Data protection and GDPR compliance

Lawful basis

We process data based on legitimate interests (responding to enquiries), contractual necessity (delivering services), and consent (optional cookies or marketing preferences).

Data categories

• Contact and organisational details.
• Programme preferences and reading objectives.
• Site usage data when analytics cookies are enabled.

Your rights

• Right to access and receive a copy of your data.
• Right to rectify inaccurate information.
• Right to erasure where applicable.
• Right to restrict or object to processing.
• Right to data portability for data you provided.

Data security

We use access controls, secure storage, and supplier agreements to protect personal data. Only authorised staff have access to client information.

International transfers

We store data within the UK or European Economic Area whenever possible. If a transfer is required, appropriate safeguards are applied.

Making a request

To exercise your rights, email [email protected]. We aim to respond within one month.