Last Updated: [13th March 2025]

At Changes, we are committed to ensuring that your personal data is protected and handled in accordance with the General Data Protection Regulation (GDPR). This statement outlines our compliance with GDPR and your rights regarding your personal data.

1. Data Collection and Use

We collect personal data only for specific, legitimate purposes, such as:

• Processing and managing course bookings
• Communicating course details and updates
• Arranging hotel accommodations (with consent)
• Providing support and responding to inquiries
• Sending newsletters and important updates (if subscribed)
• Generating invoices and payment records

2. Lawful Basis for Processing Data

We process personal data based on the following legal grounds:

• Contractual Obligation: To fulfill our service agreements (e.g., course bookings, hotel arrangements).
• Legitimate Interests: To provide a smooth and efficient service.
• Consent: When users voluntarily provide information (e.g., subscribing to newsletters, sharing medical information for accessibility needs).
• Legal Obligation: When required by law (e.g., tax and financial records).

3. Data Storage and Security

We implement strict security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Data is stored securely within:

• Encrypted databases
• Secure cloud-based services (e.g., Zoho for invoicing and website for newsletters)
• Protected internal systems with restricted access

4. Data Sharing and Third-Party Processors

We do not sell or trade personal data. However, we may share necessary information with:

• Hotels (for accommodation bookings, with your consent)
• Zoho (for invoicing purposes)
• Email and newsletter services (for sending updates and newsletters)
• Legal authorities (if required by law)

All third-party providers we use comply with GDPR standards.

5. Data Retention

We retain personal data only as long as necessary to provide our services or meet legal obligations. Since individuals may attend our courses for several years, we keep relevant records for ongoing communication unless you request deletion.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your data unless legally required to retain it.
• Restriction: Limit the processing of your data under certain conditions.
• Objection: Object to data processing based on legitimate interests.
• Portability: Receive your data in a structured format to transfer to another service.

To exercise any of these rights, please contact us at Changesforstammerers@gmail.com

7. Consent and Withdrawal

By providing your personal data, you consent to its use as outlined in this statement. You may withdraw consent at any time by contacting us.

8. Updates to This Statement

We may update this GDPR Compliance Statement periodically. Any changes will be posted on our website.