Privacy Policy

Last updated: 8 September 2026

Who we are

This privacy policy applies to umber-ravine.com operated by umber-ravine. Our registered address is 87 Mitchell Street, Glasgow, G1 3LN, United Kingdom.

What information we collect

We collect information you provide directly when enrolling in our programmes, including:

  • Full name
  • Email address
  • Selected programme details
  • Payment information (processed securely through third-party providers)

We also collect limited technical information automatically when you visit our website, including IP address, browser type, and pages visited.

How we use your information

We use collected information to:

  • Process course enrollments and send confirmation details
  • Communicate about scheduled sessions and programme updates
  • Improve our website and educational services
  • Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Legal basis for processing

We process your data based on:

  • Contractual necessity (to provide educational services you've enrolled in)
  • Legitimate interests (to improve our services and communicate effectively)
  • Legal compliance (to meet tax and regulatory requirements)
  • Consent (where you've opted in to additional communications)

Data retention

We retain enrollment and payment records for seven years to comply with UK tax regulations. Marketing consent data is retained until you withdraw consent. Technical website data is anonymised after 24 months.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate information
  • Request deletion of your data (subject to legal retention requirements)
  • Object to processing or request restriction
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]

Cookies

Our website uses essential cookies to maintain session state and functional cookies to remember your cookie preferences. We do not use advertising or tracking cookies. See our Cookies Policy for details.

Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission, secure servers, and access controls. However, no internet transmission is completely secure.

Third-party services

We use limited third-party services for essential operations:

  • Payment processing (your card details are never stored on our servers)
  • Email delivery for enrollment confirmations

These providers process data under strict contractual terms and GDPR compliance requirements.

Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via email to enrolled participants. The updated date appears at the top of this document.

Contact and complaints

For privacy-related questions or to exercise your rights, contact us at [email protected]

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.