GDPR Compliance

Last updated: 1 August 2026

Our Commitment

cozy-star is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines your rights and how we ensure compliance.

Data Controller

cozy-star acts as the data controller for personal information collected through this website and our course services. This means we determine how and why your data is processed.

Contact:
cozy-star
47 King Street
Manchester, M2 4LQ
Email: [email protected]

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Be Informed

You have the right to know how we collect and use your personal data. Our Privacy Policy provides this information transparently.

Right of Access

You can request a copy of all personal data we hold about you. We will respond to such requests within one month.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose.

Right to Restrict Processing

You can request that we limit how we use your data while concerns are being investigated or resolved.

Right to Data Portability

You can request your personal data in a structured, commonly used format to transfer to another service provider.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with:

• Your full name
• A description of your request
• Any information to help us locate your data

We will verify your identity before processing requests. Most requests are handled free of charge within one month.

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and keep you informed
• Purpose limitation: We collect data for specified, legitimate purposes only
• Data minimisation: We collect only data that is necessary
• Accuracy: We take steps to ensure data remains accurate
• Storage limitation: We retain data only as long as needed
• Integrity and confidentiality: We protect data with appropriate security measures
• Accountability: We can demonstrate compliance with these principles

Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Secure connections (HTTPS) for data transmission
• Access controls limiting who can view personal data
• Regular security assessments
• Staff training on data protection

Data Breach Procedures

In the event of a data breach posing risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and communicate with affected individuals as required by law.

Complaints

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

Updates

This GDPR information page may be updated periodically. Significant changes will be communicated through our website.