Privacy Policy

This Privacy Notice aims to give you information on how we collect and process your personal data, including any data you may provide through use of our website or when you purchase a product.

Contact Details

Name: Paradigm Shift Consulting Ltd 

Address: 44a Griffith Street, Rushden, Northamptonshire, NN10 0RL 

Phone Number: 03301 330 920 

E-mail: info@paradigmshiftconsulting.co.uk  

Website: www.paradigmshiftconsulting.co.uk  

Website: www.gdptraining.co.uk  

Date of Notice: 23 January 2023 

Types of personal information we collect

We currently collect and process the following information: 

• Identity Data, including first name, last name, middle name and title. 

• • Contact Data, including email address and phone number. 

• • Profile Data, including username and password, including your training test scores and feedback or survey responses. 

• Technical Data, including internet protocol (IP) address and location. 

• • Transaction Data, including details about payments made from or to you and other details of products you have purchased from us. 

• • Usage Data, including information about how you use our website(s) and products, including any courses you purchase, begin or complete and last date of login. 

We may also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice. 

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. 

How we get personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons: 

• Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms, creating an account or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you; 

• Apply for or purchase our products or services; 

• • Create an account on any of our website(s); 
  • Subscribe to our service or publications; 
  • Request marketing to be sent to you; or 
  • Complete a survey or feedback form.  

• Automated technologies or interactions. As you interact with any of our website(s), we may automatically collected Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy for further details. 

• Third parties or publicly available sources. We may receive personal data about you from various third parties (and public sources) both inside and / or outside the EU – such as those as are set out below: 

• • Analytics providers; 
  • Advertising networks; and 
  • Search information providers. 
• Contact, Financial and Transaction Data from providers of technical, payment and delivery services. 

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: 

• Where we need to perform the contract we are about to enter into or have entered into with you. 
   
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. 

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:  

• Your consent. You can remove your consent at any time. You can do this by contacting us on info@paradigmshiftconsulting.co.uk.  
• We have a contractual obligation. 
• We have a vital interest. 

Cookies

You can set your browser to refuse all (or some) browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website(s) may become inaccessible or not function properly. For more information about the cookies we use, please see our cookie policy. 

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to obtain an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us on info@paradigmshiftconsulting.co.uk.  

If we need to use your personal data for an unrelated purpose, we will notify you and we we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law. 

Disclosure of your personal data

We may have to share your personal data with third parties. 

• Internal Third Parties (within the meaning – as set out in the Glossary below). 

• External Third Parties (within the meaning – as set out in the Glossary below). 

• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets.  

Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice. 

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. 

Data storage and security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. 

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. 

We keep Identity Data for 5 years, Transactional Data for 6 years, and Technical Data for 1 year. We will then dispose your information by performing a full erasure. You can request an erasure of your data before this timeframe by contacting us on info@paradigmshiftconsulting.co.uk.  

Your data protection rights

Under data protection law, you have rights including: 

• Your right of access – You have the right to ask us for copies of your personal information at no cost. 

• Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.  

• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.  

• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.  

• Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances. 

• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

You are not required to pay any charge for exercising your rights. However, we may charge a reasonable fee – if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in such circumstances. 

If you make a request, we have one month to respond to you. Please contact us at info@paradigmshiftconsulting.co.uk or 03301 330 920 if you wish to make a request. 

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at complaints@paradigmshiftconsulting.co.uk, or by writing to us: 

Paradigm Shift Consulting Ltd
44a Griffith Street
Rushden
Northamptonshire
NN10 0BJ 

Our Complaint Policy can be viewed here. 

You can also complain to the ICO if you are unhappy with how we have used your data. 

The ICO’s address:             

Information Commissioner’s Office 

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF 

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.uk 

Glossary

Lawful Basis Complying with regulations as set out by UK GDPR and the Data Protection Act 2018. 

Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. 

Performance of a Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.  

Comply with a legal or regulatory obligation means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to. 

Third Parties / Internal Third Parties 

Other companies in our group of companies (from time to time) (including those who may be acting as joint controllers or processors). 

External Third Parties 

• Service providers (such as those who provide IT, CRM, customer engagement platforms  and system administration services). 

• Professional advisers and assistance service providers (including lawyers, bankers, accountants, auditors, insurers and consultants). 

• Payment processing service providers, such as Stripe and Paypal. 

• HM Revenue & Customs, regulators and certain other public authorities. 

• Certain other third parties, for example, market researchers, fraud prevention agencies, price comparison sites etc.