privacy notice

Privacy notice

Northern Coffee School is operated by Heart & Graft Coffee Ltd (registered in England & Wales). We are committed to respecting your privacy and that of every visitor to this website. This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

If you have a question about the data we hold, our contact details are:
Heart & Graft Coffee Ltd
21 North Street, Cheetham Hill, Manchester, M8 8RE
training@northerncoffeeschool.co.uk

Information we collect and why

All data is processed lawfully under the Data Protection Act 2018 and UK GDPR. Data is retained within the United Kingdom or the EEA. We use information about you in the following ways:

• To process your course booking and fulfil our obligations under the contract between us.
• To send you information about your booking, including confirmations, reminders and any changes to your session.
• To respond to enquiries you send us.
• To monitor and improve the performance of this website (legitimate interests).

We may collect:

• Booking information - name, email address and payment details entered during the booking process. Course bookings are handled by Bookwhen; please see Bookwhen's privacy policy for details of how they process that data.
• Enquiry correspondence - if you email or contact us, we keep a record of that correspondence to respond to you and to administer any booking.
• Website analytics - we use Google Analytics to collect anonymised, aggregated data about how visitors use this site (pages visited, time on page, general location). This data does not identify you personally. Analytics are only active after you accept cookies via the consent banner on your first visit; decline and no analytics cookies are set. See the Cookies section below.

Who we share your data with

• Bookwhen - our booking platform, which processes your booking details on our behalf.
• Google Analytics - anonymised, aggregated site-usage data only, and only with your consent.
• Legal obligation - we may disclose your data if required by law or to protect the rights, property, or safety of Heart & Graft Coffee Ltd, our customers, or others.

We do not sell your data. We do not use it for advertising.

How long we hold your data

We hold your information for as long as necessary to provide our services and comply with legal obligations. Unless otherwise required by law, data is stored for up to 7 years after our last contact with you, after which it is deleted. Data processed on the basis of your consent will be deleted on request unless there is an alternative lawful basis for us to retain it.

Your rights

You have the right to:

• Find out what personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data (subject to legal obligations).
• Object to or restrict our processing of your data.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us at training@northerncoffeeschool.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not complied with UK GDPR: ico.org.uk  ·  0303 123 1113.

Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies for the following purposes:

Analytics cookies are only placed after you explicitly accept via the banner on your first visit. If you decline, only the consent preference cookie (ncs-consent) is stored. You can withdraw consent at any time by clearing your browser's site data for this domain.

To disable cookies entirely, change your browser settings - see your browser's Help menu. Note that disabling cookies will not significantly affect your use of this site.

Changes to this notice

Any changes we make to this privacy notice will be posted on this page.

Contact

Questions about this notice should be addressed to training@northerncoffeeschool.co.uk.