Privacy Policy
At Braintech-Blueprint, we are dedicated to safeguarding your personal data with the highest standards of privacy and security. This Privacy Policy outlines our practices for collecting, using, storing, and protecting your information in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Your trust is paramount to us. We are committed to transparency, ensuring you understand how your data is handled and your rights are respected. By engaging with our services, including our website, courses, and support platforms, you consent to the practices described in this policy. We encourage you to read this document carefully and contact us with any questions.
What Information We Collect
We collect various types of information to provide, improve, and personalise our services. The data we collect depends on how you interact with us, such as through our website, course registrations, or customer support channels.
- Personal Information: Your name, email address, phone number, billing address, and other contact details provided during registration, inquiries, or purchases.
- Usage Data: Data on how you interact with our website and services, such as pages visited, time spent, and links clicked, to enhance user experience.
- Transaction Data: Details of your purchases, payments, subscriptions, or course enrolments, including payment method information (processed securely via third-party providers).
- Technical Data: Information about your device, browser type, IP address, operating system, and other technical details to ensure compatibility and security.
- Communication Data: Records of your correspondence with us, including emails, support tickets, and feedback forms, to address your inquiries effectively.
We only collect data that is necessary for the purposes outlined in this policy and strive to minimise data collection to protect your privacy.
How We Use Your Information
Your data enables us to deliver high-quality services and maintain a secure, user-friendly platform. We use your information for the following purposes:
- Service Delivery: To provide access to our courses, process enrolments, and deliver personalised learning experiences.
- Transaction Processing: To facilitate payments, issue invoices, and send transaction-related updates or confirmations.
- Communication: To respond to inquiries, provide customer support, and send important notices such as policy updates or course reminders.
- Platform Improvement: To analyse usage patterns and feedback to enhance our website, services, and user experience.
- Security and Compliance: To protect our platform from fraud, unauthorised access, or misuse and to comply with legal obligations.
- Marketing (Optional): With your consent, we may send promotional materials, newsletters, or updates about new courses and services. You can opt out at any time.
We ensure that all data processing is lawful, based on legal grounds such as your consent, contractual necessity, or our legitimate interests, balanced against your rights and freedoms.
Data Sharing and Third Parties
We do not sell or rent your personal data to third parties. However, we may share your information with trusted partners or service providers under strict conditions to support our operations:
- Service Providers: We engage third-party providers for payment processing, cloud storage, analytics, or customer support. These providers are contractually obligated to protect your data and process it only as instructed.
- Legal Obligations: We may disclose your data to comply with legal requirements, such as court orders, regulatory investigations, or to protect our rights and safety.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, with continued protection under this policy.
All third parties we work with are carefully vetted to ensure they meet our privacy and security standards. Where applicable, we use data processing agreements to enforce compliance with data protection laws.
Data Security
We implement robust technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security practices include:
- Encryption: All sensitive data is encrypted in transit using TLS and at rest using industry-standard encryption protocols.
- Access Controls: Strict access controls ensure that only authorised personnel can access personal data on a need-to-know basis.
- Regular Audits: Conducting security assessments and audits to identify and address vulnerabilities proactively.
- Secure Infrastructure: Our systems are hosted on trusted cloud platforms with built-in security features and compliance certifications.
While we strive to ensure the highest level of security, no online transmission or storage method is 100% secure. In the unlikely event of a data breach, we will notify affected users and relevant authorities in accordance with legal requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable laws and regulations. Our retention periods are as follows:
- Account Data: Retained for the duration of your relationship with us and for up to 7 years after account closure for legal and auditing purposes.
- Transaction Records: Kept for 7 years to comply with financial and tax regulations.
- Communication Data: Retained for 3 years after the last interaction, unless required longer for legal purposes.
- Usage Data: Anonymised or deleted after 24 months as part of our data minimisation practices.
When data is no longer required, we securely delete or anonymise it to prevent unauthorised access or use.
Your Rights
Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to certain legal obligations.
- Right to Restriction: Request that we limit the processing of your data in specific circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format to transfer to another service provider.
- Right to Object: Object to the processing of your data for direct marketing or other purposes based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent for data processing at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@braintechblueprint.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:
- Email: info@braintechblueprint.com
- Address: 143, Lawrence Hill, Bristol, BS5 0BT, United Kingdom
- Phone: +44 7898018575
This Privacy Policy was last updated in January 2025. We reserve the right to update this policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant updates via email or a prominent notice on our website.