Privacy Policy
Last updated: 14 January 2025
At Eyvar Mnoux, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our wedding bouquet design education programmes. We're committed to being transparent about what data we gather and why we need it.
Who We Are
Eyvar Mnoux operates as an educational institution specialising in wedding bouquet design training. Our registered address is St Pancras International Station The Arcade, Euston Rd, London N1C 4QP, United Kingdom. When we refer to "we," "our," or "us" in this document, we mean Eyvar Mnoux.
We process personal data as a controller under UK GDPR requirements. That means we determine how and why your information is processed, and we're responsible for ensuring it's done lawfully and fairly.
Information We Collect
The type of information we gather depends on how you engage with us. Here's what we typically collect:
Contact and Enquiry Information
- Your name and preferred contact details when you reach out to us
- Email address and phone number for correspondence
- Any specific questions or interests you share about our courses
- Postal address if you request physical materials
Student Enrolment Data
- Full legal name and date of birth for registration purposes
- Educational background relevant to floristry or design
- Emergency contact information for duty of care
- Payment details and billing information (processed securely through third parties)
- Any special requirements or accessibility needs you inform us about
Technical Information
- IP address and browser type when you visit our website
- Pages you view and how long you spend on them
- Referring website addresses
- Device information and screen resolution
Communication Records
- Emails, messages, and phone call notes
- Feedback forms and survey responses
- Correspondence about course arrangements or concerns
How We Use Your Information
We're pretty straightforward about why we need your data. Here's what we do with it:
Delivering Educational Services
When you enrol in one of our programmes, we use your information to manage your participation. This includes sending course materials, coordinating session times, providing assessment feedback, and issuing certificates or credentials upon completion.
Communication and Support
We'll contact you about matters directly related to your studies or enquiries. This might be class schedule changes, important updates about our teaching approach, or responses to questions you've asked. We also use your details to send occasional updates about new course offerings that align with what you've previously shown interest in.
Administrative Purposes
Your data helps us handle enrolments, process payments, maintain accurate student records, and comply with our legal obligations as an educational provider. We keep financial records for the periods required by UK tax law.
Quality Improvement
We analyse aggregated data about how people use our website and engage with our courses. This helps us understand what's working well and what needs refinement. Individual behaviours aren't scrutinised – we're looking at patterns across all users.
Important: We will never sell your personal information to third parties. We don't hand over your data to marketing companies or anyone else looking to profit from your contact details. The only external sharing happens when it's essential for delivering our services or required by law.
Who We Share Data With
Sometimes we need to share your information with carefully selected partners. Here's who might see your data and why:
Service Providers
We work with companies that help us run our operations. Our payment processor handles transactions securely without us seeing your full card details. Email service providers help us send correspondence efficiently. Web hosting companies store our site data. These providers can only use your information as we instruct them and must protect it appropriately.
Professional Advisers
Our solicitors, accountants, and insurance providers may access certain data when they're providing services to us. They're bound by professional confidentiality obligations.
Legal Requirements
If we're legally required to disclose information – for instance, in response to a court order or regulatory investigation – we'll comply with those obligations. We'd only share what's specifically required.
Business Transitions
Should Eyvar Mnoux be acquired or merge with another organisation, your data would be transferred to the new owners so they can continue providing education services. We'd notify you if this happens.
International Data Transfers
We primarily store data within the United Kingdom. However, some of our service providers operate servers in other countries. When your information is transferred outside the UK, we ensure appropriate safeguards are in place.
This might include using providers certified under recognised data protection frameworks, implementing standard contractual clauses approved by UK authorities, or transferring only to countries deemed to have adequate protection levels. You can ask us for specific details about how your data is protected in any particular transfer.
How Long We Keep Your Data
We don't keep personal information longer than necessary. Here are the general retention periods:
Security Measures
Protecting your data is something we take seriously, though we're honest about the fact that no system is completely impenetrable. Here's what we do:
Our website uses SSL encryption to protect data transmitted between your browser and our servers. Access to personal information is restricted to staff members who genuinely need it to do their jobs. We use password protection and regular security updates on our systems.
Physical records are stored in locked cabinets at our London premises. We have procedures for securely disposing of data when it's no longer needed – paper records are shredded and digital files are securely wiped.
We train our team on data protection responsibilities and maintain an internal breach response plan. If something goes wrong, we'll notify affected individuals and the Information Commissioner's Office as required by law.
Your Rights
UK data protection law gives you several rights regarding your personal information. Here's what you can do:
Access Your Data
You can request a copy of the personal information we hold about you. We'll provide this free of charge within one month, though complex requests might take a bit longer.
Correction Rights
If you spot inaccuracies in your data, let us know and we'll fix them promptly. This is particularly important for contact details and educational records.
Deletion Requests
You can ask us to delete your information in certain circumstances. We'll comply unless we have legitimate grounds to retain it, such as legal obligations or ongoing contractual relationships.
Processing Restrictions
You can request that we limit how we use your data while we resolve any disputes about accuracy or lawfulness of processing.
Data Portability
For information you've provided under contract or consent, you can request a copy in a structured, commonly used format to transfer elsewhere.
Objection Rights
You can object to processing based on legitimate interests. We'll stop unless we can demonstrate compelling grounds that override your interests.
Automated Decisions
We don't currently use automated decision-making or profiling that produces legal effects. If this changes, we'll update this policy and inform affected individuals.
Withdraw Consent
Where we're processing data based on your consent, you can withdraw it at any time. This won't affect processing that already occurred under your previous consent.
Exercising Your Rights
To make any request or raise concerns about how we handle your data, contact us using the details below. We'll need to verify your identity before actioning requests – this protects your information from being disclosed to unauthorised people.
We aim to respond within one month, though legally complex requests might take up to three months. We'll explain if we need extra time and why.
If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office. Their contact details are: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Phone: 0303 123 1113. Website: ico.org.uk
Cookies and Website Technology
Our website uses cookies – small text files stored on your device. We use essential cookies that make the site function properly (like remembering items you've added to forms). We also use analytics cookies to understand how visitors interact with our pages.
You can control cookies through your browser settings, though disabling certain cookies might affect site functionality. Most browsers allow you to refuse all cookies or only accept specific ones.
We don't use advertising cookies or track you across other websites. The analytics data we gather is aggregated and doesn't identify individual visitors.
Children's Privacy
Our courses are designed for adults. We don't knowingly collect information from anyone under 16 without parental consent. If we discover we've inadvertently gathered data from a child, we'll delete it promptly.
Changes to This Policy
We review this privacy policy regularly and update it when our practices change or legal requirements evolve. The "last updated" date at the top shows when we last revised it.
Significant changes will be highlighted on our website and, for enrolled students, communicated via email. We encourage you to check back periodically to stay informed about how we're protecting your information.
Contact Our Privacy Team
For questions about this policy or how we handle your data:
Email: [email protected]
Phone: +44 1604 760777
Post: Privacy Enquiries, Eyvar Mnoux, St Pancras International Station The Arcade, Euston Rd, London N1C 4QP, United Kingdom
We aim to respond to all privacy-related enquiries within five working days.