Privacy Policy

Welcome to PT Course Co (www.ptcourseco.uk, “we”, “our”, or “us”). We take your privacy seriously and are committed to safeguarding the personal data you provide to us. This Privacy Policy explains in detail how we collect, use, disclose, and protect your information, and outlines your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws.

By accessing or using our website, you agree to the practices described in this Privacy Policy.

1. Who We Are

Business Name: PT Course Co
Website: www.ptcourseco.uk
Data Controller Contact: 📩 louise@ptcourseco.uk

As the data controller, PT Course Co determines the purposes and means of processing your personal data. We are responsible for ensuring that your personal data is processed in compliance with applicable data protection laws.

2. What Personal Data We Collect

We may collect, use, store, and transfer various types of personal data about you, which we have grouped as follows:

Identity Data: Full name, date of birth, and gender.
Contact Data: Email address, telephone number, billing and delivery addresses.
Financial Data: Payment details collected via Stripe (we do not store payment information on our servers).
Technical Data: IP address, browser type and version, time zone setting, operating system, and platform.
Usage Data: Information on how you use our website, products, and services.
Marketing and Communications Data: Preferences in receiving marketing from us and your communication preferences.
Profile Data: Purchases or orders made by you, your interests, preferences, feedback, and survey responses.

3. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

Direct Interactions: You provide data when you:
- Complete online forms.
- Register for a course or service.
- Correspond with us by email or phone.
- Sign up for newsletters or marketing communications.
Automated Technologies or Interactions:
- As you interact with our website, we may automatically collect Technical Data via cookies, server logs, and similar technologies.
- We use Google Analytics to help us analyse how users interact with the website.
Third Parties:
- Payment Processing: Financial transactions are securely processed by Stripe.
- Analytics Providers: Such as Google Analytics for website performance insights.

4. Legal Basis for Processing Your Personal Data

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following:

Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications).
Contract: Processing is necessary to fulfil a contract with you (e.g., providing a course you have purchased).
Legal Obligation: Processing is necessary for compliance with a legal obligation (e.g., tax reporting).
Legitimate Interests: Processing is necessary for our legitimate interests, provided these do not override your rights (e.g., improving our services, fraud prevention, and website analytics).

5. How We Use Your Personal Data

We will use your personal data only for the purposes for which we collected it, including:

Providing access to our services and courses.
Processing and managing payments securely via Stripe.
Sending transactional and service-related communications.
Personalising user experiences and delivering relevant website content.
Conducting analytics to understand usage patterns and improve our services.
Complying with legal requirements, such as record-keeping for tax purposes.
Delivering targeted marketing communications (with consent).

Marketing:
You can opt out of marketing communications at any time by following the opt-out links on any marketing email sent to you or by contacting louise@ptcourseco.uk.

6. Disclosure of Your Personal Data

We may share your personal data with the following third parties for the purposes outlined in this policy:

Service Providers: Including payment processors (Stripe) and analytics providers (Google Analytics).
Professional Advisers: Lawyers, bankers, auditors, and insurers where necessary for business operations.
Regulatory Authorities: If we are under a duty to disclose or share your personal data to comply with legal obligations.
Business Transfers: In the event of a merger, sale, or acquisition, your data may be transferred to new owners.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

7. International Transfers

If we transfer your personal data outside the UK, we ensure that it is protected by:

Transferring to countries with adequacy regulations recognised by the UK government.
Using standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).
Implementing additional safeguards such as encryption during transmission.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed unlawfully. These measures include:

SSL encryption for all data transmissions.
Secure payment processing via Stripe, which complies with PCI DSS standards.
Access control and regular data security assessments.

9. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying legal, accounting, or reporting requirements.

Retention Periods:

User account data: retained until the account is deleted.
Financial data: retained for at least 6 years for tax purposes.
Marketing data: retained until you opt out of marketing communications.

10. Your Rights Under UK GDPR

You have the right to:

Access: Obtain a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your data when there is no compelling reason for its continued processing.
Restriction: Request restriction of processing in certain circumstances.
Data Portability: Receive personal data you provided to us in a structured, commonly used format and have the right to transmit it to another data controller.
Objection: Object to the processing of your personal data where we rely on legitimate interests.
Withdraw Consent: Withdraw consent at any time for processing based on consent.
Complaint: Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

📩 To exercise any of these rights, contact us at louise@ptcourseco.uk.

11. Cookies

Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our website.

Types of Cookies:

Essential Cookies: Necessary for website functionality.
Performance Cookies: Help us understand how visitors interact with our website.
Targeting Cookies: Record your visit to our website, pages visited, and links followed to make our content more relevant.

Managing Cookies:
You can adjust your browser settings to refuse some or all browser cookies. However, blocking cookies may affect your user experience.

12. Children’s Privacy

Our website and services are not intended for individuals under the age of 13. We do not knowingly collect data from children. If we discover that we have inadvertently collected such data, we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Effective Date” at the top. If we make substantial changes, we may notify you by email.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact:

📩 louise@ptcourseco.uk