GDPR Compliance

Last updated: 25 May 2026

beam-force is committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller

beam-force is the data controller responsible for your personal data. Our contact details are:

Email: [email protected]
Address: 47 Colmore Row, Birmingham, B3 2BS, United Kingdom

Your GDPR rights explained

Under GDPR, you have comprehensive rights regarding your personal data. Here's what each right means and how to exercise it:

1. Right of access

You can request confirmation of whether we process your personal data and obtain a copy of that data. This is commonly known as a "subject access request" and is free of charge in most circumstances.

How to exercise: Email us at [email protected] with your request. We will respond within one month.

2. Right to rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected or completed.

How to exercise: Contact us with the correct information, and we will update our records promptly.

3. Right to erasure (right to be forgotten)

In certain circumstances, you can request deletion of your personal data, including when:

Limitations: We may not be able to delete data if we need to retain it for legal obligations, such as accounting records.

4. Right to restriction of processing

You can request that we limit how we use your data in certain situations, such as when you contest the accuracy of the data or object to processing.

Effect: We will store the data but not actively process it without your consent, except in limited circumstances.

5. Right to data portability

You can request to receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another organization where technically feasible.

Applies to: Data processed by automated means where processing is based on consent or contract performance.

6. Right to object

You can object to processing of your personal data where we rely on legitimate interests as the legal basis. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Direct marketing: You have an absolute right to object to processing for direct marketing purposes.

7. Rights related to automated decision-making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making or profiling.

How we protect your data

We implement appropriate technical and organizational measures to ensure data security, including:

Data processing activities

We process personal data for the following purposes:

Booking and course administration

Data collected: Name, email, child's age, programme selection
Legal basis: Contract performance
Retention period: Duration of service plus 7 years for accounting purposes

Communication

Data collected: Name, email, communication content
Legal basis: Legitimate interest in responding to enquiries
Retention period: As long as necessary to address the enquiry

Payment processing

Data collected: Payment information (processed by third-party payment providers)
Legal basis: Contract performance
Retention period: Transaction records retained for 7 years

Website analytics

Data collected: Usage data, cookies
Legal basis: Consent (via cookie banner)
Retention period: As specified in our Cookies Policy

Third-party data sharing

We share data with carefully selected third parties only when necessary:

All third parties are required to maintain GDPR-compliant data protection standards and process data only according to our instructions.

International data transfers

We store and process data primarily within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

Data breach notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

Children's data

While our services are for children, we collect personal information from parents or legal guardians, not directly from minors. We process children's data (name, age, educational information) only with parental consent and solely for delivering our educational services.

Making a complaint

If you're not satisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: www.beam-force.com

How to exercise your rights

To exercise any of your GDPR rights, please contact us:

We will respond to your request within one month. In complex cases, this may be extended by up to two months, and we will inform you of any extension.

Updates to this information

We review our GDPR compliance regularly and update this page when our practices change. The date at the top indicates when this page was last revised.