GDPR Compliance

Last updated: 19 August 2026

Our Commitment to Data Protection

arc-maple is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

arc-maple is the data controller responsible for your personal data. Our contact details are:

arc-maple
42 Sunbridge Road
Bradford, BD1 2AE
United Kingdom
Email: [email protected]

Your Rights Under UK GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. This is known as a subject access request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling in our processing of your personal data.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using the details provided above. We will respond to your request within one month, though this may be extended by two further months if your request is complex.

Right to Complain

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Data Processing Activities

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you submit enquiry forms or contact us
• Contract: When you enrol in our courses
• Legitimate interests: To respond to enquiries and improve our services

Categories of Personal Data

We collect and process the following categories of personal data:

• Identity data: name
• Contact data: email address, postal address
• Communications data: your enquiries and our responses
• Technical data: cookie preferences

Data Recipients

We may share your personal data with:

• Service providers who process data on our behalf under strict data processing agreements
• Professional advisers when necessary
• Regulatory authorities when required by law

International Transfers

We do not routinely transfer personal data outside the United Kingdom. If we need to do so in the future, we will ensure appropriate safeguards are in place.

Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: retained for up to two years from last contact
• Course participant data: retained for up to seven years for educational records
• Financial records: retained for up to seven years in compliance with tax law

Security Measures

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Updates to This Information

We may update this GDPR compliance information from time to time. The "Last updated" date at the top of this page indicates when the most recent changes were made.