider collects these. We do not receive or store the full card number. We keep the confirmation, the amount, and the date.
• Lesson use: which modules you have opened, so we can provide access and answer a question about “the video that stopped”. We do not build an advertising profile from that.
• This website: we do not run analytics cookies, advertising cookies, or a newsletter tracker. The consent panel stores your choice in local storage on your device under the key ocubyelyx_consent. That is not sent to us.

Why we use it, and the lawful basis

• To answer an enquiry: legitimate interests, or steps you ask us to take before a contract.
• To deliver the course you have paid for: contract.
• To keep tax and accounting records of the fee: legal obligation.
• To send a rate-card correction during your access year: contract.
• We do not send marketing. If we ever ask to, we will ask for consent first, separately from enrolment.

Who else sees it

Our email host and our card payment provider process data so we can reply and take the fee. They act on our instructions for those tasks. We do not sell personal information and we do not pass learners to pension providers.

When you load this website, your browser requests fonts from fonts.bunny.net and the styling and icon files from cdn.jsdelivr.net. Those hosts see your IP address and ordinary technical details as part of delivering the files. We do not control their logs. The lessons themselves are not on those networks.

How long we keep it

• Enquiries that do not become an enrolment: 24 months, then deleted, unless we need the thread for a complaint.
• Learner records and fee records: six years after your access ends, for tax and in case of a dispute about what was provided.
• Local storage of your cookie choice: until you clear it in your browser. We never see it.

Your rights

Under UK GDPR you can ask for a copy of your information, ask us to correct it, ask us to delete it, ask us to restrict it, and object to use based on legitimate interests. Where the basis is contract and the data is in a portable form, you can ask for it in a common format. You can also complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or via ico.org.uk. We would like the chance to put a mistake right first.

The course is for adults. We do not knowingly enrol anyone under 18. If you believe a young person has given us information, email the studio and we will delete it.