Privacy Policy

Last updated: 14 January 2025

At Eyvar Mnoux, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our wedding bouquet design education programmes. We're committed to being transparent about what data we gather and why we need it.

Who We Are

Eyvar Mnoux operates as an educational institution specialising in wedding bouquet design training. Our registered address is St Pancras International Station The Arcade, Euston Rd, London N1C 4QP, United Kingdom. When we refer to "we," "our," or "us" in this document, we mean Eyvar Mnoux.

We process personal data as a controller under UK GDPR requirements. That means we determine how and why your information is processed, and we're responsible for ensuring it's done lawfully and fairly.

Information We Collect

The type of information we gather depends on how you engage with us. Here's what we typically collect:

Contact and Enquiry Information

  • Your name and preferred contact details when you reach out to us
  • Email address and phone number for correspondence
  • Any specific questions or interests you share about our courses
  • Postal address if you request physical materials

Student Enrolment Data

  • Full legal name and date of birth for registration purposes
  • Educational background relevant to floristry or design
  • Emergency contact information for duty of care
  • Payment details and billing information (processed securely through third parties)
  • Any special requirements or accessibility needs you inform us about

Technical Information

  • IP address and browser type when you visit our website
  • Pages you view and how long you spend on them
  • Referring website addresses
  • Device information and screen resolution

Communication Records

  • Emails, messages, and phone call notes
  • Feedback forms and survey responses
  • Correspondence about course arrangements or concerns
Legal Basis for Processing We process your personal data under several legal grounds: contractual necessity (to deliver education services you've enrolled in), legitimate interests (to improve our courses and communicate about relevant opportunities), legal obligation (to comply with education and tax requirements), and your consent where specifically obtained.
Data We Don't Collect We don't gather information about your racial or ethnic background, political opinions, religious beliefs, trade union membership, genetic data, or health information unless you voluntarily provide it for reasonable adjustments or special considerations.

How We Use Your Information

We're pretty straightforward about why we need your data. Here's what we do with it:

Delivering Educational Services

When you enrol in one of our programmes, we use your information to manage your participation. This includes sending course materials, coordinating session times, providing assessment feedback, and issuing certificates or credentials upon completion.

Communication and Support

We'll contact you about matters directly related to your studies or enquiries. This might be class schedule changes, important updates about our teaching approach, or responses to questions you've asked. We also use your details to send occasional updates about new course offerings that align with what you've previously shown interest in.

Administrative Purposes

Your data helps us handle enrolments, process payments, maintain accurate student records, and comply with our legal obligations as an educational provider. We keep financial records for the periods required by UK tax law.

Quality Improvement

We analyse aggregated data about how people use our website and engage with our courses. This helps us understand what's working well and what needs refinement. Individual behaviours aren't scrutinised – we're looking at patterns across all users.

Important: We will never sell your personal information to third parties. We don't hand over your data to marketing companies or anyone else looking to profit from your contact details. The only external sharing happens when it's essential for delivering our services or required by law.

Who We Share Data With

Sometimes we need to share your information with carefully selected partners. Here's who might see your data and why:

Service Providers

We work with companies that help us run our operations. Our payment processor handles transactions securely without us seeing your full card details. Email service providers help us send correspondence efficiently. Web hosting companies store our site data. These providers can only use your information as we instruct them and must protect it appropriately.

Professional Advisers

Our solicitors, accountants, and insurance providers may access certain data when they're providing services to us. They're bound by professional confidentiality obligations.

Legal Requirements

If we're legally required to disclose information – for instance, in response to a court order or regulatory investigation – we'll comply with those obligations. We'd only share what's specifically required.

Business Transitions

Should Eyvar Mnoux be acquired or merge with another organisation, your data would be transferred to the new owners so they can continue providing education services. We'd notify you if this happens.

International Data Transfers

We primarily store data within the United Kingdom. However, some of our service providers operate servers in other countries. When your information is transferred outside the UK, we ensure appropriate safeguards are in place.

This might include using providers certified under recognised data protection frameworks, implementing standard contractual clauses approved by UK authorities, or transferring only to countries deemed to have adequate protection levels. You can ask us for specific details about how your data is protected in any particular transfer.

How Long We Keep Your Data

We don't keep personal information longer than necessary. Here are the general retention periods:

Enquiry Data If you ask about courses but don't enrol, we'll keep your contact details for up to two years in case you later decide to join us. After that, we delete everything unless you've asked to stay on our mailing list.
Student Records For enrolled students, we maintain core education records (name, dates of attendance, qualifications earned) indefinitely for legitimate reference purposes. Detailed coursework and assessment materials are kept for six years after you complete the programme.
Financial Information Payment records and invoices are retained for seven years to comply with UK tax and accounting requirements.
Communication Logs Emails and correspondence are generally kept for three years unless they relate to ongoing matters or contain information needed for other purposes outlined above.

Security Measures

Protecting your data is something we take seriously, though we're honest about the fact that no system is completely impenetrable. Here's what we do:

Our website uses SSL encryption to protect data transmitted between your browser and our servers. Access to personal information is restricted to staff members who genuinely need it to do their jobs. We use password protection and regular security updates on our systems.

Physical records are stored in locked cabinets at our London premises. We have procedures for securely disposing of data when it's no longer needed – paper records are shredded and digital files are securely wiped.

We train our team on data protection responsibilities and maintain an internal breach response plan. If something goes wrong, we'll notify affected individuals and the Information Commissioner's Office as required by law.

Your Rights

UK data protection law gives you several rights regarding your personal information. Here's what you can do:

Access Your Data

You can request a copy of the personal information we hold about you. We'll provide this free of charge within one month, though complex requests might take a bit longer.

Correction Rights

If you spot inaccuracies in your data, let us know and we'll fix them promptly. This is particularly important for contact details and educational records.

Deletion Requests

You can ask us to delete your information in certain circumstances. We'll comply unless we have legitimate grounds to retain it, such as legal obligations or ongoing contractual relationships.

Processing Restrictions

You can request that we limit how we use your data while we resolve any disputes about accuracy or lawfulness of processing.

Data Portability

For information you've provided under contract or consent, you can request a copy in a structured, commonly used format to transfer elsewhere.

Objection Rights

You can object to processing based on legitimate interests. We'll stop unless we can demonstrate compelling grounds that override your interests.

Automated Decisions

We don't currently use automated decision-making or profiling that produces legal effects. If this changes, we'll update this policy and inform affected individuals.

Withdraw Consent

Where we're processing data based on your consent, you can withdraw it at any time. This won't affect processing that already occurred under your previous consent.

Exercising Your Rights

To make any request or raise concerns about how we handle your data, contact us using the details below. We'll need to verify your identity before actioning requests – this protects your information from being disclosed to unauthorised people.

We aim to respond within one month, though legally complex requests might take up to three months. We'll explain if we need extra time and why.

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office. Their contact details are: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Phone: 0303 123 1113. Website: ico.org.uk

Cookies and Website Technology

Our website uses cookies – small text files stored on your device. We use essential cookies that make the site function properly (like remembering items you've added to forms). We also use analytics cookies to understand how visitors interact with our pages.

You can control cookies through your browser settings, though disabling certain cookies might affect site functionality. Most browsers allow you to refuse all cookies or only accept specific ones.

We don't use advertising cookies or track you across other websites. The analytics data we gather is aggregated and doesn't identify individual visitors.

Children's Privacy

Our courses are designed for adults. We don't knowingly collect information from anyone under 16 without parental consent. If we discover we've inadvertently gathered data from a child, we'll delete it promptly.

Changes to This Policy

We review this privacy policy regularly and update it when our practices change or legal requirements evolve. The "last updated" date at the top shows when we last revised it.

Significant changes will be highlighted on our website and, for enrolled students, communicated via email. We encourage you to check back periodically to stay informed about how we're protecting your information.

Contact Our Privacy Team

For questions about this policy or how we handle your data:

Email: [email protected]

Phone: +44 1604 760777

Post: Privacy Enquiries, Eyvar Mnoux, St Pancras International Station The Arcade, Euston Rd, London N1C 4QP, United Kingdom

We aim to respond to all privacy-related enquiries within five working days.