GDPR

Your data rights and our obligations

This page outlines how crisp-studies aligns with the General Data Protection Regulation (GDPR) and what it means for you.

Last updated: 7 April 2026

Data controller

crisp-studies, Cardiff, United Kingdom.

[email protected]

Lawful basis

Why we process data

  • Consent for optional communications and updates
  • Contract performance for delivering booked sessions
  • Legitimate interests to improve training quality
  • Legal compliance where required

Data minimisation

We ask only for information necessary to deliver training and support you effectively.

Your rights

How you can control your data

Right of access

Request a copy of the personal data we hold about you.

Right to rectification

Ask us to correct inaccurate or incomplete information.

Right to erasure

Request deletion when data is no longer needed or consent is withdrawn.

Right to restriction

Ask us to limit processing while a concern is reviewed.

Right to portability

Receive your data in a structured format where applicable.

Right to object

Object to processing for direct marketing or legitimate interests.

Security

Keeping data safe

We use access controls and secure storage to protect your information. Only staff involved in your training can access relevant data.

If we ever need to update how we process data, we will communicate changes and update this page.

Retention

We keep information only for as long as needed to deliver services and meet legal obligations.

Contact

Make a GDPR request

Send your request to [email protected] and we will respond within the required timeframe.