Privacy Policy
At Braintech-Blueprint, we are dedicated to safeguarding your personal data with the highest standards of privacy and security. This Privacy Policy outlines our practices for collecting, using, storing, and protecting your information in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Your trust is paramount to us. We are committed to transparency, ensuring you understand how your data is handled and your rights are respected. By engaging with our services, including our website, courses, and support platforms, you consent to the practices described in this policy. We encourage you to read this document carefully and contact us with any questions.
What Information We Collect
We collect various types of information to provide, improve, and personalize our services. The data we collect depends on how you interact with us, such as through our website, course registrations, or customer support channels. The categories of information include:
- Personal Information: This includes your name, email address, phone number, billing address, and other contact details provided during registration, inquiries, or purchases.
- Usage Data: We collect data on how you interact with our website and services, such as pages visited, time spent, and links clicked, to enhance user experience.
- Transaction Data: Details of your purchases, payments, subscriptions, or course enrollments, including payment method information (processed securely via third-party providers).
- Technical Data: Information about your device, browser type, IP address, operating system, and other technical details to ensure compatibility and security.
- Communication Data: Records of your correspondence with us, including emails, support tickets, and feedback forms, to address your inquiries effectively.
We only collect data that is necessary for the purposes outlined in this policy and strive to minimize data collection to protect your privacy.
How We Use Your Information
Your data enables us to deliver high-quality services and maintain a secure, user-friendly platform. We use your information for the following purposes:
- Service Delivery: To provide access to our courses, process enrollments, and deliver personalized learning experiences.
- Transaction Processing: To facilitate payments, issue invoices, and send transaction-related updates or confirmations.
- Communication: To respond to inquiries, provide customer support, and send important notices, such as policy updates or course reminders.
- Platform Improvement: To analyze usage patterns and feedback to enhance our website, services, and user experience.
- Security and Compliance: To protect our platform from fraud, unauthorized access, or misuse and to comply with legal obligations.
- Marketing (Optional): With your consent, we may send promotional materials, newsletters, or updates about new courses and services. You can opt out at any time.
We ensure that all data processing is lawful, based on legal grounds such as your consent, contractual necessity, or our legitimate interests, balanced against your rights and freedoms.
Data Sharing and Third Parties
We do not sell or rent your personal data to third parties. However, we may share your information with trusted partners or service providers under strict conditions to support our operations. These scenarios include:
- Service Providers: We engage third-party providers for payment processing, cloud storage, analytics, or customer support. These providers are contractually obligated to protect your data and process it only as instructed.
- Legal Obligations: We may disclose your data to comply with legal requirements, such as court orders, regulatory investigations, or to protect our rights and safety.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, with continued protection under this policy.
All third parties we work with are carefully vetted to ensure they meet our privacy and security standards. Where applicable, we use data processing agreements to enforce compliance with data protection laws.
Data Security
We implement robust technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Using industry-standard encryption (e.g., SSL/TLS) to secure data transmission and storage.
- Access Controls: Restricting data access to authorized personnel with strict authentication protocols.
- Regular Audits: Conducting security assessments and audits to identify and address vulnerabilities.
- Incident Response: Maintaining a comprehensive plan to respond to and mitigate data breaches promptly.
While we strive to ensure the highest level of security, no online transmission or storage method is 100% secure. In the unlikely event of a data breach, we will notify affected users and relevant authorities in accordance with legal requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal, regulatory, or contractual obligations. Retention periods vary based on the type of data and purpose:
- Account Data: Retained for the duration of your active account or enrollment, plus a reasonable period for administrative purposes (e.g., 2 years after account closure).
- Transaction Data: Kept for 7 years to comply with tax and financial regulations.
- Usage Data: Anonymized and retained for analytics purposes, with identifiable data deleted after 12 months.
When data is no longer needed, we securely delete or anonymize it to prevent unauthorized use. You may request deletion of your data at any time, subject to legal retention requirements.
International Data Transfers
As a UK-based organization, we primarily process data within the United Kingdom. However, some of our service providers may be located outside the UK or European Economic Area (EEA), necessitating international data transfers.
We ensure that any international transfer complies with data protection laws by using appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs): Legally binding agreements approved by the UK Information Commissioner’s Office to ensure data protection.
- Adequacy Decisions: Transferring data to countries recognized by the UK as having adequate data protection standards.
- Binding Corporate Rules: For intra-group transfers within multinational service providers, ensuring consistent data protection practices.
We regularly review our transfer mechanisms to ensure ongoing compliance with data protection regulations.
Your Rights
Under the UK GDPR and Data Protection Act 2018, you have several rights regarding your personal data. We are committed to facilitating the exercise of these rights, which include:
- Right to Access: You can request a copy of the personal data we hold about you, typically provided within one month.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data promptly.
- Right to Erasure: You can request the deletion of your data when it is no longer necessary or if you withdraw consent, subject to legal obligations.
- Right to Restrict Processing: You can request that we limit the use of your data in certain circumstances, such as while a complaint is being resolved.
- Right to Data Portability: You can request your data in a structured, machine-readable format to transfer to another provider.
- Right to Object: You can object to data processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
To exercise these rights, please contact us using the details in the “Contact Us” section. We may need to verify your identity to process your request. There is no fee for exercising your rights, unless the request is manifestly unfounded or excessive.
Contact Us
If you have questions, concerns, or wish to exercise your data protection rights, please reach out to our Data Protection Officer. We are here to assist you promptly and transparently.
- Email: contact@braintechblueprint.co.uk
- Phone: +44 7898018575
- Address: 143, Lawrence Hill, Bristol BS5 0BT, United Kingdom
You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. Significant updates will be communicated to you via email or a prominent notice on our website.
The latest version of this policy will always be available on this page, with the effective date indicated below. We encourage you to review it regularly to stay informed about how we protect your data.
Effective Date: April 26, 2025
Our Commitment to You
At Braintech-Blueprint, your privacy is not just a legal obligation but a core value. We are dedicated to maintaining the trust you place in us by handling your data responsibly and transparently. Thank you for choosing us as your partner in learning and professional development.
If you have any further questions or need assistance, our team is ready to support you. Together, we can ensure your data is protected while you focus on achieving your goals.