Data Protection


Policy Statement


Personal data must be processed lawfully, fairly and in a transparent manner.  It is a requirement of the GDPR that individuals are provided with the following information when their personal data is collected:


  • The identity and contact details of the Data Controller and its representative.
  • The purposes for which the personal data is being collected.
  • The legal basis for the processing of the personal data.
  • Who the personal data may be shared with, if applicable.
  • Details of any transfer of the personal data to a country outside of the EEA, which does not have an adequacy decision.
  • The period for which the personal data will be stored or, where that is not possible, the criteria used to determine that period.


Individuals must also be informed of the existence of the following rights:


  • The right to subject access.
  • The right to rectification and erasure of personal data in certain circumstances.
  • Where the processing is based on consent, the right to withdraw that consent.
  • The right to lodge a complaint with a supervisory authority.
  • Whether the data subject is obliged to provide the personal data and the consequences of failure to provide such data.
  • Where applicable, the existence of automated decision making as well as the significance and envisaged consequences of such processing for the data subject.


Where United Learning intends to process the personal data for a purpose other than that for which it was originally collected United Learning will, prior to that further processing, provide the individuals concerned with information on that other purpose.

Please see Privacy notice policy.