Privacy Policy and
Cookies

1. Who we are

The website www.clairegadsby.com is operated by:

• Claire Gadsby Associates
• Company number: 08927709
• Registered in England and Wales
• Registered address: Dragonfly Cottage, 22 Manor Road, Bladon, Oxfordshire, OX20 1RU

For questions about this Privacy Policy or how we use your personal data, please contact:

• Email: info@clairegadsby.com
• Telephone: 07983 993777
• Post: Claire Gadsby Associates, Dragonfly Cottage, 22 Manor Road, Bladon, Oxfordshire, OX20 1RU

Claire Gadsby Associates is the data controller for personal data collected through this website, unless we tell you otherwise.

2. What personal data do we collect?

The information we collect depends on how you interact with us.

Information you provide to us:

• Your name
• Email address
• Telephone number
• School, organisation or company name
• Job title or professional role
• Information you provide when making an enquiry
• Information you provide when requesting training, consultancy or other services
• Information provided when completing a booking, consultation or contact form
• Information you provide when subscribing to marketing communications
• Information relating to purchases, bookings or services you receive from us

We will only request information that is relevant to the purpose for which we are collecting it.

Information collected automatically:

When you visit our website, certain technical information may be collected automatically. Depending on the website configuration and your cookie choices, this may include:

• IP address
• Browser type and version
• Device and operating system information
• Website pages visited
• Referring website
• Approximate location derived from technical information
• Information about how you interact with our website

Some of this information may be collected using cookies or similar technologies. Please see our Cookie Policy below.

We do not intend to collect sensitive personal data through this website unless it is specifically necessary and there is a lawful basis for doing so.

3. How do we use your personal data?

We use personal data only where we have a lawful basis to do so.

Depending on how you interact with us, we may use your information to:

• Respond to enquiries and requests
• Arrange consultations, meetings and training
• Provide our services
• Manage bookings and contracts
• Communicate with schools, organisations and clients
• Process payments and invoices
• Provide information about our services
• Send marketing communications where you have consented to receive them or where another lawful basis permits us to do so
• Manage subscriptions to newsletters or other communications
• Improve our website, services and customer experience
• Understand how visitors use our website
• Maintain the security of our website, systems and services
• Comply with legal and regulatory obligations
• Establish, exercise or defend our legal rights

We will not use your personal data for a new purpose that is incompatible with the original purpose without first considering whether we are permitted to do so and, where required, informing you.

4. Our lawful bases for processing

Under the UK GDPR, we must have a lawful basis for processing personal data.

Depending on the circumstances, we may rely on the following lawful bases:

• Contract: We may process personal data where this is necessary to enter into or perform a contract with you, for example when providing training, consultancy or other services.
• Legitimate interests: We may process personal data where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

This may include: Managing and developing our business; Responding to business enquiries; Managing relationships with existing clients; Improving our services; Maintaining website and information security; Understanding and improving our website and services.

Where we rely on legitimate interests, we will consider whether the processing is necessary and proportionate and whether your interests and rights override our interests.

• Consent: We may rely on your consent where the law requires consent, including for certain marketing communications or non-essential cookies. Where we rely on consent, you can withdraw that consent at any time.
• Legal obligation: We may process personal data where this is necessary for us to comply with a legal or regulatory obligation.

5. Marketing communications

We may occasionally send information about Claire Gadsby Associates, our training, consultancy, resources, events, publications or other services.

Where consent is required, we will only send marketing communications where you have actively opted in.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication or by contacting us at info@clairegadsby.com.

If you withdraw consent, this will not affect the lawfulness of processing carried out before you withdrew your consent.

We will not sell your personal information to third parties for their own marketing purposes.

6. Who do we share personal data with?

We may share personal data with trusted organisations where this is necessary to operate our business or provide our services.

These may include:

• Website hosting and technical service providers
• Email and communication providers
• Booking and form providers
• Payment service providers
• Accounting and invoicing providers
• Website analytics providers
• Marketing and email distribution providers
• Professional advisers, such as accountants, insurers or legal advisers
• IT and security providers
• Government, regulatory or law-enforcement bodies where we are legally required to do so

Where another organisation processes personal data on our behalf, we will take appropriate steps to ensure that the organisation provides appropriate security and processes personal data only in accordance with our instructions and applicable law.

7. International transfers

Some of the organisations we use to operate our website and business may process personal data outside the UK.

Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law.

Depending on the circumstances, this may include transferring data to a country recognised as providing an adequate level of protection or using appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or UK Addendum.

Where required, we will provide further information about the safeguards used for international transfers.

8. How long do we keep your personal data?

We will only keep personal data for as long as it is reasonably necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements.

Retention periods will depend on the type of information and why we hold it.

As a general guide:

• Website enquiries: For as long as reasonably necessary to deal with the enquiry and any resulting relationship
• Client and service information: For the duration of the client relationship and for a reasonable period afterwards
• Financial and accounting records: For the period required by applicable legal and accounting requirements
• Marketing subscriptions: Until you unsubscribe or the data is otherwise no longer required
• Website analytics: In accordance with the settings and retention periods applied to the relevant analytics service
• Cookies: According to the lifespan of the individual cookie and your consent choices

We may retain certain information for longer where this is necessary to establish, exercise or defend legal claims or to comply with a legal obligation.

9. How do we protect your information?

We take reasonable technical and organisational measures to protect personal data against:

• Unauthorised access
• Loss
• Misuse
• Accidental destruction
• Unauthorised disclosure
• Unauthorised alteration

Where appropriate, these measures may include secure connections, access controls, password protection, appropriate permissions and security measures provided by our technology suppliers.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

10. Cookies and similar technologies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that can help websites function, remember preferences and understand how visitors use a website.

• Strictly necessary cookies: Some cookies are necessary for the website to function properly. These may include cookies required for security, website functionality or remembering choices that are essential to the service you have requested. These cookies do not require consent where they are genuinely necessary for the service.
• Analytics and other non-essential cookies: We may use analytics or other non-essential technologies to understand how visitors use our website and improve our services. Where consent is required, these technologies will only be activated after you have provided consent. You can change or withdraw your cookie preferences at any time through our cookie settings.

For further information, please see our Cookie Policy.

11. Third-party content and websites

Our website may contain links to or embedded content from third-party websites and services, such as social media platforms, video platforms or other external websites.

When you interact with third-party content, those organisations may collect information in accordance with their own privacy policies.

We do not control the privacy practices of third-party websites and recommend that you review their privacy policies before providing personal information.

12. Your data protection rights

Depending on the circumstances, you have rights under UK data protection law, including:

• Right to be informed: You have the right to know how we use your personal data.
• Right of access: You can ask for a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete information.
• Right to erasure: In certain circumstances, you can ask us to delete your personal data.
• Right to restrict processing: In certain circumstances, you can ask us to restrict how we use your personal data.
• Right to data portability: In certain circumstances, you can ask us to provide your personal data in a structured, commonly used and machine-readable format.
• Right to object: You may have the right to object to certain processing, including processing based on legitimate interests and direct marketing.
• Right to withdraw consent: Where we rely on consent, you can withdraw your consent at any time.

These rights are subject to certain legal conditions and exemptions, meaning they do not apply in every circumstance.

For further information or to exercise your rights, please contact info@clairegadsby.com

13. How to make a data protection request

If you wish to exercise any of your rights, please contact us using the details above.

We may need to ask you for information to verify your identity before responding to your request. This is a security measure designed to ensure that personal information is not disclosed to the wrong person.

We will normally respond to a valid request within one month, although this may be extended where permitted by law for complex or multiple requests.

14. Complaints

We encourage you to contact us first if you have any concerns about how we use your personal data so that we have an opportunity to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

You can find information about making a complaint on the ICO's website: Information Commissioner's Office (ICO).

15. Children and young people

Our website is primarily intended for adults, including teachers, school leaders, education professionals, parents and organisations.

We do not knowingly use this website to directly collect personal information from children for marketing purposes.

Where our services involve children or young people, including educational programmes or resources, the organisation responsible for providing those services may have additional responsibilities relating to children's personal data.

Where personal data relating to children is processed through a separate product, platform or service, additional privacy information may apply.

16. Automated decision-making and profiling

We do not currently use personal data collected through this website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide the information required by applicable data protection law.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we process personal data.

When we make significant changes, we will update the date at the top of this Privacy Policy and, where appropriate, provide additional notice.

We recommend checking this page periodically to ensure that you are aware of the latest version.

18. Contact us

If you have any questions about this Privacy Policy or how Claire Gadsby Associates handles personal data, please contact:

• Claire Gadsby Associates: Dragonfly Cottage, 22 Manor Road, Bladon, Oxfordshire, OX20 1RU
• Email: info@clairegadsby.com
• Telephone: 07983 993777