Privacy & Cookies Policy

Last updated: 20th May 2026

1. Introduction

Equality and Diversity UK Ltd (“EDUK”, “we”, “us”) is committed to protecting your privacy and handling your personal data in a lawful, fair and transparent way. This policy explains what personal data we collect, how we use it, and your rights.

EDUK is registered with the Information Commissioner’s Office (ICO): ZB518334.

2. What personal data we collect

We may collect the following information:

• Name and contact details
• Organisation and job role
• Booking and order information
• Payment information (processed securely by third‑party providers)
• Communications with us
• Website usage data (analytics, cookies)
• Staff and contractor information

3. How we use your information

We use personal data to:

• Provide training, resources and services
• Manage bookings, orders and enquiries
• Send updates or newsletters (only with consent or legitimate interest)
• Maintain financial and administrative records
• Improve our services and website
• Meet legal or regulatory obligations

4. Lawful bases for processing

We rely on one or more of the following lawful bases:

• Contract – to deliver services you have purchased
• Consent – for optional communications
• Legitimate interests – running and improving our business
• Legal obligation – financial, tax or regulatory requirements
• Vital interests – rare, safety‑related reasons

5. Special category data

We may process special category data (such as health information or ethnicity) when necessary for:

• Accessibility adjustments
• Equal opportunities monitoring
• Employment requirements
• Legal claims

Where required, we use an Appropriate Policy Document in line with the Data Protection Act 2018.

6. Sharing your information

We only share data when necessary and with appropriate safeguards. This may include:

• Service providers (IT, email, payment processors)
• Training partners
• Professional advisers
• Regulators or authorities where legally required

We never sell personal data.

7. International transfers

If we transfer personal data outside the UK, we use one of the following safeguards:

• UK adequacy regulations
• International Data Transfer Agreement (IDTA)
• UK Addendum to EU Standard Contractual Clauses

8. Data security

We protect personal data through:

• Secure systems and encrypted storage
• Access controls
• Staff training
• Regular security reviews
• Secure disposal of data

9. Data retention

We keep personal data only for as long as necessary. Typical retention periods include:

• Bookings and orders: 6 years
• Enquiries: 12 months
• Mailing list data: until you unsubscribe
• Staff records: in line with employment law

10. Your rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Complain to the ICO

We aim to respond to all requests within one month.

11. Cookies

Current cookie use:

This website currently only uses essential cookies required for basic functionality. If this changes, we will update this policy and, where required, request your consent.

12. Marketing

We comply with PECR. Marketing emails are only sent with consent or legitimate interest. You can unsubscribe at any time using the link in our emails.

13. Data breaches

If a personal data breach occurs, we will:

• Assess the risk to individuals
• Notify the ICO within 72 hours where required
• Notify affected individuals where there is a high risk

14. Contact us

Data Protection Department
Equality and Diversity UK
Warwick House
14 Lowes Road
Bury
BL9 6PJ
Email: dp@equalityanddiversity.co.uk