
Privacy Policy Last Updated: March 2026 ICO Registration: [Pending]
1. Introduction Ecademi Limited ("Ecademi", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, store, and share your personal information when you interact with us, including through our website, workshop bookings, CPD courses, conference events, and marketing communications.Ecademi Limited is registered in England and Wales (Company Number: 14156021) and registered with the Information Commissioner's Office (ICO) as a data controller.For questions about this policy, contact us at contact@ecademi.co
2. Data We CollectWebsite Enquiries and Lead-in Campaigns Name, email address, and phone number. Usage data including IP address, browser type, and pages visited.
Workshop Bookings (School Enrichment Programmes) Name and contact details of the booking teacher or school administrator. School name, address, and relevant administrative information. Number of students attending — no individual student personal data is collected directly by Ecademi.
CPD Course Registrations Name, email address, job title, and employing institution. Course completion data and assessment records where applicable.
Conference and Event Registrations Name, email address, job title, and institution. Dietary or accessibility requirements where voluntarily provided. Payment information — processed securely via third-party payment providers; we do not store card data.
Marketing and Newsletter Sign-ups Name, email address, and communication preferences.
3. Lawful Basis for Processing Under UK GDPR, we must have a lawful basis for each processing activity: Workshop and event bookings: Performance of a contract; CPD course administration; Performance of a contract and legitimate interests; Marketing communications: Consent — only sent where you have explicitly opted in; Website analytics: Legitimate interests; Legal and financial records: Legal obligation.
4. Children's Data and School Workshops We take the protection of children's data extremely seriously.We do not collect personal data directly from students (individuals under 18)All bookings are made by responsible adults — typically a teacher or school administratorWhere schools share information about student groups (such as group size), this is used solely for logistical purposes and is not retained beyond the workshopSchools are responsible for obtaining any necessary permissions from parents or guardiansIf you believe we have inadvertently collected data relating to a child, contact us immediately at contact@ecademi.co and we will delete it promptly.
5. How We Use Your Data To process bookings, registrations, and paymentsTo deliver and administer CPD-accredited courses and issue certificatesTo communicate with you about your booking or enquiryTo send marketing communications where you have consentedTo improve our website and servicesTo comply with legal and financial obligations.
6. Sharing Your Data We do not sell your personal data. We may share it with trusted third-party service providers including:Email marketing platformsWebsite hosting and analytics providersPayment processors — card data is handled directly by the processor and not stored by usCPD accreditation bodies, where course completion records must be submittedEvent venues, where delegate information is required for access or cateringWe may also disclose your data where required by law or regulatory authority.
7. International Data Transfers Some third-party providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses or equivalent protections. Contact us at contact@ecademi.co for further information.
8. Data Retention Booking and event registration data: 5 years from the date of the event, after which data may be anonymised and retained in aggregate formCPD course records and certificates: 6 years from course completionFinancial and payment records: 7 years (as required by HMRC)Marketing consent records: Until consent is withdrawn, plus 1 yearWebsite analytics data: 26 monthsEnquiry and correspondence records: 2 years from last contactMarketing list data is managed independently of event records and is retained until you unsubscribe or withdraw consent, regardless of when you last attended an event.
9. Cookies Our website uses cookies to help us understand how you use our site.Essential cookies: Necessary for the site to function — cannot be disabledAnalytics cookies: Help us understand website usage — only placed with your consentMarketing cookies: Track engagement with our content — only placed with your consentYou can manage or withdraw cookie consent at any time via the cookie settings on our website.
10. Your Rights Under UK GDPR you have the right to:Access — request a copy of the data we hold about youRectification — request correction of inaccurate dataErasure — request deletion of your dataRestriction — request we limit how we use your dataObjection — object to processing for direct marketing or legitimate interestsPortability — request your data in a machine-readable formatWithdraw consent — at any time where processing is based on consentTo exercise any of these rights, email contact@ecademi.co. We will respond within one calendar month at no charge.If you are unsatisfied with our response, you can complain to the ICO at ico.org.uk or call 0303 123 1113.
11. Data Security We implement appropriate technical and organisational measures to protect your personal data. In the event of a breach likely to affect your rights, we will notify the ICO within 72 hours and inform affected individuals where required.
12. Marketing CommunicationsWe only send marketing communications where you have explicitly opted in via a clear, unticked opt-in checkbox at the point of data collection. You can opt out at any time by clicking unsubscribe in any email or contacting contact@ecademi.co. We will never share your contact details with third parties for their own marketing purposes without your explicit consent.
13. ContactEcademi Limited London Office: 128 City Road, London, EC1V 2NX Birmingham Office: 228 Jewellery Business Centre, 95 Spencer Street, Birmingham, B18 6DA Email: contact@ecademi.co Tel: 0800 009 6393.
14. Changes to This Policy We may update this policy periodically. Changes will be posted on this page with a revised date. We encourage you to review it from time to time.