Last updated: September 2026
Our Commitment to Data Protection
crater-trail is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities regarding your personal data seriously and have implemented appropriate measures to ensure compliance.
Data Controller
crater-trail acts as the data controller for personal information collected through our website and educational services. This means we determine the purposes and means of processing your personal data.
Contact details:
crater-trail
47 Carver Street
Sheffield, S1 4FS
United Kingdom
Email: [email protected]
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Contract: Processing is necessary for the performance of a contract with you (e.g., course enrolment)
- Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications)
- Legitimate interests: Processing is necessary for our legitimate interests, provided these do not override your rights (e.g., improving our services)
- Legal obligation: Processing is necessary to comply with the law
Your Rights Under GDPR
Right to Access
You have the right to request a copy of the personal information we hold about you. We will respond to your request within one month.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Erasure
In certain circumstances, you have the right to request that we delete your personal information. This right is not absolute and may be subject to legal obligations we have to retain certain data.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two further months for complex requests.
Data Transfers
We store and process your data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with data protection laws.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in a high risk to you, we will also notify you directly.
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.