Privacy Policy
Last Updated: June 2026
Introduction
This privacy policy explains how lush-leap collects, uses, and protects personal information provided by visitors to our website and participants in our training programmes. We are committed to protecting your privacy and handling your data in accordance with applicable data protection legislation including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
Information You Provide
We collect personal information that you voluntarily provide when you:
- Submit enquiry forms on our website
- Register for training courses
- Communicate with us via email
- Create an account in our learning management system
This information may include:
- Name
- Email address
- Professional background and experience level
- Course preferences and learning objectives
- Payment information (processed through secure third-party payment processors)
Information Collected Automatically
When you visit our website, we automatically collect certain technical information including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring website
How We Use Your Information
We use collected information for the following purposes:
- Processing and responding to your enquiries
- Providing access to training courses and related materials
- Communicating course schedules, updates, and relevant information
- Processing payments and maintaining transaction records
- Improving our website functionality and user experience
- Complying with legal obligations
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Contract: Processing necessary to fulfil our contractual obligations when you enrol in courses
- Legitimate Interests: Processing necessary for our legitimate business interests, such as responding to enquiries and improving services
- Consent: Where you have provided explicit consent, such as for marketing communications
- Legal Obligation: Processing required to comply with legal requirements
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share information with:
- Service Providers: Third-party providers who assist with payment processing, hosting, and other technical services, bound by confidentiality obligations
- Legal Requirements: When required by law, regulation, or legal process
- Business Transfers: In the event of a merger, acquisition, or sale of assets
Data Retention
We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Course participants' data is typically retained for seven years following course completion to maintain training records and provide ongoing support.
Your Rights
Under UK data protection law, you have the following rights:
- Access: Request access to your personal data
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data in certain circumstances
- Restriction: Request restriction of processing in certain situations
- Objection: Object to processing based on legitimate interests
- Data Portability: Request transfer of your data in a structured, commonly used format
- Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at [email protected]
Security Measures
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure socket layer technology, access controls, and regular security assessments.
Cookies
Our website uses cookies to enhance user experience. For detailed information about our cookie usage, please refer to our Cookie Policy.
Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing personal information.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. Significant changes will be communicated through prominent website notices or direct communication to registered users.
Contact Information
For questions, concerns, or requests regarding this privacy policy or our data practices, contact:
lush-leap
Berkeley Square House
London W1J 6BD
United Kingdom
Email: [email protected]
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.