This content is promotional in nature

GDPR Compliance

Last Updated: September 23, 2026

Our Commitment to Data Protection

Prime-raven is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights as a data subject.

Data Controller Information

For the purposes of data protection legislation, prime-raven acts as the data controller for personal information collected through our website and course enrollment processes.

Contact: [email protected]
Address: 127 St Vincent Street, Glasgow, G2 5JF, United Kingdom

Lawful Basis for Processing

We process your personal data under the following lawful bases:

  • Contract: Processing necessary to fulfill our contract with you when you enroll in courses
  • Legitimate Interest: Operating our educational services, improving our website, and communicating relevant course information
  • Consent: Marketing communications and optional features, which you can withdraw at any time
  • Legal Obligation: Compliance with UK tax, accounting, and education regulations

Your Rights Under GDPR

UK GDPR grants you specific rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this within one month of receiving your request, free of charge for the first copy.

Right to Rectification

If personal information we hold is inaccurate or incomplete, you can request correction. We will update our records promptly upon verification.

Right to Erasure

You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent. Note that legal obligations may require us to retain some information.

Right to Restriction

You can request that we limit how we use your data while a complaint or request is being resolved, or if you believe the data is inaccurate.

Right to Data Portability

For data you provided with consent or under contract, you can request a copy in a structured, machine-readable format for transfer to another service provider.

Right to Object

You can object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant consequences for you.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with:

  • Your full name and email address used for course enrollment
  • Specific right you wish to exercise
  • Any relevant details to help us locate your information

We will respond within one month. If your request is complex, we may extend this by two additional months and will notify you of the reason for delay.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security:

  • Encryption of data in transit and at rest
  • Access controls limiting who can view personal information
  • Regular security assessments and updates
  • Staff training on data protection practices
  • Secure disposal procedures for data no longer needed

Data Breach Procedures

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Information Commissioner's Office within 72 hours of becoming aware
  • Inform affected individuals without undue delay if the breach poses a high risk
  • Provide information about the nature of the breach and steps being taken

Third-Party Processors

We work with carefully selected third-party processors who may access personal data to provide services on our behalf. All processors are bound by data processing agreements ensuring GDPR compliance and appropriate security measures.

Data Retention Periods

We retain personal data only as long as necessary:

  • Course enrollment records: 7 years for accounting purposes
  • Marketing consent: Until withdrawn or 3 years of inactivity
  • Website analytics: Anonymized after 14 months
  • Communication records: 2 years unless part of enrollment records

International Transfers

Your data is primarily stored and processed within the United Kingdom. Any transfers outside the UK are protected by appropriate safeguards including adequacy decisions or standard contractual clauses approved by the ICO.

Children's Data

For courses involving children under 13, we require parental or guardian consent. Parents have the right to access, correct, or delete their child's information at any time.

Updates to Our Practices

We regularly review our data protection practices to ensure continued compliance. Material changes will be communicated through our website and directly to enrolled students where appropriate.

Complaints and Regulatory Authority

If you believe your data protection rights have been violated, you can:

  • Contact us directly to resolve the issue
  • Lodge a complaint with the Information Commissioner's Office (ICO)

ICO Contact Information:
Website: ico.org.uk
Telephone: 0303 123 1113

Questions and Contact

For any questions about our GDPR compliance or data protection practices, contact us at [email protected]

Return to Home