Data Protection Policy

Purpose

This policy explains how The Trifecta Nutrition Academy collects, uses, and protects personal data. We are committed to complying with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our principles

We follow the key principles of data protection law. Personal data will be:

  1. Processed fairly, lawfully, and transparently
  2. Collected for clear, specific purposes
  3. Limited to what is necessary
  4. Accurate and kept up to date
  5. Retained only for as long as needed
  6. Kept secure at all times

What data we collect

We only collect the information needed to enrol students and keep them updated about their course. This includes:

  • Name and contact details
  • Enrolment information
  • Course progress or updates

Payment information is processed securely by our payment provider; we do not store full card details.

Why we use this data

We use personal data for:

  • Managing course enrolments
  • Delivering courses
  • Sending essential course updates and information

We do not use data for unrelated purposes such as marketing, unless a student has given clear consent.

Lawful basis for processing

We process personal data under the following lawful bases:

  • Contract: to provide and administer courses students enrol in
  • Consent: for optional communications such as newsletters (consent can be withdrawn at any time)
  • Legal obligation: to meet regulatory or financial requirements where necessary

Data sharing

We do not sell personal data. Data may be shared only with trusted third-party providers who help us deliver our services (such as IT or payment services). These providers are required to keep data secure and use it only for the agreed purpose.

Retention

We keep personal data only for as long as it is required for enrolment and course delivery, or as required by UK law. Once data is no longer needed, it will be securely deleted or anonymised.

Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access.

Rights of individuals

Students have the right to:

  • Access their personal data
  • Request corrections or deletion
  • Restrict or object to how it is used
  • Withdraw consent at any time

Contact and complaints

If you have any questions or concerns about how we use your data, please contact us.

Review

This policy will be reviewed regularly to ensure it remains accurate and compliant.