Privacy Policy

1. Introduction

Ridge-kudu ("we", "our", "us") is committed to protecting the privacy of all individuals who interact with our services. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, enrol in our courses, or communicate with us.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect information in the following ways:

Information you provide directly:

• Name and contact details when you register for courses
• Email address when you subscribe to communications
• Payment information when you purchase courses
• Correspondence when you contact us with enquiries
• Feedback and survey responses

Information collected automatically:

• IP address and browser type
• Pages visited and time spent on our website
• Referring website information
• Device information

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing course registrations and payments
• Delivering course materials and communications
• Responding to your enquiries and requests
• Sending relevant updates about our programmes (with your consent)
• Improving our website and services
• Complying with legal obligations

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to fulfil our contract with you (e.g., course delivery)
• Consent: Where you have given explicit consent (e.g., marketing communications)
• Legitimate interests: Where processing is necessary for our legitimate business interests
• Legal obligation: Where we must comply with legal requirements

5. Data Sharing

We do not sell your personal information to third parties. We may share your data with:

• Payment processors to handle transactions securely
• Email service providers to deliver communications
• Professional advisers where required
• Regulatory authorities when legally required

All third parties are contractually bound to protect your data and use it only for specified purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure server infrastructure
• Regular security assessments
• Staff training on data protection
• Access controls limiting who can view personal data

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

• Course records: 7 years after course completion
• Financial records: 7 years as required by law
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months

8. Your Rights

Under data protection law, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limited processing of your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us using the details below.

9. Children's Privacy

Our youth programmes serve children aged 8-17. For participants under 16, we require parental or guardian consent before collecting personal information. Parents and guardians can request access to, correction of, or deletion of their child's information at any time.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or a prominent notice on our website. We encourage you to review this policy regularly.

11. Contact Us

For questions about this Privacy Policy or our data practices, please contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.