This Privacy Policy explains how Graham Bray Education collects, uses, stores and protects your personal information when you use our website, purchase courses or contact us.

1. Who we are

Data Controller: Graham Bray Education

Email: support@grahambrayeducation.com

Graham Bray Education is committed to protecting your privacy and processing personal data in accordance with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Information we collect

We may collect your name, email address, billing address, payment information, correspondence, booking information, course enrolment details and technical information such as IP address, browser type and cookies. Where courses are purchased for children, we expect the purchaser to be a parent, guardian or other responsible adult.

3. How we use your information

We use your information to provide courses and services, process payments, communicate with you, respond to enquiries, manage bookings, send requested resources, improve our services, comply with legal obligations and, where you have given consent, send marketing emails.

4. Lawful bases

We rely on contract, legal obligation, legitimate interests and consent, depending on the purpose of processing.

5. Marketing

If you choose to receive marketing, we will send occasional emails about educational resources, course updates and offers. You can unsubscribe at any time using the link in our emails or by contacting us.

6. Payments

Payments are processed securely through trusted providers including Stripe and PayPal. Graham Bray Education does not store full payment card details.

7. Third-party providers

We use carefully selected service providers including Systeme.io for course delivery and email communications, Calendly for bookings, Google reCAPTCHA for website security, video hosting providers such as YouTube or Vimeo where applicable, payment providers and trusted website hosting providers. These organisations process data only on our instructions or under their own privacy obligations.

8. International transfers

Some service providers may process data outside the UK. Where this happens, appropriate safeguards such as the UK International Data Transfer Agreement or equivalent legal mechanisms are used.

9. Children's information

Our courses are intended to be purchased by adults on behalf of children. We do not knowingly collect personal information directly from children under 13 without appropriate parental involvement.

10. Data retention

We keep personal data only for as long as necessary to provide our services, meet legal obligations and resolve disputes. Financial records are retained for the periods required by UK law.

11. Your rights

You have the right to access, correct, erase, restrict or object to processing, request data portability where applicable and withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office (www.ico.org.uk) if you believe your data has not been handled correctly.

12. Cookies

Our website uses essential cookies and may use functional and embedded content cookies. If analytics are introduced in future, this policy and the cookie notice will be updated.

13. Security

We use appropriate technical and organisational measures to protect your information from unauthorised access, loss or misuse. No internet transmission can be guaranteed completely secure.

14. Contact us

For any questions about this Privacy Policy or your personal data, please contact support@grahambrayeducation.com.

15. Changes

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the revision date.