GDPR Compliance Statement

Last updated: August 4, 2026

Overview

iris-seal.com is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Data Controller

For the purposes of data protection legislation, iris-seal.com acts as the data controller for personal information collected through this website.

Contact: [email protected]

Address: 142 Cathedral Road, Cardiff CF11 9LJ, United Kingdom

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To fulfil our obligations under a contract with you (course enrolment and delivery)
• Legitimate Interests: To improve our services and communicate relevant information
• Legal Obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request that we limit the processing of your personal data under specific conditions.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You can object to processing of your personal data for direct marketing purposes or based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "GDPR Request". We will respond to your request within one month.

Data Protection Officer

For questions related to data protection, you can contact our team at [email protected].

Data Transfers

Your personal data is processed and stored within the United Kingdom and European Economic Area. We do not transfer personal data outside these regions without appropriate safeguards.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)

Website: ico.org.uk

Telephone: 0303 123 1113

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.