GDPR Compliance

pulse-jump is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we protect your personal data and your rights under these regulations.

1. Data Controller

pulse-jump is the data controller responsible for your personal data. Our contact details are:

pulse-jump
47 Queen Square
Bristol BS1 4LH
United Kingdom

Email: [email protected]

2. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Right to Rectification

You have the right to request correction of any incomplete or inaccurate personal data we hold about you. We may need to verify the accuracy of the new data you provide.

Right to Erasure

You have the right to request the deletion or removal of your personal data in certain circumstances, including:

• Where the data is no longer necessary for the purpose it was collected
• Where you withdraw consent and there is no other legal basis for processing
• Where you object to processing and there are no overriding legitimate grounds
• Where the data has been unlawfully processed
• Where the data must be erased for compliance with a legal obligation

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, including:

• Where you contest the accuracy of the data
• Where processing is unlawful and you prefer restriction over erasure
• Where we no longer need the data but you need it for legal claims
• Where you have objected to processing pending verification

Right to Data Portability

You have the right to request the transfer of your personal data to you or to a third party. We will provide your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation that makes you want to object. You also have the right to object to direct marketing at any time.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently make any decisions based solely on automated processing.

3. How to Exercise Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need additional time (up to two additional months) for complex requests, and we will notify you if this is the case.

You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

4. Lawful Bases for Processing

We only process your personal data when we have a lawful basis to do so. The lawful bases we rely on are:

Consent

Where you have given clear consent for us to process your personal data for a specific purpose, such as marketing communications.

Contract

Where processing is necessary for the performance of a contract with you (e.g., providing our educational programmes).

Legitimate Interests

Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override these interests.

Legal Obligation

Where processing is necessary to comply with a legal obligation.

5. Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness and transparency: We process data lawfully, fairly, and in a transparent manner.
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
• Data minimisation: We only collect data that is adequate, relevant, and limited to what is necessary.
• Accuracy: We keep personal data accurate and up to date.
• Storage limitation: We keep data only as long as necessary.
• Integrity and confidentiality: We process data securely.
• Accountability: We are responsible for demonstrating compliance.

6. Data Security Measures

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Access controls and authentication procedures
• Staff training on data protection
• Secure disposal of data when no longer needed

7. Data Breach Procedures

In the event of a personal data breach, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours where required
• Notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms
• Document all breaches, including facts, effects, and remedial action taken

8. Children's Data

As an educational service for children, we take particular care when processing children's personal data. We obtain parental consent before collecting personal data about children under 13. We minimise the personal data collected from children and ensure it is processed lawfully and securely.

9. Complaints

If you are not satisfied with how we handle your personal data or wish to make a complaint, please contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: www.ico.org.uk
Helpline: 0303 123 1113

10. Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.