Privacy Policy

Introduction

Brilliant Cascade Limited ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store, and protect data when you interact with our website or engage our services.

We are registered with the Information Commissioner's Office (ICO) under registration number ZA123456 and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we collect

We collect and process various types of personal information depending on how you interact with us:

Information you provide directly

When you contact us via email or engage our services, you may provide:

• Name and job title
• Email address and contact details
• Organisation name and industry
• Details about your training requirements
• Any other information you choose to share in correspondence

Information collected automatically

When you visit our website, we automatically collect certain technical information:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website or source
• Date and time of visit

This information is collected through cookies and similar technologies. See our Cookies Policy for details.

Information from programme participants

If you participate in our training programmes, we may collect:

• Programme registration details
• Assessment responses and learning progress
• Feedback and evaluation responses
• Professional development records

How we use your information

We process your personal information for specific, lawful purposes:

Service delivery

We use your information to deliver our professional development services, including programme design, facilitation, and post-programme support. This processing is necessary for the performance of our contract with you or your organisation.

Communication

We use contact details to respond to enquiries, provide programme information, and maintain ongoing communication with clients. We process this data based on our legitimate interest in operating our business and fulfilling contractual obligations.

Improvement and development

We analyse anonymised data from programme evaluations and website analytics to improve our services and understand how people interact with our content. This processing is based on our legitimate interest in developing better training solutions.

Legal compliance

We retain certain records to comply with legal obligations, including tax and accounting requirements, under which we must keep business records for specified periods.

Marketing

We may contact existing clients about related services we believe might interest them, based on our legitimate interest in business development. You can opt out of such communications at any time by emailing us or using the unsubscribe function in our messages.

Legal basis for processing

We process personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to deliver our services to you or your organisation
• Legitimate interests: Processing necessary for our business operations, provided this doesn't override your rights and freedoms
• Legal obligation: Processing required to comply with laws and regulations
• Consent: Where you have given clear permission for specific processing activities

How we protect your information

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction:

• Encrypted data transmission using SSL/TLS protocols
• Access controls limiting who can view personal information
• Regular security assessments and updates
• Staff training on data protection responsibilities
• Secure backup procedures
• Contractual safeguards with third-party processors

Data retention

We retain personal information only as long as necessary for the purposes for which it was collected:

• Enquiry data: Deleted within two years if no business relationship develops
• Client records: Retained for seven years following completion of services to meet accounting and legal requirements
• Programme materials: Participant data anonymised after three years or deleted if anonymisation isn't possible
• Website analytics: Retained for two years then automatically deleted

After retention periods expire, we securely delete or anonymise data so it can no longer identify individuals.

Sharing your information

We do not sell personal information to third parties. We share data only in limited circumstances:

Service providers

We engage trusted third parties to support our operations, including:

• Email and communication platforms
• Website hosting services
• Analytics providers
• Professional advisers (accountants, lawyers)

These providers process data only according to our instructions and under contractual obligations that ensure appropriate protection.

Legal requirements

We may disclose information when required by law, court order, or regulatory authority, or when necessary to protect our rights, property, or safety.

Business transfers

If we merge with, are acquired by, or sell assets to another organisation, personal data may be transferred as part of that transaction, subject to the same protections outlined in this policy.

International transfers

We primarily store and process data within the United Kingdom. Where we use service providers based outside the UK, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions recognising equivalent data protection standards
• Standard contractual clauses approved by UK authorities
• Certification schemes demonstrating adequate protection

Your rights

Under UK data protection law, you have several rights regarding your personal information:

Right of access

You can request a copy of the personal data we hold about you, along with information about how we use it.

Right to rectification

You can ask us to correct inaccurate or incomplete personal information.

Right to erasure

You can request deletion of your personal data in certain circumstances, such as when it's no longer necessary for the purpose it was collected or you withdraw consent.

Right to restrict processing

You can ask us to limit how we use your data in certain situations, such as whilst we verify its accuracy or assess whether we have legitimate grounds for processing.

Right to data portability

You can request your data in a structured, commonly used format to transfer to another service provider where processing is based on consent or contract and carried out by automated means.

Right to object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.

Rights related to automated decision-making

We do not make decisions with legal or similarly significant effects based solely on automated processing of personal data.

Exercising your rights

To exercise any of these rights, contact us at [email protected]. We will respond within one month, though complex requests may take up to three months with explanation for the delay.

Cookies

Our website uses cookies to improve functionality and understand how visitors use our site. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

Children's privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal information from individuals under 16 years of age. If we become aware we have inadvertently collected such information, we will delete it promptly.

Changes to this policy

We review this privacy policy periodically and update it to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you via email or a prominent notice on our website.

Contact and complaints

If you have questions about this privacy policy or how we handle your personal information, contact us:

Email: [email protected]
Address: Brilliant Cascade Limited, 42 Tavistock Street, Covent Garden, London WC2E 7PB

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: brilliant-cascade.com
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF