Est. In 2023.

The School of Civil Celebrancy - Data Protection and Privacy Policy

The School of Civil Celebrancy Ltd

Last reviewed: May 2026
Next review due: May 2027

The School of Civil Celebrancy Ltd is committed to protecting personal information and handling it lawfully, fairly and responsibly.

We follow the requirements of the UK General Data Protection Regulation, known as UK GDPR, and the Data Protection Act 2018. We also follow guidance issued by the Information Commissioner’s Office, known as the ICO.

This policy explains what personal information we collect, why we use it, how we store it, who may have access to it, and what rights individuals have.

Who we are

The School of Civil Celebrancy Ltd provides training, mentoring, assessment, support and related services.

For the purposes of data protection law, we are the data controller for the personal information we collect and use.

Contact details:

Rev’d J Matson-Higgins
Director
The School of Civil Celebrancy Ltd
Hedgerow House
505 Broadgate
Weston Hills
Spalding
PE12 6DB
United Kingdom

Email: hello@theschoolofcivilcelebrancy.co.uk

Telephone: 01273 974 958

What personal information we collect

We may collect and hold the following information:

  • Name
  • Address
  • Email address
  • Telephone number
  • Date of birth, where needed
  • Course or training information
  • Assessment information
  • Payment and invoice details
  • Communication records
  • Meeting or video-call information
  • Information provided through our website, learner portal, forms, emails or telephone calls
  • CCTV images, where applicable
  • Any other information provided to us so we can deliver our services

We only collect information that is needed for clear and lawful purposes.

Why we use personal information

We use personal information to:

  • Respond to enquiries
  • Process bookings and orders
  • Deliver courses, training, mentoring and assessments
  • Manage learner records
  • Provide certificates or confirmation of attendance, where applicable
  • Communicate with learners, clients and suppliers
  • Manage payments, invoices and accounts
  • Keep appropriate business and financial records
  • Improve our services
  • Meet legal, regulatory and insurance requirements
  • Keep our premises, staff, learners and visitors safe, including through CCTV where used

Our lawful basis for using information

Under UK GDPR, we must have a lawful reason for using personal information. The lawful bases we may rely on include:

Contract
Where we need to use personal information to provide a course, service, booking, assessment or related support.

Legal obligation
Where we must keep certain records, such as financial and accounting information.

Legitimate interests
Where we use information to run and manage the School of Civil Celebrancy Ltd, respond to enquiries, keep records, improve services, and protect the organisation.

Consent
Where we ask for permission, for example for certain marketing communications, photographs, testimonials or optional communications.

Marketing and communication

We may contact learners, clients and enquirers about our services, updates, courses or related information.

Where consent is required, we will ask for it. Individuals can unsubscribe or ask us to stop sending marketing communications at any time.

We may use systems such as Mailchimp or similar platforms to manage occasional mailouts.

Telephone calls and online meetings

Telephone calls may be recorded for training, quality, safeguarding, complaint handling or record-keeping purposes.

Online meetings, training sessions or assessments may take place through platforms such as Zoom, GoToMeeting or similar services.

Where a session is recorded, we will make this clear where possible.

Systems and service providers we use

To run our services, personal information may be stored or processed using trusted systems and service providers. These may include:

  • Mailchimp, for occasional mailouts
  • WooCommerce, for website orders or bookings
  • Really Simple Systems, for database and CRM records
  • Zoom, for meetings, training and assessment
  • GoToMeeting, for meetings, training and assessment
  • The School of Civil Celebrancy Learners Portal, Moodle, hosted by Hunken Group
  • Apple equipment and services, including iCloud, Apple Mail and iCal
  • Stackmail, for secure email and web hosting
  • Gamma, for telephone services
  • O2, for mobile communication
  • Xero, for accounts and invoices
  • PayPal, for online and card payments
  • CCTV and door entry systems, where used

These providers only process information where needed to provide their services to us. We do not sell personal information.

Sharing personal information

We do not share personal information unnecessarily.

We may share information where:

It is needed to deliver a course, service, assessment or booking

A trusted service provider processes information on our behalf

We are legally required to do so

It is required for accounting, insurance, safeguarding, legal or regulatory reasons

It is necessary to protect someone’s vital interests

The individual has given consent

Where service providers process personal information for us, we expect appropriate safeguards to be in place.

How long we keep information

We do not keep personal information for longer than necessary.

As a guide:

  • Learner, client and service records may be kept for up to five years after the most recent course, event or service.
  • Financial records may be kept for up to seven years, to meet statutory accounting and tax requirements.
  • Enquiry records, where no course, event or service takes place, may be kept for up to two years.
  • CCTV footage will only be kept for as long as necessary, unless it is needed for an incident, investigation, insurance matter or legal reason.

Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

This may include:

  • Password protection
  • Secure devices
  • VPN use where appropriate
  • Secure email and hosting
  • Access controls
  • Staff awareness and training
  • Secure disposal of information no longer required
  • Reviewing systems and processes

All team members who have access to personal information are expected to understand and follow their data protection responsibilities.

Working outside the UK

The School of Civil Celebrancy Ltd may occasionally work outside the UK, including in South Africa.

Where personal information is accessed, transferred or processed outside the UK, we will take steps to ensure that appropriate safeguards are in place.

The ICO explains that international transfers may need adequacy arrangements, an International Data Transfer Agreement, or another recognised safeguard.

Personal data breaches

If a personal data breach occurs, we will assess the risk and take appropriate action.

Where a breach is likely to result in a risk to people’s rights and freedoms, we will report it to the ICO without undue delay and, where required, within 72 hours of becoming aware of it.

Where necessary, we will also inform affected individuals.

Individual rights

Individuals have rights under UK GDPR. These include:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights relating to automated decision-making, where applicable
  • The right to withdraw consent, where we rely on consent

Not all rights apply in every situation, but we will always consider requests properly.

Subject access requests

Individuals have the right to ask for a copy of the personal information we hold about them.

This is known as a subject access request, or SAR.

A request can be made verbally or in writing. The ICO confirms that a SAR can be made verbally, in writing, or even through social media, as long as it is clear the person is asking for their own personal information.

We may need to ask for proof of identity before releasing information.

We will usually respond within one calendar month of receiving a valid request and any information needed to confirm identity.

Requests can be sent to:

Rev’d J Matson-Higgins
Director
The School of Civil Celebrancy Ltd
Hedgerow House
505 Broadgate
Weston Hills
Spalding
PE12 6DB
United Kingdom

Email: hello@theschoolofcivilcelebrancy.co.uk

Complaints

If anyone has concerns about how we use their personal information, they should contact us first so we can try to resolve the matter.

They also have the right to complain to the ICO, which is the UK supervisory authority for data protection. The ICO recommends that UK organisations tell people they can complain to the ICO and provide contact details.

ICO website: ico.org.uk
ICO helpline: 0303 123 1113

Review of this policy

This policy will be reviewed at least once every 12 months, or sooner if there are changes to the law, ICO guidance, our systems, or the way we use personal information.

error: Content is protected !!