1. Introduction
United Consortium for Business Ltd (Company No. 15740986), trading as "United Consortium," ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, enquire about our services, or enrol in our programmes.
We are registered in England and Wales, with our registered office at Unit 39–40 Skyline Village, Limeharbour, London E14 9TS. For the purposes of UK data protection legislation (including the UK General Data Protection Regulation and the Data Protection Act 2018), we are the data controller.
2. Information We Collect
Information you provide directly
- Contact details: name, email address, telephone number, and postal address
- Enquiry information: messages submitted through our contact forms, including programme interests and professional background
- Enrolment data: educational history, employment details, nationality, language preferences, and payment information
- Professional development records: CPD hours, programme completion data, assessment results, and certificates issued
- Communication records: correspondence via email, telephone, or other channels
Information collected automatically
- Technical data: IP address, browser type and version, operating system, time zone setting, and device information
- Usage data: pages visited, time spent on pages, navigation paths, and referring URLs
- Cookie data: see our Cookie Policy for full details
3. How We Use Your Information
We use your personal data for the following purposes:
- To respond to enquiries and provide information about our programmes
- To process enrolments and manage your participation in our programmes
- To issue CPD certificates and maintain accreditation records
- To communicate important updates about your programme or our services
- To send marketing communications (only with your explicit consent)
- To improve our website, programmes, and services
- To comply with legal and regulatory obligations
- To detect and prevent fraud or other unlawful activity
4. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following lawful bases:
- Consent: where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing emails)
- Contract: where processing is necessary for the performance of a contract with you (e.g., programme enrolment and delivery)
- Legitimate interests: where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights (e.g., improving our services, business administration)
- Legal obligation: where processing is necessary to comply with a legal obligation (e.g., financial record keeping, regulatory reporting)
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties. We may share your data with:
- CPD accreditation bodies: to verify and record your professional development hours
- Service providers: trusted third parties who assist in operating our website, processing payments, or delivering services (subject to appropriate data processing agreements)
- Professional advisors: including accountants, auditors, and legal counsel, as reasonably necessary
- Regulatory authorities: where required by law, regulation, or legal proceedings
6. International Data Transfers
Your personal data is primarily stored and processed within the United Kingdom. If any data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO), or transfers to countries with an adequacy decision.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Enquiry data: 24 months from last contact, unless you become a client
- Enrolment and programme records: 7 years from programme completion (for CPD accreditation and regulatory compliance)
- Financial records: 7 years (as required by HMRC)
- Marketing consent records: retained until consent is withdrawn
- Website analytics data: 26 months
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your data in certain circumstances
- Right to restriction: request restriction of processing in certain circumstances
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: where processing is based on consent, withdraw at any time
To exercise any of these rights, please contact us at info@unitedconsortium.co.uk or write to our registered address. We will respond within one month of your request.
If you are unsatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Cookies and Tracking
Our website uses cookies and similar technologies to enhance your experience and analyse website performance. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
10. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmitted via our website
- Access controls and authentication for our internal systems
- Regular security reviews and staff training
- Secure storage of physical documents at our premises
While we strive to protect your data, no method of transmission over the internet is entirely secure. We cannot guarantee absolute security but will notify you and the relevant authorities promptly in the event of a data breach, as required by law.
11. Children's Privacy
Our services are designed for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated through our website. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
- Email: info@unitedconsortium.co.uk
- Phone: +44 020 4540 0020
- Post: Data Protection Officer, United Consortium for Business Ltd, Unit 39–40 Skyline Village, Limeharbour, London E14 9TS