Privacy Policy

1. Introduction

Ceedars Solutions Ltd ("Ceedars", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.

We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018. Our Data Protection Officer can be contacted at joseph.ukonze@ceedars.com.

2. Information We Collect

Information You Provide

• Contact Information: Name, email address, phone number, postal address

• Account Information: Username, password (encrypted)

• Application Information: Education history, work experience, visa status, motivations

• Payment Information: Processed securely by Stripe; we do not store card details

• Communications: Messages you send us via forms, email, or phone

Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers

• Usage Data: Pages visited, time spent, clicks, scroll depth

• Location Data: Country and city (via IP address)

• Cookies: See our Cookie Policy section below

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide our boot-camp, career coaching, and placement services

• Communication: To respond to inquiries, send confirmations, and provide updates

• Payment Processing: To process payments via Stripe

• Improvement: To analyse usage and improve our services

• Marketing: To send promotional materials (only with your consent)

• Legal Compliance: To comply with legal obligations

4. Legal Basis for Processing

• Contract: Processing necessary to perform our contract with you

• Legitimate Interest: Processing necessary for our legitimate business interests

• Consent: Processing based on your explicit consent (e.g., marketing emails)

• Legal Obligation: Processing required by law

5. Sharing Your Information

We may share your information with:

• Service Providers: Stripe (payments), Zapier (automation), Microsoft (productivity)

• Healthcare Employers: NHS Trusts and care providers (only for placement purposes, with your consent)

• Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

6. Data Retention

• Active Period: We retain your data while you are enrolled and for 2 years after completion

• After 2 Years: Personal data is deleted; anonymized analytics data may be retained

• Financial Records: Retained for 7 years for tax and audit purposes

• Consent Logs: Retained for 7 years for GDPR compliance

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data

• Rectification: Request correction of inaccurate data

• Erasure: Request deletion of your data (subject to legal obligations)

• Restriction: Request limitation of processing

• Portability: Receive your data in a structured, machine-readable format

• Objection: Object to processing based on legitimate interests

• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise your rights, email us at joseph.ukonze@ceedars.com. We will respond within 30 days.

8. Cookies

We use cookies for:

• Essential Cookies: Required for website functionality

• Analytics Cookies: Google Analytics to understand usage (with consent)

• Marketing Cookies: To track campaign effectiveness (with consent)

You can manage cookie preferences through your browser settings.

9. Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit

• Secure hosting with Vercel (SOC 2 compliant)

• Payment processing via Stripe (PCI DSS Level 1 certified)

• Regular security reviews and updates

10. International Transfers

Your data may be processed by service providers in the USA (e.g., Stripe, Vercel). These transfers are protected by Standard Contractual Clauses approved by the UK ICO.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or website notice.

12. Contact Us

For privacy-related inquiries:
Data Protection Officer
Email: joseph.ukonze@ceedars.com
Address: Flat 2 Chevron House, Crest Avenue, Grays, Essex RM17 6RZ

13. Complaints

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113