Privacy Policy
Last updated: 1 January 2024
ByteWise Academy Ltd ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or use our training services.
ByteWise Academy Ltd is registered in Scotland (Company No: SC412867) with its registered office at 18 Castle Street, Edinburgh, EH2 3AT, United Kingdom. For the purposes of data protection law, we are the data controller.
1. Information We Collect
1.1 Data You Provide Directly
- Identity & contact data: Name, email address, telephone number, postal address.
- Enquiry data: The contents of messages you submit through our contact form, including service preferences.
- Learning account data: Login credentials and profile details if you register for our online learning hub.
- Transaction data: Billing details for training sessions, processed securely via our third-party payment provider. We never store your complete card details on our servers.
1.2 Data Collected Automatically
- Device & technical data: IP address, browser type, operating system, screen resolution.
- Usage data: Pages viewed, time on site, referral source, navigation patterns.
- Cookie data: As described in our Cookie Policy.
2. Legal Bases & Purposes
We process your personal data only where we have a lawful basis to do so:
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Responding to your enquiries | Legitimate interest / Contract |
| Providing training services you have purchased | Performance of a contract |
| Processing payments | Performance of a contract |
| Sending service-related communications | Legitimate interest |
| Sending promotional emails (only with permission) | Consent |
| Analysing website usage to improve our services | Legitimate interest |
| Complying with legal or regulatory obligations | Legal obligation |
3. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We may share it with:
- Technology & service providers: Hosting, payment processing, analytics, and email delivery partners who process data on our behalf under strict contractual terms.
- Legal or regulatory bodies: Where required by law, court order, or governmental request.
- Business successors: In the event of a merger, acquisition, or asset sale, with appropriate data protection safeguards.
4. Data Retention
- Enquiry records: Retained for up to 24 months after last contact.
- Client & financial records: Retained for 6 years in compliance with HMRC requirements.
- Marketing preferences: Held until you withdraw consent or unsubscribe.
- Website analytics data: Aggregated and anonymised after 26 months.
5. Your Rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the right to:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Ask us to correct inaccurate or incomplete information.
- Erasure — Request deletion of your data where there is no compelling reason for continued processing.
- Restriction — Ask us to limit how we process your data in certain situations.
- Portability — Receive your data in a structured, machine-readable format.
- Objection — Object to processing based on legitimate interests or direct marketing.
- Withdraw consent — Where we rely on consent, you may withdraw it at any time without affecting prior processing.
To exercise any right, email us at data@bytewiseacademy.co.uk or write to us at the address above. We will respond within 30 calendar days.
6. Data Security
We take the security of your data seriously and implement appropriate measures including:
- SSL/TLS encryption on all pages
- Encrypted data storage and secure server infrastructure
- Role-based access controls for staff
- Regular penetration testing and security reviews
- Staff data protection training
While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your data.
7. International Transfers
Your personal data is primarily stored within the United Kingdom. Where any data is transferred outside the UK, we ensure adequate safeguards are in place such as the UK Government's adequacy regulations or International Data Transfer Agreements (IDTAs).
8. Children
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.
9. Updates to This Policy
We may revise this Privacy Policy periodically. Any changes will be published on this page with an updated date. We recommend checking this page regularly. Material changes may also be communicated via email where appropriate.
10. Contact & Complaints
For any privacy-related questions or to exercise your rights:
- Email: data@bytewiseacademy.co.uk
- Post: Data Protection Lead, ByteWise Academy Ltd, 18 Castle Street, Edinburgh, EH2 3AT
- Phone: 0131 496 0028
If you are dissatisfied with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.