Website privacy policy

Last updated: January 2026

This privacy policy explains how Atomix Educational Trust uses personal information collected through our adult learning website at adultlearning.atomix.ac.uk. The trust follows the same approach across all of its websites, but this policy covers this site.

Who we are

Atomix Educational Trust is a data controller as defined by the UK GDPR. This means that we determine the purposes for which your personal data is processed and the manner of the processing. We will only collect and use your personal data in ways that are compliant with data protection legislation.

The Trust has appointed Veritau Ltd as its Data Protection Officer (DPO). The role of the DPO is to monitor our compliance with the UK GDPR and the Data Protection Act 2018 and advise on data protection issues.

What personal data we collect

We collect the following types of personal data through our website:

• Contact information you provide through forms (name, email address, phone number, postal address)
• Information about your visit to our website (pages viewed, time spent, how you arrived at our site)
• Technical information (IP address, browser type, device type, operating system)
• Analytics data collected through cookies (see our Cookie Policy)
• Any other information you choose to provide when contacting us

Why we collect and use your data

We use your personal data for the following purposes:

• To respond to your enquiries and provide information you request
• To improve our website and user experience
• To understand how visitors use our website through analytics
• To send you information you have requested about our adult courses and services
• To meet our legal and regulatory obligations

Legal basis for processing

Under the UK GDPR, we process your data under the following legal bases:

• Article 6(1)(a) Consent: When you submit forms or agree to cookies
• Article 6(1)(f) Legitimate interests: To improve our website, understand how it is used, and communicate with prospective adult learners
• Article 6(1)(c) Legal obligation: Where we are required by law to process your data

Where we process your personal data with your consent, you have the right to withdraw that consent at any time by contacting gdpr@atomix.ac.uk

How long we keep your data

We retain your data in accordance with our Records Management Policy and Retention Schedule. Typical retention periods are:

• Website enquiry forms: 2 years from submission
• Google Analytics data: 26 months (default retention period)
• Mailing list subscriptions: Until you unsubscribe

Any personal information which we are not required by law to retain will only be kept for as long as is reasonably necessary to fulfil its purpose.

Who we share your data with

We may share your personal data with:

• Google Analytics: To understand website usage (see Cookie Policy for details)
• IT service providers: Who host our website and provide technical services
• Third parties where required by law: Such as law enforcement agencies

We do not sell your personal data to third parties.

International transfers

Although we are based in the UK, some of the digital information we hold may be stored on computer servers located outside the UK. Some of the IT applications we use may also transfer data outside the UK.

Normally your information will not be transferred outside the European Economic Area, which is deemed to have adequate data protection standards by the UK government. In the event that your information is transferred outside the EEA, we will take reasonable steps to ensure your data is protected and appropriate safeguards are in place.

Your rights

Under UK GDPR, you have the following rights:

• Right to be informed: This privacy policy fulfils this obligation
• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion where there is no compelling reason for continued processing
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, contact: gdpr@atomix.ac.uk or our Data Protection Officer using the details above.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. However, no internet transmission is completely secure.

Complaints

If you have concerns about how we have handled your personal data, please contact our Data Protection Officer using the details above.

If we cannot resolve your concerns, you may complain to the Information Commissioner's Office (the UK's data protection regulator):

Changes to this policy

We reserve the right to update this privacy policy at any time. The current version will always be available on our website with the last updated date shown at the top. We will notify you of significant changes that affect you.