We currently collect and process personal identifiable information such as; name, organisation and other contact details

We collect contact information about you when we interact with you, such as you register or attend one of our courses, we meet you at an event, we provide a quote for you or deliver a project where we work alongside you. 

We use the information that you have given us for legitimate business interests. This includes:

• Processing and managing your a training course registration
• Communicating with you about your orders or purchases, our services, and to provide support where you contact us;
• Business, regulatory and legal purposes, such as annual audits, payments and invoices.
• Communicate with you about our organisation or to send you updates or similar newsletters (but only where you have told us you want to receive these communications and you have not told us to stop sending you messages).
• Any other legitimate business reason

We may share this information with 

1. Other data controllers
   1. Where you have registered and paid for a training course on our website, we may share your contact information about with the relevant merchant, only for the purposes of effecting payment.
   2. We might also share your information with a merchant to investigate and resolve support issues you experience or where you notify us of a complaint about a merchant or the goods or services you purchase from them.
   3. Where we do share your information with a merchant in this way, they will become a new data controller of your information and will contact you to let you know about this and how they use and protect your information.
   4. The information we share might include:
      1. Information that can be used to identify you;
      2. Detailed transaction data;
      3. Where you have raised a support issue or notified us of a complaint about a merchant or the goods or services you purchase from them, the nature of the issue or complaint.
      4. Where you make payments using our services, we share your data with the merchant and they process your transactions. The merchant may share your information with third parties including regulators, your bank and the operators of the card schemes.  

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are: 

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting info@rupe.co.uk.

(b) We have a contractual obligation.

(c) We have a legal obligation.

(d) We have a vital interest.

(e) We need it to perform a public task.

(f) We have a legitimate interest.

Your information is securely stored electronically with third party cloud services provided by organisations such as Microsoft and Google.  We do not create or retain printed records.

In most cases we will process your information only for as long as we need to in order to provide the services or until you ask us to stop processing your information.

You can ask us to stop processing your information or change the way in which we use it by:

1. Emailing info@rupe.co.uk
2. Writing to us at Bridfel, The Street, Bredhurst, Gillingham, ME7 3LJ

There are some exceptions to this where we may have other lawful grounds for processing your information (for example, to comply with our statutory or regulatory duties or the orders of a court).  For example, we might be required to retain your personal data for a longer period (usually up to six years after you stop carrying out business with us) or tell us to stop but this may vary depending on the territory in which you use the service) in order to comply with applicable law, tax obligations or regulatory requirements.  This might apply to information about the transactions you make, when and you make transactions and the information we hold about you for fraud and other crime prevention purposes.  If we do retain your information in this way, we will cease other forms of processing and we will continue to keep your information secure.

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information. 

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us by emailing info@rupe.co.uk or writing to us at Bridfel, The Street, Bredhurst, Gillingham, ME7 3LJ if you wish to make a request.

If you have any concerns about our use of your personal information, you can make a complaint to us by emailing info@rupe.co.uk or writing to us at Bridfel, The Street, Bredhurst, Gillingham, ME7 3LJ if you wish to make a request.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:      

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk