GDPR Compliance

Our Commitment to GDPR

polar-lynx.com is committed to compliance with the General Data Protection Regulation (GDPR) and other applicable data protection legislation in the United Kingdom and European Economic Area. We respect your privacy rights and handle personal data with appropriate care and transparency.

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities, such as receiving course updates or marketing communications
• Contract: When processing is necessary to fulfill our contractual obligations related to course enrollment and delivery
• Legal Obligation: When we must process data to comply with legal or regulatory requirements
• Legitimate Interests: When processing serves our legitimate business interests while not overriding your fundamental rights and freedoms

Your Rights Under GDPR

You have specific rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and receive a copy of that data along with supplementary information about the processing.

Right to Rectification

You may request correction of inaccurate personal data we hold about you.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right is not absolute and may be limited by legal obligations to retain certain records.

Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of data or object to processing.

Right to Data Portability

Where technically feasible, you may request to receive personal data you provided to us in a structured, commonly used, machine-readable format, and you may request that we transmit this data to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Exercising Your Rights

To exercise any of these rights, contact us at enquiries@polar-lynx.com with a clear description of your request. We will respond within one month of receipt, though this period may be extended by two additional months for complex requests. We will inform you of any extension and the reasons for delay.

We may request additional information to verify your identity before processing requests, particularly for access or deletion requests.

Data Protection Officer

For questions specifically related to data protection practices or to exercise your rights, you may contact our data protection contact at enquiries@polar-lynx.com.

International Data Transfers

We primarily process data within the United Kingdom. If data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements, such as standard contractual clauses approved by relevant authorities.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities as required by GDPR, typically within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state or UK jurisdiction where you habitually reside, work, or where an alleged infringement occurred. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO).

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or regulatory requirements. Significant changes will be communicated through our website or directly to enrolled students.