Privacy Policy

GRREM Education Services & Management Consultancy Ltd (“GRREM”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, submit an enquiry, request a training proposal, subscribe to updates, use our services, attend our training, or purchase or access our resources.

GRREM Education Services & Management Consultancy Ltd is responsible for deciding how and why personal information covered by this Privacy Policy is used.

Company name: GRREM Education Services & Management Consultancy Ltd Company number: 13164356 Registered office: 128 City Road, London, England, EC1V 2NX Email: info@grremeducation.co.uk

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the email address above.

The personal information we collect depends on how you interact with GRREM.

It may include:

• your name;
• email address;
• telephone number;
• organisation or employer;
• job title or professional role;
• service type;
• training or consultancy requirements;
• number of learners;
• preferred training delivery method or date;
• information you provide through our Contact or Training Proposal forms;
• newsletter or mailing-list subscription information;
• resource or product waitlist information;
• correspondence between you and GRREM;
• training attendance and participation information;
• knowledge-assessment, evaluation and certificate-administration information where relevant;
• purchase, transaction and order information where paid products or services are offered; and
• limited technical information generated when you use our website.

Please avoid providing unnecessary sensitive or special-category personal information through our general website enquiry forms.

We may collect personal information directly from you when you:

• complete a website form;
• contact us by email, telephone or another communication method;
• request a training or consultancy proposal;
• register or participate in a GRREM training programme;
• subscribe to our newsletter or professional updates;
• join a product or resource waitlist;
• purchase or access a GRREM product or service; or
• otherwise communicate with us.

Where an employer, care provider or other organisation arranges training or professional services on your behalf, we may receive limited information about you from that organisation where necessary to administer the service.

We may also receive information through service providers that support our website, communications, payments or business operations.

We may use personal information to:

• respond to enquiries;
• prepare and respond to training or consultancy proposals;
• communicate with prospective and existing clients;
• arrange and deliver training, consultancy and professional-development services;
• administer training attendance, assessments, evaluations and Certificates of Completion where applicable;
• provide resources, products or services requested or purchased;
• manage orders and payments where applicable;
• maintain appropriate business and service records;
• manage newsletter subscriptions and other communications for which you have subscribed;
• manage product and resource waitlists;
• improve our services, resources and website;
• maintain website and information security;
• establish, exercise or defend legal rights where necessary; and
• comply with legal, regulatory, tax, accounting and other applicable obligations.

We will not use your personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law.

Under UK data-protection law, GRREM must have an appropriate lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract or steps before entering into a contract — where processing is necessary to respond to a request for services, prepare a proposal, administer a booking, fulfil an order or provide an agreed service.

Legitimate interests — where processing is reasonably necessary for operating and developing GRREM, responding to relevant business communications, maintaining appropriate records, protecting our website and services, and managing professional relationships, provided those interests are not overridden by your rights and interests.

Legal obligation — where we need to process or retain information to comply with an applicable legal requirement.

Consent — where you have made a clear choice to receive particular communications or where consent is otherwise the appropriate lawful basis.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Where your employer, care provider or another organisation arranges GRREM training, the organisation may provide us with information such as your name, work email address, role or other information reasonably necessary to administer the training.

We will use such information for appropriate purposes connected with the programme, which may include attendance administration, communication, assessment or knowledge checks, evaluation and issuing Certificates of Completion where applicable.

The organisation arranging the training may have its own responsibilities for explaining how it uses your personal information.

Joining a GRREM newsletter, mailing list or promotional communication is optional.

Consent to marketing is not a condition of submitting an ordinary Contact or Training Proposal enquiry.

Where you have subscribed to marketing communications, you may unsubscribe using the method provided in the communication or by contacting:

info@grremeducation.co.uk

Unsubscribing from marketing does not prevent GRREM from sending necessary administrative or service-related communications concerning an enquiry, booking, order, training programme or existing business relationship where we have another lawful basis for doing so.

Our website is currently built and hosted using Lovable infrastructure.

Information submitted through GRREM website forms, including Contact, Training Proposal and Newsletter forms, may be processed and stored through Lovable Cloud infrastructure.

GRREM may also receive administrative email notifications when forms are submitted. These notifications are sent to our designated GRREM business email address.

Information entered into a form is transmitted when you choose to submit that form.

Please do not use general enquiry forms to send information that is unnecessary for us to respond to your request.

GRREM does not sell your personal information.

Where reasonably necessary, information may be shared with trusted service providers that support our business, such as providers of:

• website hosting and cloud infrastructure;
• business email and communications;
• payment processing;
• accounting and business administration;
• online meeting or training platforms;
• digital-product delivery;
• IT and information-security services; and
• other services reasonably required to operate GRREM.

We may also disclose information where required by law, a court, regulator or other lawful authority, or where necessary to establish, exercise or defend legal rights.

We require service providers handling personal information on our behalf to use it only for appropriate purposes and subject to applicable data-protection requirements.

Some technology and service providers used by GRREM may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, GRREM will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data-protection requirements.

Depending on the destination and circumstances, this may include reliance on applicable adequacy regulations or appropriate contractual or other recognised safeguards.

You may contact us at info@grremeducation.co.uk if you would like further information about safeguards relevant to your personal information.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to meet legal, accounting, tax, contractual, professional or record-keeping requirements.

The appropriate retention period depends on factors including:

• the type and sensitivity of the information;
• why it was collected;
• the duration of our relationship with you or your organisation;
• whether the information forms part of a training, transaction or business record;
• applicable legal or contractual requirements; and
• whether the information may reasonably be required to establish or defend legal rights.

When personal information is no longer required, we will take appropriate steps to delete it, anonymise it or otherwise dispose of it securely.

GRREM takes reasonable organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Access to personal information is limited, where appropriate, to persons and service providers who require it for legitimate business purposes.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Depending on the circumstances and the lawful basis on which your information is processed, UK data-protection law may give you rights including:

• the right to request access to your personal information;
• the right to request correction of inaccurate or incomplete information;
• the right to request erasure in certain circumstances;
• the right to request restriction of processing in certain circumstances;
• the right to object to certain processing;
• the right to data portability in circumstances where that right applies; and
• the right to withdraw consent at any time where processing is based on consent.

These rights are not all absolute and may not apply in every circumstance.

To exercise a data-protection right, contact:

info@grremeducation.co.uk

We may need to request appropriate information to confirm your identity before responding to certain requests.

You have the right to object to the use of your personal information for direct marketing.

If you object to direct marketing, we will stop using your personal information for that purpose.

You may also have a right to object to certain processing carried out on the basis of legitimate interests. Whether an objection can be upheld will depend on the particular circumstances and applicable law.

GRREM does not currently use website information to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

If this changes, we will update our privacy information as required.

Our website uses limited cookies and similar storage technologies necessary for website functionality.

Further information about the technologies currently used, their purposes and duration is available in our separate Cookie Policy.

If GRREM introduces analytics, advertising or other non-essential tracking technologies in the future, we will review the applicable transparency and consent requirements before using them.

Our website may contain links to websites or services operated by third parties.

GRREM does not control those third-party websites and is not responsible for their privacy practices. We encourage you to review the relevant privacy information when visiting an external website.

GRREM's website and professional services are primarily intended for adults, organisations, adult social care professionals, managers, leaders and learners undertaking relevant professional development.

Our general website services are not designed to collect personal information directly from children.

If our services change in a way that involves processing children's personal information, we will review and update our privacy arrangements as appropriate.

If you have concerns about how GRREM uses your personal information, please contact us first so that we have an opportunity to address the matter:

info@grremeducation.co.uk

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.

Current contact and complaint information is available from the ICO's official website.

We may update this Privacy Policy from time to time to reflect changes in our services, website, technology, service providers or legal and regulatory requirements.

The latest version will be published on this website with an updated revision date.

Where a change materially affects how we use personal information, we will take appropriate steps to bring the change to the attention of affected individuals where required.

For questions about this Privacy Policy, your personal information or your data-protection rights, please contact:

GRREM Education Services & Management Consultancy Ltd Company No. 13164356 128 City Road London England EC1V 2NX

Email: info@grremeducation.co.uk