Your rights under UK GDPR

If you are in the United Kingdom, the UK General Data Protection Regulation and the Data Protection Act 2018 give you specific rights over your personal data. This page describes those rights and how to exercise them. It complements our general Privacy Policy; in case of conflict, the rights described here apply for UK residents.

§ 01Who is the data controller

Fezzo Consulting, operating Ralspin, is the data controller for the personal data we process about you. Our contact for data protection matters is [email protected].

§ 02What data we process and why

We process the personal data described in our Privacy Policy for the purposes of operating the curation service. Specifically:

• Account and contact information — to provide the service and communicate with you. Lawful basis: performance of a contract.
• Information about your children and your goals — to prepare matched recommendations. Lawful basis: performance of a contract and, for sensitive categories, your explicit consent.
• Optional learning support and medical information — to surface specialty programs. Lawful basis: your explicit consent.
• Marketing communications — to send you our edits and related correspondence. Lawful basis: performance of a contract for subscribers; legitimate interests or consent for non-subscribers.
• Analytics through Fathom Analytics — to understand site use in aggregate. Lawful basis: legitimate interests; Fathom does not use cookies or collect personal data.

§ 03Your rights

Under UK GDPR you have the following rights:

§ 04How to exercise your rights

Email [email protected] with your request. We will respond within one month, as required by UK GDPR. For complex requests we may extend this by up to two further months and will let you know if we need to.

§ 05International data transfers

Ralspin is based in the United States, and several of our service providers are US-based. When we transfer your personal data outside the UK, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses with our service providers, ensuring your data receives an essentially equivalent level of protection.

§ 06Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, as described in our Privacy Policy. Most subscriber data is deleted within twelve months of subscription cancellation, unless you ask us to keep it for a future restart.

§ 07Complaints

If you believe we have not handled your personal data properly, please tell us first — we want to fix it. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

§ 08Children

Where UK residents under 18 are likely to use our service, additional protections under the UK Age Appropriate Design Code (Children’s Code) apply. See our COPPA and Children’s Privacy page for details.

§ 09Contact