GDPR Compliance Statement
How we comply with UK General Data Protection Regulation
Our Commitment to GDPR
quaint-learning is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities as a data controller seriously and have implemented comprehensive measures to protect your personal data.
Lawful Basis for Processing
We only process personal data when we have a lawful basis to do so. Our processing activities are based on:
- Performance of a contract: When we provide pension planning services to you
- Legal obligation: To comply with FCA regulations and financial services legislation
- Legitimate interests: For business operations, fraud prevention, and service improvement
- Consent: When you opt in to marketing communications
Data Protection Principles
We adhere to the six core GDPR principles:
- Lawfulness, fairness, and transparency: We process data legally and inform you about our practices
- Purpose limitation: We collect data only for specified, legitimate purposes
- Data minimization: We only collect data that is necessary for our services
- Accuracy: We keep your data accurate and up to date
- Storage limitation: We retain data only as long as necessary
- Integrity and confidentiality: We protect your data with appropriate security measures
Your GDPR Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
You can request a copy of the personal data we hold about you. We will provide this within one month of your request.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
You can request deletion of your personal data in certain circumstances. However, we may need to retain some data to comply with legal obligations.
Right to Restrict Processing
You can ask us to restrict how we use your personal data in specific situations.
Right to Data Portability
You can request your personal data in a structured, commonly used format to transfer to another organization.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
We do not use automated decision-making or profiling in our services.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us:
Email: [email protected]
Address: 47 Thornbury Lane, Bristol BS7 8NQ, United Kingdom
We will respond to your request within one month. If your request is complex, we may extend this period by up to two months and will inform you accordingly.
Data Security Measures
We implement robust technical and organizational security measures including:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication protocols
- Staff training on data protection
- Secure data backup and recovery procedures
- Incident response and breach notification procedures
International Data Transfers
We process and store your data within the United Kingdom. If we need to transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Breach Procedures
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify the Information Commissioner's Office (ICO) within 72 hours
- Inform affected individuals without undue delay
- Document the breach and our response
- Take measures to mitigate the impact
Complaints
If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: quaint-learning.com
Helpline: 0303 123 1113
We encourage you to contact us first so we can address your concerns directly.
Updates to This Statement
We may update this GDPR compliance statement periodically. Any changes will be posted on this page.
Last updated: May 11, 2026