Your rights under the General Data Protection Regulation
Opal Zone is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and are transparent about how we collect and process your personal data.
Opal Zone is the data controller responsible for your personal data. If you have any questions about our data practices or wish to exercise your rights, please contact us at:
Email: [email protected]
Address: Unit 14, Westhill Business Centre, Westhill, Aberdeen AB32 6JL, United Kingdom
We process personal data on the following lawful bases:
Under GDPR, you have the following rights:
You have the right to request copies of your personal data. We may charge a small fee for this service if requests are manifestly unfounded or excessive.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten."
You have the right to request that we restrict the processing of your personal data, under certain conditions.
You have the right to object to our processing of your personal data, under certain conditions, particularly where we are processing data based on legitimate interests.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
As we provide educational services to children and young people, we are particularly mindful of our responsibilities regarding children's data. We only collect data about children with the consent of a parent or guardian. Parents or guardians may exercise any data rights on behalf of their children at any time.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For enrolment records, we typically retain data for six years after the last interaction, unless a longer retention period is required by law.
We do not routinely transfer personal data outside the United Kingdom. If we do need to transfer data internationally, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
We have implemented appropriate technical and organisational measures to secure personal data against accidental loss, destruction, or damage, and against unauthorised access, alteration, disclosure, or processing.
To exercise any of your data protection rights, please contact us by email at [email protected]. We will respond to your request within one month. In certain cases, we may need to verify your identity before processing your request.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can contact the ICO at www.ico.org.uk or by phone on 0303 123 1113.
We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
Last updated: 20 May 2026