GDPR Compliance

Last updated: June 2026

1. Our Commitment to GDPR

jolly-courses is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we fulfil our obligations under these regulations.

2. Data Controller

jolly-courses acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.

Contact details:
Email: [email protected]
Address: 47 Pembroke Lane, London, SW1A 2BN, United Kingdom

3. Lawful Bases for Processing

We only process personal data when we have a valid lawful basis. The bases we rely on include:

• Consent: When you voluntarily provide information through our contact forms
• Legitimate interests: To operate our business, improve our services, and communicate with prospective clients
• Contractual necessity: When processing is required to fulfil a service agreement
• Legal obligation: When we must comply with applicable laws

4. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You can request deletion of your personal data where there is no compelling reason for its continued processing.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

5. Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit using SSL/TLS
• Regular review of information collection and processing practices
• Restricted access to personal information to authorised personnel only
• Secure storage of physical documents

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:

• Enquiry form submissions: 24 months
• Client project records: 7 years (for legal and accounting purposes)
• Website analytics data: 26 months

7. International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with data protection legislation.

8. Data Breach Procedures

In the event of a personal data breach, we have procedures in place to:

• Assess the risk to individuals' rights and freedoms
• Notify the Information Commissioner's Office within 72 hours where required
• Communicate with affected individuals when the breach is likely to result in high risk

9. Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. There is no fee for most requests, although we may charge a reasonable fee for repetitive or manifestly unfounded requests.

10. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Telephone: 0303 123 1113

11. Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.