Privacy Policy

1. Introduction

Glimmer Hedge ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website glimmer-hedge.com or use our business training services.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide to us, including:

• Contact information (name, email address, phone number, company name)
• Training preferences and requirements
• Payment and billing information
• Feedback, testimonials, and survey responses
• Communications with our support team

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• IP address and location data
• Browser type and version
• Device information and operating system
• Pages visited and time spent on our site
• Referral sources and exit pages

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. You can control cookie preferences through our cookie management system or your browser settings.

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing and delivering our training services
• Processing payments and maintaining records
• Communicating about our services and updates
• Sending marketing materials (with your consent)
• Improving our website and services
• Complying with legal obligations
• Protecting our rights and preventing fraud

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Contract: To fulfill our contractual obligations for training services
• Consent: For marketing communications and optional services
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With service providers who assist in delivering our services
• With payment processors for transaction processing
• When required by law or to protect our legal rights
• In connection with a business transaction (merger, acquisition, etc.)
• With your explicit consent for specific purposes

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure data storage and access controls
• Regular security assessments and updates
• Staff training on data protection practices

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Customer data: 7 years after last interaction
• Marketing data: Until you withdraw consent
• Website analytics: 26 months
• Financial records: As required by UK tax law

8. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request copies of your personal information
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request limitation on processing of your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

9. International Data Transfers

Your information may be transferred to and processed in countries outside the UK/EU. We ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Certification schemes and approved codes of conduct

10. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

13. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters: