GDPR Compliance

Last updated: June 19, 2026

Our Commitment to GDPR

sapphire-aurora is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights under this regulation.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our educational services
• Legitimate Interest: Processing for business operations and service improvement
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Compliance with legal requirements

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

Right to Restrict Processing

You can request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Protection Officer

For questions regarding GDPR compliance or to exercise your rights, contact our Data Protection Officer:

Email: [email protected]
Address: 142 Kingsland Road, London E2 8DY, United Kingdom

Data Processing Activities

We process personal data for the following purposes:

• Enrollment and course administration
• Communication regarding courses and services
• Payment processing through secure third-party processors
• Website functionality and security
• Analytics and service improvement

Third-Party Processors

We work with carefully selected third-party service providers who process data on our behalf. All processors are contractually bound to GDPR requirements and appropriate data processing agreements are in place.

International Transfers

When personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Other legally approved transfer mechanisms

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
We will respond to your request within one month of receipt.