Privacy Policy, GDPR

1.  Your Privacy

“GalaxyAdventures” respects your privacy and does not share your data and email address with other organisations except those involved within the specific qualifications or training sessions and courses.

Users can use the information on this website for research for courses, training and for entertainment. We accept no liability for this information or any digital viruses. By viewing this website, you agree to the usage at your own risk.

We do our best to prevent hacking or cybercrime.

 2.  What type of information we hold.

We hold your title, name, address, DOB, contact number, email address Email communications and our payment gateways hold the financial information.

This is when you contact us directly or through our site, through the RLSS UK website or the specific course and for the purposes of qualifications as required for processing.

This is for the course duration and the required time 7 years.

First Aid & Incident information is recorded at the sites and a statement by us and first aid form.

The first aid is for the required time as stated within the current First Aid regulations.

 3.  How we get the information and what we do with it.

Most of the personal information we process is provided to us directly by you for one of the following reasons: Interested in a course, training, communication’s or being on a course. Buying something including entertainment or consultancy.

We capture, process and retain data when submitted and or provided to us for the purposes of:

Entertainment.

Qualifications, Courses and training

Invoicing, approval, registration, updates, reminders.

recording, assessing, training and for evidence.

Making decisions.

booking’s and enquiries.

Producing a record

Planning, preparing and carry out quality assurance

Complying with requests.

Quality assurance

Audits

Analysing.

Statements for business.

Informing staff, sub contractors, businesses and individuals.

Responding to data requests.

Awarding organisations and businesses.

Legal obligations

Issuing certificates, statements

Communications

Complying with requests from awarding organisations and businesses.

Complying with standards organisations the awarding Organisations and businesses.

Checking and validation of certificate and courses and training.

Analysing and producing information.

Risk Rating.

Sending reminders, messages and Emails.

Processing Qualifications and appeals.

Sending updates, Marketing materials, Marketing and research.

Business communications.

Producing business documents.

Phone and video recording for the purpose of evidence, training and marketing.

The information is collected through emails, via phone and on the specific course forms online or on hard copy.

Through business communication.

This information is also collected on our website for marketing, communication and any E-Learning courses.

This information is from yourselves or parent/guardian and or a business.

This is for our contractual obligation and for any legal reasons.

Your consent is asked for on the forms and on the specific online course forms.

The information is shared with the specific course awarding body as stated on the specific courses. This is shared on the forms, via emails and through the E-Learning programmes. We also receive your data indirectly from company’s for the purpose of a course, training or entertainment.

You right to withdraw consent must be in writing, through our website or via email and this will be confirmed.

The email address is on our website.

The information that you provide is for the purpose of the qualifications, training, communication and certificate’s.

Your data would be shared with the RLSS UK and the specific awarding body’s as stated on the qualification or training course, the involved business and also if requested by law.

This will be done via letter, email and also over the phone or message.

Automated decision making and profiling that is made with the information may be used by the awarding body’s.

There is no statutory requirement to consent to collating, processing and retaining their personal data.

However a person/business chooses to withdraw consent then this will be withdrawn and will be unable to process any paperwork submitted, delivered and sent, this includes any qualifications and training certificates.

4.  How we store your information.

We store your data on forms for the specific course as requested by them and for our processing in the folder. This is stored on hard copy and in locked storage. This is behind closed doors.  Electronic storage with secure businesses.

The information we intend to keep for the duration of the qualification and 7 years from that date.

This information will then be securely destroyed by the specific business and us and disposed of by shredding any paperwork and any emails communication will be deleted after the course has completed and or within the required time 7 years and is all processed.

Digitally, electronically deleted.

E-Learning data is stored with the specific operating company as specified within the course upon registering.

5.  Your data protection rights.

If you would like to make a request, restriction, to limit, temporarily limit or delete your data then please request directly to our organisation and say what data you want restricted and why.

If you would like you can make a request for restriction at the same time as you raise another objection.

This request can be verbal or inwriting. The request we prefer in writing because this will allow you to explain your concern, give evidence and state your desired solution. It will also provide clear proof of your actions and our response.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting us as above.  (b) We have a contractual obligation.  (c) We have a legal obligation.  (d) We have a vital interest.  (e) We need it to perform a public task.  (f) We have a legitimate interest.

Under data protection law, you have rights including:

1.     Your right of access - You have the right to ask us for copies of your personal information.

2.     Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

3.     Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

4.   Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.

5.     Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.

6.   Your right to data portability  - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us if you wish to make a request.

If you are unhappy with how the organisation has handled your request please advise us.

6. How to complain

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire.

SK9 5AF.   Helpline number: 0303 123 1113.