1. Purpose

This policy outlines The REH Academy’s commitment to protecting personal data and ensuring ongoing compliance with data protection laws. It sets out the principles, rules, and guidelines governing the collection, processing, storage, and sharing of personal data.

2. Scope

This policy applies to all personal data processed by The REH Academy, including data related to learners, employees, partners, and any other stakeholders.

3. Data Protection Principles

The REH Academy adheres to the following key principles:

• Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and transparently.
• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
• Data Minimisation: Only the necessary data required for the intended purpose is collected.
• Accuracy: Personal data is accurate and kept up to date where necessary.
• Storage Limitation: Data is retained only for as long as necessary for the intended purpose.
• Integrity and Confidentiality: Data is processed securely to prevent unauthorized access, loss, or damage.

4. Data Collection & Processing

• Personal data is collected directly from individuals or through interactions with The REH Academy’s services.
• The purposes for processing data include course enrolment, customer support, marketing (with consent), and regulatory compliance.
• Processing activities are conducted in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

5. Data Security Measures

• Access to personal data is restricted to authorized personnel only.
• Encryption and secure storage mechanisms are implemented to safeguard sensitive information.
• Regular security audits and risk assessments are conducted to maintain data security.

6. Data Subject Rights

Individuals have the right to:

• Access their personal data
• Request rectification or erasure of their data
• Restrict or object to processing
• Data portability
• Withdraw consent for processing where applicable

Requests to exercise these rights can be made via Email: contact@rehvolution.online

7. Data Sharing & Third Parties

• Personal data will not be shared with third parties unless required for service delivery, legal obligations, or with explicit consent.
• Third-party service providers handling personal data on behalf of The REH Academy must comply with data protection agreements.

8. Data Retention

• Data will be retained only for the necessary period to fulfil its purpose.
• Upon expiration of retention periods, data will be securely deleted or anonymized.

9. Complaints & Breach Reporting

• Any concerns or complaints about data protection should be reported to The REH Academy’s Data Protection Officer via Email: contact@rehvolution.online
• In the event of a data breach, affected individuals and regulatory authorities will be notified as required by law.

10. Policy Review & Updates

This policy is reviewed annually or in response to legislative changes to ensure ongoing compliance.

For further inquiries, please contact The REH Academy at Email: contact@rehvolution.online