Privacy Policy

At Quirky Zones ("we", "our", or "us"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

1. Information We Collect

1.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Educational background and professional experience
• Course progress and assessment results
• Payment information (processed securely through third-party providers)
• Communication records and support enquiries

1.2 Technical Information

We automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Website usage patterns and navigation data
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your personal data for the following purposes:

• Providing and managing our educational services
• Processing course enrollments and payments
• Communicating with you about courses, updates, and support
• Personalising your learning experience
• Improving our website and services
• Complying with legal obligations
• Marketing communications (with your consent)

3. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract Performance: To deliver our educational services
• Legitimate Interest: For website analytics and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: For compliance with educational and financial regulations

4. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Payment processors, email services, and hosting providers
• Educational Partners: Certification bodies and accreditation organisations
• Legal Authorities: When required by law or to protect our rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the ICO
• Certification schemes and codes of conduct

6. Data Retention

We retain your personal data for:

• Course Data: 7 years after course completion for certification purposes
• Financial Records: 6 years in accordance with UK tax law
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months maximum

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to exceptions)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Opt out of certain types of processing
• Right to Withdraw Consent: For consent-based processing

8. Cookies and Tracking

We use cookies and similar technologies to:

• Enable essential website functionality
• Remember your preferences and settings
• Analyse website performance and usage
• Provide personalised content and advertisements

You can manage your cookie preferences through our cookie banner or browser settings. Please see our Cookie Policy for detailed information.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure backup and disaster recovery procedures

10. Children's Privacy

Our services are designed for individuals aged 16 and over. We do not knowingly collect personal data from children under 16 without appropriate parental consent.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through:

• Email notification to registered users
• Prominent notice on our website
• Updated effective date at the top of this policy

12. Complaints and Regulatory Authority

If you believe we have mishandled your personal data, you can:

• Contact us directly using the details below
• Lodge a complaint with the Information Commissioner's Office (ICO)
• Seek legal remedies through the courts

ICO Contact Details:
Website: ico.org.uk
Helpline: 0303 123 1113