Privacy Policy

Introduction

Serein Sponge Limited ("we", "us", or "our") is committed to protecting your personal information and respecting your privacy rights. This policy explains how we collect, use, store, and protect information about individuals who interact with our business.

We are registered in England and Wales, with our registered office at 42 Kingsway, London, WC2B 6EX, United Kingdom.

Information We Collect

We collect and process various types of information depending on your relationship with us:

Information You Provide Directly

When you contact us or engage our services, you may provide:

• Contact details including name, email address, job title, and company name
• Professional information relevant to training needs
• Correspondence and communications with our team
• Payment and billing information when engaging our services
• Feedback and evaluation responses following training programmes

Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical information including IP address, browser type, and device information
• Usage data including pages visited, time spent, and navigation paths
• Cookie data as described in our Cookies Policy

How We Use Your Information

We use your personal information for specific, legitimate purposes:

Service Delivery

• Responding to enquiries and providing information about our services
• Designing and delivering training programmes
• Managing client relationships and contracts
• Processing payments and maintaining financial records
• Evaluating and improving our training effectiveness

Business Operations

• Maintaining records for legal and regulatory compliance
• Protecting against fraud and unauthorised access
• Analysing and improving our website and services
• Internal record keeping and administration

Marketing Communications

With your consent, we may send you information about our services, insights, and updates that we believe may interest you. You can opt out of marketing communications at any time.

Legal Basis for Processing

We process your personal information on the following legal grounds:

• Contractual necessity: To fulfil our obligations under contracts with clients
• Legitimate interests: To operate our business, improve our services, and maintain client relationships
• Consent: Where you have specifically agreed to certain uses of your information
• Legal obligations: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell personal information to third parties. We may share information in limited circumstances:

Service Providers

We work with carefully selected service providers who process information on our behalf, including:

• IT infrastructure and hosting providers
• Payment processing services
• Professional advisors including accountants and lawyers

These providers are contractually obligated to protect your information and use it only for the specific purposes we authorise.

Legal Requirements

We may disclose information when required by law, court order, or regulatory authority, or when necessary to protect our rights or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring organisation, subject to equivalent privacy protections.

Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure storage systems with access controls
• Encryption of data in transit and at rest
• Regular security assessments and updates
• Staff training on data protection responsibilities
• Incident response procedures

While we take security seriously, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to addressing any breaches promptly and transparently.

Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by law.

Typical retention periods include:

• Client records: Duration of relationship plus 7 years for financial and contractual records
• Marketing contacts: Until consent is withdrawn or the individual requests removal
• Website analytics: Typically 26 months
• General enquiries: 2 years unless a client relationship develops

When information is no longer needed, we securely delete or anonymise it.

Your Rights

Under data protection law, you have several rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request deletion of your information in certain circumstances
• Restriction: Ask us to limit how we use your information
• Objection: Object to processing based on legitimate interests
• Portability: Receive your information in a structured, commonly used format
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise these rights, contact us at [email protected]. We will respond within one month, though complex requests may require additional time.

International Transfers

We primarily operate within the United Kingdom. If we transfer information internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities.

Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect information from individuals under 16. If we become aware of such collection, we will delete the information promptly.

Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. The "last updated" date at the top indicates when the policy was most recently revised. Significant changes will be communicated through our website or directly to affected individuals.

Contact and Complaints

For questions about this policy or how we handle your personal information, contact us:

Email: [email protected]
Address: Serein Sponge Limited, 42 Kingsway, London, WC2B 6EX, United Kingdom

If you are unhappy with how we have handled your information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. Visit ico.org.uk for details.