Our commitment to protecting your data rights under UK GDPR.
Last Updated: October 2026
Rain-prism is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we handle your personal data and your rights under these regulations.
Rain-prism acts as the data controller for personal information collected through our website and services. Our contact details are:
Rain-prism
47 Chancery Lane
London WC2A 1PL
United Kingdom
Email: [email protected]
We only process personal data when we have a lawful basis to do so. The lawful bases we rely upon include:
When you enrol in our courses, we process your personal data to fulfil our contractual obligations. This includes:
We seek your consent for certain processing activities, including:
You may withdraw consent at any time by contacting us or using the unsubscribe link in marketing emails.
We may process data based on our legitimate business interests when this does not override your rights. Examples include:
We process certain data to comply with legal requirements, such as:
You have the following rights regarding your personal data:
You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request. To make a subject access request, please email us at [email protected] with proof of identity.
If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. Please contact us with the correct information.
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as when:
You can request that we restrict how we use your data in certain situations, such as while we verify the accuracy of contested data.
Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.
You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds. You have an absolute right to object to direct marketing.
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
We implement appropriate technical and organisational measures to ensure data security, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of it. If the breach is likely to result in high risk to you, we will also notify you directly.
When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:
To exercise any of your rights, please contact us:
We may ask for proof of identity before processing your request. We will respond within one month, or inform you if an extension is needed.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you contact the ICO.
We review our GDPR compliance regularly and update this page as needed. Please check back periodically for any changes.