GDPR Compliance

Last Updated: July 13, 2026

Our Commitment to Data Protection

slate-plateau is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our data protection responsibilities seriously and have implemented appropriate measures to ensure your personal information is processed lawfully, fairly, and transparently.

Data Controller Information

slate-plateau acts as the data controller for personal information collected through our website and course enrollment processes. We are responsible for determining how and why your personal data is processed.

Contact Details:
slate-plateau
47 Cromwell Road
Belfast BT7 1JW
United Kingdom
Email: info@slate-plateau.com

Your Rights Under GDPR

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request." We will provide this information within one month of receiving your request, free of charge.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to your request within one month.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes it was collected or if you withdraw consent.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

Where technically feasible and when processing is based on consent or contract, you can request that we transfer your personal data to another organization or provide it to you in a structured, commonly used format.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. We do not currently use automated decision-making processes.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at info@slate-plateau.com with your request. Include your full name and contact details, and specify which right you wish to exercise. We may need to verify your identity before processing your request.

We aim to respond to all legitimate requests within one month. If your request is particularly complex or you have made multiple requests, it may take longer, but we will inform you of any extension and the reasons for it.

Lawful Bases for Processing

We process your personal data based on the following lawful bases:

  • Contract: Processing is necessary to perform our contract with you when you enroll in courses
  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Legitimate Interests: Processing is necessary for our legitimate interests in operating and improving our educational services
  • Legal Obligation: Processing is necessary to comply with legal requirements such as tax and accounting obligations

Data Protection Principles

We ensure that all personal data we process adheres to the following principles:

  • Processed lawfully, fairly, and transparently
  • Collected for specified, explicit, and legitimate purposes
  • Adequate, relevant, and limited to what is necessary
  • Accurate and kept up to date
  • Kept only as long as necessary
  • Processed securely with appropriate technical and organizational measures

International Data Transfers

We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as adequacy decisions or standard contractual clauses.

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach poses a high risk to you, we will also inform you directly without undue delay.

Third-Party Processors

We work with carefully selected third-party service providers who process personal data on our behalf. These processors are contractually bound to implement appropriate security measures and only process data according to our documented instructions in compliance with UK GDPR.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can attempt to resolve the issue. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our data processing practices or legal requirements. Please check this page regularly for updates.