Privacy Policy
Your privacy matters to us at arucantoula
Last updated: January 15, 2025
Our Commitment to Your Privacy
At arucantoula, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our financial accountability education services. We believe transparency builds trust — and that's what this document is all about.
As a UK-based educational organisation, we comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. But beyond legal requirements, we're committed to earning your trust through responsible data practices.
Information We Collect
Personal Information You Provide
When you engage with our services, you might share:
- Contact details (name, email, phone number, postal address)
- Educational background and professional experience
- Learning preferences and goals
- Payment information for course enrollment
- Communication preferences and feedback
Information We Collect Automatically
Our website gathers technical information to improve your experience:
- IP address and browser information
- Pages visited and time spent on our site
- Device type and operating system
- Referral sources and search terms used
Data Type | Purpose | Retention Period |
---|---|---|
Contact Information | Course delivery and support | 5 years after course completion |
Learning Progress | Educational support and certification | 10 years for certification records |
Website Analytics | Site improvement and user experience | 26 months |
Marketing Preferences | Relevant course updates | Until you withdraw consent |
How We Use Your Information
Your information helps us provide better educational services. Here's how we use it:
Educational Services
- Delivering course content and tracking your progress
- Providing personalised feedback and support
- Issuing certificates and maintaining academic records
- Connecting you with relevant learning resources
Communication
- Sending course updates and important notifications
- Responding to your questions and support requests
- Sharing relevant educational opportunities (with your consent)
- Conducting surveys to improve our services
Important: We never sell your personal information to third parties. Any data sharing is limited to essential service providers who help us deliver your education.
Your Rights Under GDPR
You have significant control over your personal data. Here are your rights and how to exercise them:
Access and Portability
You can request a copy of all personal data we hold about you. We'll provide this in a commonly used format within one month of your request.
Correction and Updates
If your information is incorrect or outdated, let us know. We'll update our records promptly and notify any relevant third parties.
Deletion (Right to be Forgotten)
You can ask us to delete your personal data, though we may need to keep some records for legal compliance or legitimate business purposes.
Restriction and Objection
You can limit how we use your data or object to certain processing activities. For example, you might want to restrict marketing communications while continuing your course.
How to Exercise Your Rights
Contact our Data Protection Officer at help@arucantoula.com or write to us at 74 Cornwall St, Plymouth PL1 1LR. We'll respond within one month and won't charge a fee unless your request is clearly unfounded or excessive.
Data Security and Protection
We protect your information using industry-standard security measures:
Technical Safeguards
- Encrypted data transmission using SSL/TLS protocols
- Secure cloud storage with regular backup systems
- Access controls limiting who can view your information
- Regular security audits and vulnerability assessments
Organisational Measures
- Staff training on data protection responsibilities
- Clear policies governing data access and use
- Regular review of our security procedures
- Incident response plans for potential data breaches
While we implement robust security measures, no system is completely foolproof. We'll notify you and relevant authorities within 72 hours if a breach occurs that might affect your rights.
International Data Transfers
Most of your data stays within the UK and European Economic Area. When we do transfer information internationally (such as to cloud service providers), we ensure appropriate safeguards are in place:
- Adequacy decisions from the European Commission
- Standard contractual clauses approved by the EU
- Certification schemes demonstrating appropriate protection
- Regular monitoring of international transfer arrangements
Cookies and Tracking
Our website uses cookies to enhance your experience and understand how you interact with our content. We use:
Essential Cookies
These are necessary for the website to function properly. They enable core features like security, network management, and accessibility.
Analytics Cookies
We use these to understand how visitors use our site, which pages are most popular, and where we can make improvements.
Preference Cookies
These remember your choices and settings to provide a more personalised experience during future visits.
You can control cookies through your browser settings, though disabling certain cookies might limit website functionality.
Changes to This Policy
We review this privacy policy regularly and update it when necessary. Significant changes will be communicated through:
- Email notifications to active users
- Prominent notices on our website
- Updates to course materials where relevant
We encourage you to review this policy periodically to stay informed about how we protect your information.
Third-Party Services
We work with trusted partners to deliver our educational services. These relationships are governed by strict data processing agreements:
Learning Management System
Our course platform is hosted by a UK-based provider that meets our security and privacy standards.
Payment Processing
Payment information is handled by PCI DSS compliant processors. We don't store your full payment card details.
Email Services
Course communications are sent through secure email services that comply with GDPR requirements.
All third-party partners are required to protect your data according to the same standards we maintain internally.
Questions About Your Privacy?
If you have concerns about how we handle your personal information, or if you'd like to exercise any of your data protection rights, please get in touch.