GDPR Compliance

Our Commitment to GDPR

folded-globe is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we meet our obligations and protect your rights.

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you book a programme or submit enquiries through our forms
• Contract: To fulfill our obligations when you register for our services
• Legitimate Interests: To operate and improve our website and services, where not overridden by your rights
• Legal Obligation: When required to comply with UK law

Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this within one month of your request.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request that we correct it.

Right to Erasure

You can request that we delete your personal data in certain circumstances, such as when it's no longer necessary for the purpose we collected it.

Right to Restriction of Processing

You can ask us to restrict how we use your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transfer it to another controller.

Right to Object

You can object to our processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent as the lawful basis for processing, you can withdraw your consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.

Data Controller

folded-globe is the data controller responsible for your personal information.

Contact details:
Email: [email protected]
Address: 142 Kensington High Street, London W8 7RL, United Kingdom

Data Protection Principles

We ensure that all personal data is:

• Processed lawfully, fairly, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and kept up to date
• Kept only as long as necessary
• Processed securely with appropriate technical and organizational measures

International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

Data Security Measures

We implement appropriate technical and organizational security measures including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

Children's Data

While our services are designed for children and teenagers, we collect personal data from parents and guardians. Any data about children is collected with parental consent and processed in accordance with additional protections required under UK GDPR.

Third-Party Processors

We may use third-party service providers to process data on our behalf. All processors are carefully selected and required to:

• Process data only on our documented instructions
• Maintain appropriate security measures
• Comply with UK GDPR requirements
• Have a written data processing agreement in place

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with:

• Your full name
• Your email address
• Details of your request

We will respond within one month. In complex cases, we may extend this by two further months and will inform you of the extension.

ICO Contact Information

If you wish to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Helpline: 0303 123 1113
Website: folded-globe.com

Updates to This Policy

We may update this GDPR compliance statement as regulations or our practices change. Please check this page regularly for updates.