GDPR Compliance

Last Updated: June 19, 2026

Our Commitment to GDPR

azure-reef is committed to complying with the General Data Protection Regulation (GDPR) and protecting the personal data of individuals within the European Economic Area. This page outlines our GDPR compliance measures and your rights under this regulation.

Data Controller Information

For the purposes of GDPR, azure-reef acts as the data controller for personal data collected through our website and services.

Contact Details:
azure-reef
42 Kensington Gardens
London W2 4PJ
United Kingdom
Email: [email protected]

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right to Access

You have the right to obtain confirmation about whether we process your personal data and, if so, to access that data along with information about how it is processed.

Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete data completed.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances, including when:

  • The data is no longer necessary for its original purpose
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased for compliance with legal obligations

Right to Restriction of Processing

You can request that we restrict processing of your personal data in specific situations:

  • When you contest the accuracy of the data
  • When processing is unlawful but you prefer restriction over erasure
  • When we no longer need the data but you need it for legal claims
  • When you have objected to processing pending verification of legitimate grounds

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two months for complex requests. We will inform you of any extension within the first month.

When submitting a request, please provide:

  • Your full name and contact information
  • A clear description of your request
  • Information that helps us verify your identity

Legal Basis for Processing

We process personal data under the following lawful bases:

  • Consent: You have given clear consent for us to process your data for specific purposes
  • Contract: Processing is necessary for performance of a contract with you
  • Legal Obligation: Processing is necessary to comply with legal requirements
  • Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

Data We Collect

We collect and process the following categories of personal data:

  • Identity data: name, username
  • Contact data: email address, physical address
  • Technical data: IP address, browser type, device information
  • Usage data: information about how you use our website and services
  • Course data: enrollment information, progress, assignments, and results

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Staff training on data protection
  • Incident response procedures

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Retention periods vary depending on the type of data and the purposes for processing.

International Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the European Commission
  • Transfers to countries with adequacy decisions
  • Other legally approved transfer mechanisms

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report the breach to the relevant supervisory authority within 72 hours of becoming aware of it, where required by law.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where an alleged infringement occurred.

For the United Kingdom, the relevant authority is:

Information Commissioner's Office (ICO)
Website: www.ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement periodically. We will notify you of significant changes by posting the updated statement on our website with a revised date.

Contact Us

If you have questions about our GDPR compliance or wish to exercise your rights, please contact us:

Email: [email protected]
Address: 42 Kensington Gardens, London W2 4PJ, United Kingdom