Privacy Policy

At the British Design Academy, we are committed to safeguarding and preserving the privacy of our visitors.

This is a statement of the UK General Data Protection Regulation (UK GDPR) compliance policy adopted by the British Design Academy. In delivering our services, we collect and use personal information only where it is relevant to our work. All data is controlled, stored, and processed in accordance with the Data Protection Act 2018 and the UK GDPR, regardless of whether it is collected on paper, in electronic form, or by other means.

We consider the lawful and correct treatment of personal information critical to maintaining the confidence of our clients; we therefore manage and process all personal data transparently and securely.

We update this Policy from time to time, so please review it regularly.

Under the UK GDPR and the Data Protection Act 2018, information is defined as "Personal Data" if it relates to an identifiable living individual.

To determine if data is personal, we consider whether:

• Identity: A living individual can be identified from the data (either on its own or combined with other information we hold).

• Focus: The data is "obviously about" or "linked to" a specific individual, making them the central theme.

• Impact: The information is used to inform or influence actions and decisions affecting that person.

• Significance: The data has biographical significance or impacts a person in their personal, family, or professional life.

• Sensitive Data: We take extra care with "Special Category Data"—such as information regarding health, ethnicity, or beliefs. We only collect this when absolutely necessary (for example, to support specific student accessibility requirements) and apply enhanced security measures to protect it.

• Our Commitment: We strictly adhere to the Principles of Data Protection as set out in the Data Protection Act 2018 and the UK GDPR.

In accordance with the UK GDPR, British Design Academy ensures that all personal data is:

1. Lawfulness, Fairness, and Transparency: Processed lawfully, fairly, and in a transparent manner in relation to the individual.

2. Purpose Limitation: Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

3. Data Minimisation: Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

4. Accuracy: Accurate and, where necessary, kept up to date; every reasonable step is taken to ensure that inaccurate personal data is erased or rectified without delay.

5. Storage Limitation: Kept in a form which permits identification of individuals for no longer than is necessary for the purposes for which the personal data are processed.

6. Integrity and Confidentiality: Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures.

7. Accountability & International Transfers: The British Design Academy is responsible for, and able to demonstrate compliance with, the principles above (The Accountability Principle). Furthermore, personal data shall not be transferred to a country or territory outside of the UK unless that country ensures an adequate level of protection for the rights and freedoms of data subjects, or specific safeguards (such as Standard Contractual Clauses) are in place.

The British Design Academy ensures the integrity of your data through rigorous management and strict operational controls. We commit to:

• Fairness and Transparency: Observing all conditions regarding the fair collection and use of information.

• Purpose Specification: Meeting our legal obligation to clearly specify the purposes for which your information is used.

• Data Minimisation: Collecting and processing only the information necessary to fulfil operational needs or to comply with legal requirements.

• Accuracy and Quality: Ensuring the information we hold is accurate, adequate, and regularly updated.

• Storage Limitation: Applying strict retention checks to ensure data is held for no longer than is necessary.

• Security: Implementing robust technical and organisational measures to safeguard your personal information against unauthorised access or loss.

• International Transfers: Ensuring personal information is not transferred outside the UK unless that territory provides an adequate level of protection as required by the UK GDPR.

Individual Rights

We ensure that the people about whom we hold information can fully exercise their rights under the Data Protection Act 2018 and UK GDPR. These include:

1. The Right to be Informed: To know how and why your data is being processed.

2. The Right of Access: To request a copy of the personal information we hold about you.

3. The Right to Rectification: To have inaccurate or incomplete data corrected.

4. The Right to Erasure: To request the deletion of your data (where there is no compelling reason for its continued processing).

5. The Right to Restrict Processing: To "block" or suppress the processing of your personal data.

6. The Right to Data Portability: To obtain and reuse your personal data for your own purposes across different services.

7. The Right to Object: To object to processing based on legitimate interests or direct marketing.

All information storage and processing systems at the British Design Academy are designed with security and compliance at their core. To ensure the highest standards, we guarantee that:

• Staff Responsibility: All personnel who handle or manage personal data are contractually and legally obligated to follow the UK GDPR and best data protection practices.

• Training and Supervision: Our team receives appropriate training and supervision to ensure data is handled securely and professionally.

• Transparency for Enquiries: We provide clear pathways for anyone wishing to make enquiries about their personal information, ensuring all requests are handled promptly and courteously.

• Clear Documentation: Our methods for handling and managing personal data are clearly defined and documented.

• Audit and Evaluation: We conduct regular reviews and audits of our data management processes to evaluate performance, assess security, and ensure ongoing compliance with current legislation.

Information Processing: General

The British Design Academy is committed to transparency in how we handle your data.

​

Automated Decision-Making We do not use automated decision-making or profiling techniques to process your personal data. All decisions regarding your enrollment and education are made by our team.

​

Subject Access Requests (SAR) Under the UK GDPR, you have the right to request a copy of the personal information we hold about you. To do so, please contact our Data Protection Officer (details provided below).

​

• Format: We will provide your data in a secure, structured, and commonly used electronic format (such as a PDF or Excel file).

• Cost: In most cases, this service is provided free of charge, unless the request is unfounded or excessive.

• Timeline: We aim to respond to all valid requests within one month.

Internet Security While we implement robust technical measures to protect your data, please be aware that the transmission of information via the internet is never entirely secure. While we do our utmost to protect your personal data, any information sent to us electronically is transmitted at your own risk. Once we receive your data, we apply strict security protocols to prevent unauthorised access.

At the British Design Academy, we collect and use information to manage our student relationships, deliver our courses, and conduct our marketing activities.

How we obtain your data:

• Directly from you: When you make an enquiry, enrol in a course, or contact us via email.

• Automatically: Through technology like cookies and IP tracking when you visit our website.

• Third Parties: Occasionally through relevant forms or professional networks.

Note on choice: You are never required to provide personal data; however, if you decline to provide information necessary for a service (such as enrollment or payment), we may be unable to deliver that service to you.

 

The Types of Data We Collect:

Identity & Contact - First and last name, postal address, phone number, and email address.

Demographic - Profession, country, and preferred language.

Payment Data - We do not collect or store sensitive payment details (such as credit card numbers). Payments are processed securely via our external banking partners; our systems never see or store your full financial data.

Location Data - Imprecise location data derived from your IP address (e.g., city or postcode level) to help improve our online services.

Communication Content - The content of emails, instant messages, and physical documents provided during a project. This includes subject lines, message bodies, and any attachments.

Audio/Visual - Audio or video recordings from video messages or attachments, and transcripts of telephone calls or voice messages, where necessary for service delivery.

We use the information we collect to deliver our educational services and ensure a high-quality experience for our students. Specifically, we process your data for the following purposes:

• Service Delivery: To provide the courses you have enrolled in and to fulfill our contractual obligations to you.

• Requested Information: To respond to your enquiries and provide specific details about our courses and services that you have requested.

• Academy Updates & Marketing: To share information about other courses or events we believe may interest you. We will only send this information if you have given us your explicit consent to do so.

Managing Your Data If you would like to manage, edit, or delete the personal information we hold about you, please refer to the "How to Access and Control Your Personal Data" section of this privacy statement.

You have the right to view, edit, or delete the personal data we hold about you at any time.

• How to make a request: You can submit your request in writing via our Contact Form or by emailing us directly.

• What to include: To help us process your request quickly, please include "Access to my personal data" in the subject line or message box, followed by any specific details regarding your request.

• Our response time: We will respond to all requests to access, rectify, or delete your personal data within one month.

• Identity Verification: For your protection, we may ask you to verify your identity before we release or delete any personal information.

We want you to have full control over how you hear from us. You can manage your preferences at any time:

• Unsubscribe: You may opt out of receiving marketing communications by clicking the 'unsubscribe' link included at the bottom of every email we send.

• Direct Request: You can also contact us directly via our website or email to request that your details be removed from our marketing lists.

• Processing Time: Once you opt out, we will update our records immediately, though it may take up to 48 hours for our systems to fully process the change.

Please Note: If you are a current student, opting out of marketing will not stop you from receiving essential "Service Emails" related to your course, such as enrollment confirmations, schedule changes, or tutor feedback.

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We will only disclose your information in the following limited circumstances:

• Service Providers: We may share your information with trusted third-party service providers who perform functions on our behalf (such as email delivery services, website hosting, or payment processors). These providers are contractually obligated to protect your data and are not permitted to use it for any other purpose.

• Legal Requirements: Where we are legally required by law to disclose your personal information (for example, to HMRC or other regulatory bodies).

• Safety and Fraud: To further fraud protection, reduce the risk of credit fraud, or protect the rights, property, and safety of the British Design Academy and our students.

• Business Transfers: In the event that the British Design Academy is sold or integrated with another business, your details may be disclosed to our advisers and any prospective purchasers.

On occasion, we include links to third-party websites (such as design resources, software tools, or partner organisations).

• No Endorsement: Providing a link does not mean that the British Design Academy endorses or approves that site’s privacy policy.

• Your Responsibility: We encourage you to review the privacy policy of any third-party site before sending them any personal data, as we have no control over how they manage your information.

Access to Information

In accordance with the Data Protection Act 2018 and the UK GDPR, you have the right to access any information that we hold relating to you. Please refer to our "How to Access and Control your Personal Data" section for details on how to make a request.

Cookies are small text files stored by your web browser on your computer or mobile device. They are widely used to make websites work more efficiently and to provide information to the owners of the site.

Types of Cookies We Use:

• Session Cookies: These are temporary and are removed from your computer as soon as you close your browser. They are used for essential functions, such as remembering items in a shopping basket or keeping you logged in during a visit.

• Persistent Cookies: These remain on your device until they expire or you delete them. These are often used to anonymously track how visitors interact with our website, allowing us to analyse data and improve the user experience for our students.​

​​

Why We Use Cookies: We use cookies to enhance your experience, remember your preferences, and understand how our website is being used. While cookies do not give us access to your computer or any information about you other than the data you choose to share with us, they are essential for certain features of the site to function correctly.

​

Managing Cookies: Most web browsers allow you to control cookies through their settings. You can choose to accept or decline cookies; however, please note that disabling cookies may prevent you from taking full advantage of the British Design Academy website.

The British Design Academy uses cookies and similar technologies for the following essential and analytical purposes:

• Preferences and Settings: To remember your language, browser, and multimedia settings so you don't have to reset them on every visit.

• Security: To help us detect fraud or abuse of our website and services.

• Data Entry: To temporarily store information you provide in website forms to ensure a smooth user experience.

• Social Media: To enable "share" functions for users logged into social media services.

• Analytics & Performance: To gather usage data (such as unique visitor counts) and use load-balancing to ensure our website remains fast and reliable.

​

JOOMLASESSIONID - An essential session cookie used by our Joomla CMS for administrative login and site security. Duration - Session

CONTACT ENHANCED- Used when you submit an enquiry. We store this data securely for 36 months to fulfill your request. Duration - 36 Months

GOOGLE ANALYTICS Includes _ga, _gid, and _gat. These collect anonymous data on how visitors use our site. Duration - 1 min to 2 years

​

A Note on Google Analytics: Neither the British Design Academy nor Google associate your IP address with any personally identifiable information. These cookies simply allow us to see if you are a returning visitor and which pages are most helpful to our students. You can read more about Google’s privacy policy here.

​

Managing and Refusing Cookies

Most browsers allow you to refuse to accept cookies. However, please note that blocking cookies may have a negative impact on the usability of our website.

Browser-Specific Instructions:

• Google Chrome

• Mozilla Firefox

• Opera

Opting Out of Analytics: You can specifically opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on.

If you have any questions regarding this Privacy Policy, our data practices, or if you wish to exercise any of your rights, please contact British Design Academy:

• Email: admin@britishdesignacademy.co.uk

• Web: Via the Contact Form on our website.

• Response Time: We aim to respond to all data-related enquiries within one month.