Data controller
Tool Mapbase is the data controller for personal data collected through this website and through programme correspondence. Postal address: 76 Argyll Road; Llandow; CF71 0YA; United Kingdom. Email: info@tool-mapbase.digital. Telephone: 077 0069 9118.
What we collect
From the contact form: name, email, optional topic, and the message you type. From enrolment: billing name, company if any, and a record of which programme you joined. From the cookie banner: a local preference on your device; that preference is not sent to us unless you later write. We do not ask for payment card numbers on this site because we do not take payment here.
Please do not paste end-user personal data from your app into the form. If a message contains such data we will ask you to resend a redacted version and we will delete the original when we can.
Why we collect it
To reply to your request, to provide a programme you have asked to join, to keep accounts, and to meet legal duties (tax, complaints). The lawful bases we rely on are contract (or steps prior to contract) and legitimate interests in running a teaching house. Where we send optional journal notices we rely on consent, which you may withdraw by writing to us.
Retention
Enquiry messages that do not become an enrolment are kept for 18 months, then deleted from live mailboxes. Enrolment and invoice records are kept for six years after the tax year they belong to. Critique letters we sent you are kept for three years unless you ask us to delete them sooner, in which case we will, except where accounts law requires a stub.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you may request access, rectification, erasure, restriction, and portability, and you may object to processing based on legitimate interests. You may complain to the Information Commissioner’s Office. We will answer rights requests without undue delay and within one month unless the request is complex.
International transfers
Our primary filing is in the United Kingdom. If a processor stores mail or files outside the UK (for example a video host for Primer recordings), we use a transfer tool recognised by UK law, such as the UK International Data Transfer Addendum, and we will name that processor if you ask. We do not sell lists of students.
Processors
Email hosting and, if you accept analytics cookies, a page-view measurement host. We do not use the contact form as a marketing list unless you tick a separate, future invitation — there is no such tick on the current form.
Children
Programmes are aimed at working adults. We do not knowingly collect data from children.