Privacy Policy

Last updated 24/10/2026

Charles Flint Education & Development Ltd is responsible for the personal information we collect and use through this website and our education enquiries. This notice explains what we do with that information and how you can contact us. Our company number is 17455431 and our ICO registration reference is ZC258691. This includes when you:

Visit this website, or any website of ours that links to this privacy notice

Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns?

Reading this privacy notice will help you understand your privacy rights and choices. Please contact us if you have questions about how we use your information: hello@charlesflinteducation.co.uk.

SUMMARY OF KEY POINTS

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information?

We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law.

Do we receive any information from third parties?

Most enquiry information comes directly from you. If you contact us on behalf of an organisation or another person, please only provide information you are authorised to share. Our website and communications providers also process technical and delivery information.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information?

We may share information in specific situations and with specific third parties.

How do we keep your information safe?

We have organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

What are your rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights?

The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

names
phone numbers
email addresses
details of your enquiry about CPD, courses or programmes

Please do not include clinical histories or confidential information about a client, pupil or other person in a general enquiry. If your enquiry concerns access or support needs, contact us first to discuss what information is needed.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

Consent. We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may share your data with third parties when necessary:

Wix provides our website hosting and enquiry-form services. Information submitted through the form may be held in Wix’s submission and communications systems.

123 Reg provides our business email service and handles messages sent to and from our business email address.

Usercentrics provides the website’s cookie-choice controls. See our Cookie Policy for information about these controls.

We remain responsible for explaining how we use your information and responding to your data-protection requests.

Wix may process website visitor information outside the UK. Its Data Processing Addendum describes the transfer arrangements it uses, including recognised adequacy decisions and contractual safeguards where applicable. You can read Wix’s Data Processing Addendum or contact us for more information.

We never sell or share your data for marketing purposes without your consent.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information. We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law.

Our usual practice is to delete an enquiry email after replying to it. If you reply again, we deal with that response as new correspondence. This does not mean that every copy is immediately removed from Wix, email systems or backups. An enquiry submitted through this website may also be recorded in Wix’s form and communications systems. Turning off contact-field saving does not turn off all submission storage.

Retention depends on the purpose of each record: dealing with your enquiry, administering an agreed service, meeting legal obligations or resolving a complaint or claim. Records are not kept simply because they might be useful. Provider-held copies and backups have separate deletion processes; deleting an email does not guarantee immediate deletion from those systems. Charles Flint Education & Development Ltd remains responsible for its handling of your information. Please contact us if you want to ask about, access or request deletion of your enquiry data.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We use access controls and other appropriate technical and organisational measures to protect personal information. No online service can guarantee complete security. Please avoid including sensitive or confidential information in a general enquiry.

8. DO WE COLLECT INFORMATION FROM MINORS?

Our education and development work can involve young people. Please do not send a child’s personal or sensitive information through the general enquiry form.

An initial enquiry should describe the programme or support you are interested in without identifying individual pupils or participants. Before collecting information for a young person’s participation, we will explain the information needed, its purpose, the relevant lawful basis, who will receive it and how long it will be kept. This website notice does not replace programme-specific privacy information.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Switzerland, you have rights that allow you greater access to and control over your personal information. You have rights under GDPR/UK GDPR, including:

Accessing your personal data.
Rectifying inaccuracies.
Requesting data deletion.
Restricting data processing.
Objecting to data use.

To exercise your rights, contact us at hello@charlesflinteducation.co.uk.

In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section below.

We will consider and act upon any request in accordance with applicable data protection laws. If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

Data Breach Notification
If a personal data breach occurs, we will assess the risk to those affected. Where reporting is required, we will notify the Information Commissioner's Office (ICO) without undue delay and, where feasible, within 72 hours of becoming aware of the breach. If the breach is likely to pose a high risk to affected individuals, we will also inform them without undue delay.

10. COMPLAINTS

If you believe your data is not being handled appropriately, you can file a complaint with the ICO:

UK ICO Contact:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: https://ico.org.uk

11. UPDATES TO THIS POLICY

We may update this policy as necessary to comply with legal requirements. Any changes will be posted on this page with an updated 'Last updated' date.