GDPR Compliance Statement

Last updated: May 26, 2026

Our Commitment to Data Protection

fluidor-spark is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines how we ensure compliance and protect your personal data.

Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., enrollment in programs)
  • Contract: Processing is necessary for a contract we have with you
  • Legal obligation: Processing is necessary to comply with the law
  • Legitimate interests: Processing is necessary for our legitimate interests (e.g., improving our services)

Data We Collect and Why

Enrollment and Service Delivery

When you enroll in our programs, we collect:

  • Parent/guardian contact information
  • Child's name and age
  • Relevant information about learning needs or requirements

Purpose: To deliver educational services and communicate about programs.

Legal basis: Contract and consent.

Website Analytics

We collect basic website usage data through cookies.

Purpose: To improve website functionality and user experience.

Legal basis: Legitimate interests and consent (where required).

Your GDPR Rights

Under UK GDPR, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

We will respond to your request within one month. If your request is complex or numerous, we may extend this period by two further months, and we will inform you of this.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Staff training on data protection
  • Regular backups and recovery procedures

Data Retention

We retain personal data only for as long as necessary:

  • Enrollment data: Retained for the duration of program participation plus 2 years for record-keeping purposes
  • Email correspondence: Retained for up to 3 years
  • Financial records: Retained for 6 years in accordance with UK tax law

Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

  • Service providers who help us deliver our services (under strict data processing agreements)
  • Legal and regulatory authorities when required by law

All third-party processors are required to maintain GDPR compliance.

International Data Transfers

We do not transfer personal data outside the United Kingdom. If this changes, we will ensure appropriate safeguards are in place and inform you accordingly.

Children's Data

While our services are for children and teenagers, we collect personal data from parents/guardians who have parental responsibility. We take extra care to protect children's information and ensure all processing is lawful and appropriate.

Data Breach Notification

In the event of a data breach that poses a risk to individuals' rights and freedoms, we will:

  • Notify the Information Commissioner's Office (ICO) within 72 hours
  • Inform affected individuals without undue delay
  • Take immediate steps to mitigate the breach

Contact Our Data Protection Officer

For questions specifically about data protection and GDPR compliance:

Email: [email protected]
Subject line: "Data Protection Inquiry"

Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Website: fluidor-spark.com
Helpline: 0303 123 1113

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or prominent notice on our website.