GDPR Information

Your Data Protection Rights Under GDPR

The General Data Protection Regulation (GDPR) and UK data protection laws provide you with specific rights regarding your personal information. This page explains those rights and how to exercise them.

Data Controller

waythapter is the data controller responsible for your personal information. We are committed to protecting your privacy and ensuring transparent data practices.

Your Individual Rights

1. Right to Be Informed

You have the right to clear information about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR page.

2. Right of Access

You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

3. Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. We will update your data and notify relevant third parties where applicable.

4. Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: We may retain certain information where required by law or for legitimate business purposes such as financial record-keeping.

5. Right to Restrict Processing

You can request that we limit how we use your data in specific circumstances, such as when you contest the accuracy of the data or object to processing.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

7. Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8. Rights Related to Automated Decision Making

We do not use automated decision-making or profiling in our enrollment or educational processes.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with your request. Please include:

• Your full name and contact information
• Clear description of which right you wish to exercise
• Any relevant details to help us locate your information

We will verify your identity before processing requests to protect your data security.

Response Timeline

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will notify you of the extension.

No Fee Required

Exercising your GDPR rights is free of charge. However, we may charge a reasonable fee or refuse to act on a request if it is clearly unfounded, repetitive, or excessive.

Right to Complain

If you believe we have not handled your data properly or violated your rights, you can lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and inform the ICO within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer your personal data outside the United Kingdom. All data is stored and processed within UK-based systems.

Data Protection Officer

For questions specifically related to data protection practices, you can contact our data protection representative at [email protected].

Updates to GDPR Practices

We regularly review our data protection practices to ensure ongoing compliance with GDPR requirements. Any material changes will be communicated through our website.