GDPR Compliance
Last updated: August 2026
Our Commitment to Data Protection
Peak Cascade is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our compliance measures and your rights under these regulations.
Data Controller Information
Peak Cascade Financial Education is the data controller responsible for your personal information.
Registered Address:
37 Harrogate Road
Chapel Allerton
Leeds LS7 3PD
United Kingdom
Contact: [email protected]
What Personal Data We Process
We process the following categories of personal data:
- Identity data: name, age range for programme suitability
- Contact data: email address, postal address
- Programme data: selected programmes, attendance records, participation notes
- Technical data: IP address, browser type, cookies (see our Cookies Policy)
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: When you submit registration forms or contact forms
- Contract: To fulfil our obligations in providing educational programmes
- Legitimate interests: To operate and improve our services, provided this does not override your fundamental rights
- Legal obligation: To comply with UK law and regulatory requirements
Your Data Protection Rights
Under UK GDPR, you have the following rights:
Right to Access
You can request a copy of the personal data we hold about you at any time.
Right to Rectification
You can request correction of inaccurate or incomplete data.
Right to Erasure
You can request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes it was collected, or when you withdraw consent.
Right to Restrict Processing
You can request that we limit how we use your data in certain situations.
Right to Data Portability
You can request that we transfer your data to another organisation or directly to you in a structured, commonly used format.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
We do not use automated decision-making or profiling in our services.
How to Exercise Your Rights
To exercise any of these rights, contact us at [email protected] with:
- Your full name and contact information
- Details of your specific request
- Proof of identity (to protect your data security)
We will respond to your request within one month, though this may be extended for complex requests.
Data Retention
We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy. Typical retention periods include:
- Programme participant records: Duration of programme plus three years
- Registration enquiries not converted to enrolment: Twelve months
- Financial records: Seven years (legal requirement)
After these periods, data is securely deleted unless we have a legal obligation to retain it longer.
Data Security Measures
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption of data in transit and at rest
- Access controls limiting who can view personal data
- Regular security assessments and updates
- Staff training on data protection principles
- Secure disposal of data when no longer needed
International Transfers
We do not transfer personal data outside the United Kingdom. All data is stored and processed within the UK.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by UK GDPR.
Children's Data
We do not directly collect data from children under 13. All information about child participants is provided by parents or legal guardians who maintain control over their children's data.
Right to Lodge a Complaint
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
Updates to This Page
We review and update our GDPR compliance measures regularly. Changes to this page will be posted with an updated date. Significant changes will be communicated to active programme participants.