| Last updated: 13th July 2026 1. Introduction This policy explains how we collect, use, and protect your personal data when you use our website, eduren.co.uk, including through the cookies and similar technologies we use. It should be read together with the rest of this document, which covers both our privacy practices and our use of cookies in one place. By providing us with your data, you confirm that you are over 13 years of age. Lianne Hartley Solutions Limited is the data controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this policy). If you have any questions about this policy or how we handle your data, please contact us using the details below. Contact details Lianne Hartley, CEO and Founder Lianne Hartley Solutions Limited Email: lianne@lhsolutions.co.uk Postal address: 33 Eastgate Street, Stafford, Staffordshire, ST16 2LZ It’s important that the information we hold about you is accurate and up to date. Please let us know if your personal information changes by emailing lianne@lhsolutions.co.uk. 2. What data we collect, why, and our lawful basis Personal data means any information capable of identifying an individual. It does not include anonymised data. We may process the following categories of personal data about you: Communication Data. This includes any communication you send us, whether through the contact form on our website, by email, or via social media. We process this data to respond to your enquiries, keep records of our correspondence, and establish, pursue, or defend legal claims if needed. Our lawful ground for this processing is our legitimate interests, namely responding to enquiries and maintaining appropriate business records. Customer Data. When you become a client of ours, for example by licensing our curriculum, this includes your name, job title, organisation, contact and billing details, and details of the services provided to you. We process this data to deliver our services, administer our contract with you, and keep records of the business relationship. Our lawful ground for this processing is the performance of a contract with you and/or taking steps at your request to enter into one. User Data. This includes data about how you use our website, such as pages visited and actions taken (for example, booking a Discovery Call). We process this data to operate our website, provide relevant content, and keep our website secure. Our lawful ground for this processing is our legitimate interests, namely properly administering our website and business. Technical Data. This includes your IP address, browser type, device information, and details of your visits to our website, collected via our analytics tracking (Google Analytics) and cookies – see Section 12 (Cookies) for details. We process this data to understand how our website is used, keep it secure, and improve our content. Our lawful ground for this processing is our legitimate interests, namely properly administering and improving our website and business. Marketing Data. Where applicable, this includes your preferences about receiving marketing communications from us. Our lawful ground for this processing is either your consent or our legitimate interests, namely growing our business, in each case in line with Section 4 below. Required Processing. Where we ask you for personal data to respond to an enquiry or to provide our services, and you choose not to provide it, we may not be able to assist you or perform our contract with you. We may process your personal data without your knowledge or consent where this is required or permitted by law. Purposes of Processing. We will only use your personal data for the purpose it was collected for, or for a reasonably compatible purpose. If we need to use your data for a new, unrelated purpose, we will let you know and explain the legal grounds for that processing. Sensitive Data and Criminal Conviction Data. We do not intentionally collect any Sensitive Data about you (this means data about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, or health, genetic or biometric data), and we do not collect information about criminal convictions or offences. Please do not include this type of information in our contact form or in correspondence with us unless it is strictly necessary and relevant to your enquiry. Automated Decision-Making. We do not carry out automated decision-making or any type of automated profiling that has a legal or similarly significant effect on you. 3. How we collect your personal data We collect data about you when you provide it to us directly, for example, by filling in the contact form on our site, booking a Discovery Call, or emailing us. We also automatically collect certain data through cookies and similar technologies when you use our website; see Section 12 (Cookies) below for full details. We may also receive data from third parties who provide analytics services (such as Google, based in the United States) and website security services (such as Google reCAPTCHA, also based in the United States). 4. Marketing communications Where we send you marketing communications, our lawful ground for doing so is either your consent or our legitimate interests (namely growing our business), and in each case, we comply with the Privacy and Electronic Communications Regulations (PECR). We will never share your personal details with any third party for their own marketing purposes. You can ask us to stop sending you marketing messages at any time by following the opt-out link on any marketing message or by emailing lianne@lhsolutions.co.uk. We will process your request without delay and ensure that you no longer receive marketing communications from us. 5. Who we share your data with We work with a small number of trusted third-party service providers who process personal data on our behalf, including: IONOS – our website hosting provider Google (Google Analytics) – website analytics Google (reCAPTCHA) – to protect our contact form from spam and abuse CookieYes – our cookie consent management platform We may also share your data with: Professional advisers, including our accountants, bankers, and insurers Government or regulatory bodies, where we are required to report processing activities Any third party to whom we sell, transfer, or merge parts of our business We require all third parties who process your data on our behalf to respect its security and treat it in accordance with the law. We only allow them to process your data for specified purposes, in line with our instructions. We do not sell your personal data. 6. International transfers Some of our service providers (such as Google) may process your data on servers located outside the UK and the European Economic Area (EEA), including in the United States. Where this happens, we ensure appropriate safeguards are in place, as set out below. Where you are within the United Kingdom We are subject to the UK General Data Protection Regulation (UK GDPR), which protects your personal data. Where we transfer your data to third parties outside the UK, we ensure a similar degree of security is in place. As such: We may transfer your personal data to countries that UK regulatory authorities have approved as providing an adequate level of protection; or If we use US-based providers that are part of the UK-US Data Bridge (the UK Extension to the EU-US Data Privacy Framework), we may transfer data to them, as they have equivalent safeguards in place; or Where we use service providers established outside the UK, we may rely on specific contracts approved by the ICO (such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses), or approved codes of conduct or certification mechanisms. If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You may withdraw this consent at any time. Where you are within the EEA We are subject to the EU General Data Protection Regulation (EU GDPR), which protects your personal data. Where we transfer your data to third parties outside the EEA, we ensure a similar degree of security is in place. As such: – We may transfer your personal data to countries that the European Commission has approved as providing an adequate level of protection (this includes the UK, whose adequacy decision was renewed by the European Commission on 19 December 2025 and is valid until 27 December 2031); or – If we use US-based providers that are part of the EU-US Data Privacy Framework, we may transfer data to them, as they have equivalent safeguards in place; or – Where we use service providers established outside the EEA, we may rely on the EU Standard Contractual Clauses adopted by the European Commission, or approved codes of conduct or certification mechanisms. If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You may withdraw this consent at any time. 7. Data security We have implemented robust security measures to protect your personal data from accidental loss, misuse, alteration, disclosure, or unauthorised access. Access to your personal data is restricted to individuals who have a genuine business need to know it. All personnel processing your data on our behalf are required to maintain confidentiality and adhere to our instructions. We employ various security measures, including encryption, firewalls, and access controls, to safeguard your data. In the event of a suspected personal data breach, we have procedures in place to manage the situation and will notify you and any applicable regulator as required by law. 8. Data retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting, or reporting obligations. Contact Form and Discovery Call Enquiries: We keep records of your enquiries for as long as reasonably necessary to address your request and any resulting business relationship, in line with our standard record-keeping practices. Client Data: We retain basic contact, identity, and transaction data for six years following the end of our business relationship to comply with tax and accounting regulations. Analytics Data: This data is retained in an aggregated or anonymised form and is not used to identify individual visitors. Cookie Data: Cookie data is retained for the durations set out in the cookie table in Section 12, after which it expires automatically. In determining retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, and any legal requirements. We may anonymise your data for research or statistical purposes, allowing us to use it indefinitely without further notice. 9. Your legal rights Under data protection law, you have several rights regarding your personal data, including the right to: – Be informed about how your personal data is used – Access a copy of the personal data we hold about you – Have inaccurate personal data corrected – Have your personal data erased in certain circumstances – Restrict or object to how we use your personal data – Receive your personal data in a portable format in certain circumstances – Withdraw consent at any time, where we rely on consent as our lawful basis For more information about these rights, please visit ico.org.uk. To exercise any of these rights, please email lianne@lhsolutions.co.uk. You will not be charged a fee to access your personal data or exercise your other rights. However, we may charge a reasonable fee or refuse to comply if your request is clearly unfounded, repetitive, or excessive. We may need to request specific information to confirm your identity and your right to access the data, as a security measure to ensure that data is not disclosed to unauthorised individuals. We aim to respond to all legitimate requests within one month of receipt. If your request is complex or if you have made multiple requests, we may extend the response period by up to two additional months, notifying you within one month if an extension is necessary and the reasons for it. 10. How to complain If you have a complaint regarding our handling of your personal data, please contact us first at lianne@lhsolutions.co.uk so we can attempt to resolve the issue. We will acknowledge your complaint within 30 days of receiving it and will investigate without undue delay. We will keep you informed of our progress and communicate the outcome clearly, providing sufficient detail for you to understand how we reached our conclusion. If you are in the UK and are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. If you are in the EU and are not satisfied with our response, you can complain to the data protection authority in your country. 11. Third-party links Our website may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy notices of any websites you visit after leaving our site. 12. Cookies This section explains what cookies are, which cookies our website uses, why we use them, and how you can control them. It forms part of this policy and should be read together with the rest of it. 12.1 What are cookies Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, work more efficiently, and to provide information to the site owner. Similar technologies, such as local storage and pixels, may be used for the same purposes and are treated as cookies in this policy. 12.2 The legal basis for our use of cookies Our use of cookies is governed by the Privacy and Electronic Communications Regulations (PECR) and, where cookies involve personal data, the UK GDPR. Under PECR, we must tell you about cookies we use and, other than for strictly necessary cookies, obtain your consent before we set them. We meet these requirements as follows: – We do not set non-essential cookies until you have given consent. – Our cookie banner asks you to accept or reject non-essential cookies, and rejecting is as easy as accepting – there is no default opt-in and no disproportionate number of clicks to say no. – We only ask you to make a genuine choice; continuing to use the site without interacting with the banner is not treated as consent. – We keep a record of the consent you give (or withhold), including when it was given and what you were told at the time, using our consent management platform, CookieYes. 12.3 Categories of cookies we use Strictly Necessary (Essential) Cookies. These are required for the website to function and cannot be switched off. They are typically set in response to actions you take, such as setting your privacy preferences or navigating the site. They do not require your consent, though we still tell you about them here. Analytics (Performance) Cookies. These help us understand how visitors interact with our website, for example which pages are viewed and how long visitors spend on the site, so we can measure and improve performance. These cookies are only set with your consent. We do not currently use functional or advertising/marketing cookies; if that changes, we will update this policy and, where required, ask for your consent before any new cookies are set. 12.4 The cookies we use – _ga_* – Google Analytics (.eduren.co.uk) – Stores and counts page views for analytics reporting – 1 year 1 month 4 days – Analytics – _ga – Google Analytics (.eduren.co.uk) – Calculates visitor, session and campaign data; stores an anonymised, randomly generated ID to distinguish unique visitors for analytics reporting – 1 year 1 month 4 days – Analytics – wpEmojiSettingsSupports – WordPress (eduren.co.uk) – Set when a user interacts with emojis on the site, to check whether the browser can display them correctly – Session – Necessary – cookieyes-* – CookieYes (eduren.co.uk) – Records your cookie consent preferences so the banner is not shown repeatedly and your choices are respected – 1 year – Necessary 12.5 Third-party cookies Some cookies on our website are set by third parties rather than by us directly: – Google Analytics sets analytics cookies (see the table above) to help us understand website usage. Google acts as a processor of this data and may also use it in line with its own privacy policy. Where Google processes this data outside the UK or EEA, the safeguards described in Section 6 (International transfers) apply. – CookieYes sets a cookie to record and remember your consent choices, so you are not asked repeatedly. This is treated as strictly necessary, since it is required to comply with our consent obligations to you. We do not control third-party cookies directly and encourage you to review the relevant third party’s own cookie or privacy policy for further detail. 12.6 How to manage or withdraw your consent You can manage your cookie choices at any time using any of the following methods: – Where our cookie consent tool provides a preference or settings option on the website, you can use it to change your choices at any time. – You can withdraw or change your cookie consent by clearing your browser’s cookies for this site and revisiting; this will prompt the cookie banner to appear again so you can make a fresh choice. – Most browsers also let you block or delete cookies, or ask to be notified before a cookie is set, through their own settings. Guidance for common browsers is available at aboutcookies.org and via each browser’s help pages. Please note that blocking or deleting cookies, including essential ones, may affect how parts of our website function. 12.7 Do Not Track signals Some browsers offer a “Do Not Track” (DNT) setting. There is currently no accepted industry standard for how websites should respond to DNT signals, so our website does not currently respond to them. You can still control cookies using the methods described in Section 12.6 above. 12.8 Other data collected through our website Our contact form requests your name and email address to respond to your enquiry or arrange a Discovery Call. This form is protected by Google reCAPTCHA, which helps prevent spam and automated abuse. The use of our contact form is subject to Google’s Privacy Policy and Terms of Service, as well as this policy. 12.9 Changes to our use of cookies If we start using new categories of cookies, or change the purpose for which we use existing ones, we will update this section and, where the change involves non-essential cookies, ask for your consent again before those cookies are set. 13. Changes to this policy We may update this policy periodically to reflect changes in the law or how our website operates. Any updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this policy regularly. Significant changes will be communicated to you via email or a prominent notice on our website. |
