Last updated: January 2026

This Privacy Policy explains how GDI Academy Ltd (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use our website www.gdi-academy.uk
and purchase or access our educational courses.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller:
GDI Academy Ltd
27 Riverside Court, Tobermory, Isle of Mull, United Kingdom PA75 6RF
SC863842
Email: courses@gdi-academy.uk

GDI Academy Ltd is the data controller responsible for your personal data.

2. Personal Data We Collect

We may collect and process the following types of personal data:

a) Information You Provide to Us

Full name
Email address
Billing address
Payment information (processed securely by third-party payment providers; we do not store full card details)
Account login details
Course enrolment, progress, and completion data
Communications you send to us (including emails and support requests)
 

b) Information Collected Automatically

IP address
Browser type and version
Device and operating system information
Pages visited and interactions with our website
Cookies and similar tracking technologies (see Section 9)

3. How We Use Your Personal Data

We use your personal data to:

Provide access to our educational courses and services

Process payments and manage purchases

Create and manage user accounts

Communicate with you about your courses, account, or enquiries

Provide student support

Improve our website, content, and learning experience

Monitor website usage and prevent fraud

Comply with legal and regulatory obligations

Send marketing communications where permitted by law

4. Lawful Bases for Processing

Under UK GDPR, we process personal data on the following lawful bases:

Contract: Where processing is necessary to deliver purchased courses or services

Legal obligation: Where we must comply with legal or regulatory requirements (e.g. tax and accounting)

Legitimate interests: To operate and improve our business, website security, and services

Consent: For marketing communications and non-essential cookies where required

You may withdraw your consent at any time.

5. Marketing Communications

We may send you marketing communications about GDI Academy Ltd and our courses if:

You have given explicit consent, or

You are an existing customer and we are permitted to do so under UK law

You can opt out at any time by clicking the unsubscribe link in our emails or by contacting us directly.

6. Sharing Your Personal Data

We may share your personal data with trusted third parties, including:

Payment service providers (e.g. Stripe, PayPal)

Learning management system (LMS) and course delivery platforms

Email marketing and communication platforms

Website hosting and IT service providers

Professional advisers (such as accountants, legal advisers, and insurers)

All third parties are required to process personal data securely and in compliance with UK GDPR.

We do not sell your personal data.

7. International Data Transfers

Some of our service providers may be located outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

UK adequacy regulations

International Data Transfer Agreements (IDTAs)

Other legally approved safeguards

8. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Privacy Policy:

Account and course data: while your account remains active

Financial and transaction data: typically 6 years to meet UK tax and accounting requirements

Marketing data: until you withdraw consent or opt out

Data is securely deleted or anonymised when no longer required.

9. Cookies

Our website uses cookies and similar technologies to:

Ensure essential website functionality

Analyse website performance and usage

Improve user experience

You can manage your cookie preferences through your browser settings or our cookie banner (where applicable).
Further details may be provided in a separate Cookie Policy.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access your personal data

Request correction of inaccurate or incomplete data

Request erasure of your personal data

Restrict or object to processing

Request data portability

Withdraw consent at any time

To exercise your rights, please contact us using the details below.

11. Complaints

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

Telephone: 0303 123 1113

We encourage you to contact us first so we can address your concerns.

12. Data Security

GDI Academy Ltd uses appropriate technical and organisational measures to protect personal data, including:

Secure servers and encrypted connections

Restricted access to personal data

Regular monitoring and system updates

While we take reasonable steps to protect your data, no online service can be completely secure.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and, where appropriate, notified to you.

14. Contact Us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

GDI Academy Ltd
Website: www.gdi-academy.uk

Email: courses@gdi-academy.uk
Address: 27 Riverside Court, Tobermory, Isle of Mull, United Kingdom, PA75 6RF