Our Commitment to GDPR
bold-dawn is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and have implemented appropriate measures to protect your personal data.
Data Controller Information
bold-dawn acts as the data controller for personal information collected through this website and our educational services.
Contact details:
42 Financial District
Leeds, LS1 4AP
United Kingdom
Email: [email protected]
Your Rights Under GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month of receipt.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond promptly to rectify any errors.
Right to Erasure
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we limit how we use your data in certain situations, such as when you contest the accuracy of data or object to processing.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month.
Lawful Bases for Processing
We process personal data under the following lawful bases:
- Consent: Where you have given clear consent for us to process your data for a specific purpose
- Contract: Where processing is necessary for a contract we have with you, such as course enrolment
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights
- Legal Obligation: Where processing is necessary to comply with the law
Data Protection Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Staff training on data protection
- Access controls and authentication
- Regular backup procedures
Data Breach Procedures
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.
Supervisory Authority
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. The current version will always be available on our website.
Last updated: August 2026