Last updated: 25 May 2026
Sandy Way is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we handle personal data in accordance with these regulations.
Sandy Way is the data controller for personal information collected through our website and services.
Contact Details:
Sandy Way
14 Wellington Place
Belfast, BT1 6GE
United Kingdom
Email: [email protected]
You have the right to know how your personal data is being used. We provide this information through our Privacy Policy and this GDPR page.
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will respond within one month.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, including:
Note: We may need to retain certain data for legal or safeguarding purposes.
You can request that we limit how we use your data while we verify its accuracy, consider your objection to processing, or where processing is unlawful but you don't want deletion.
Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.
You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making in our services.
To exercise any of your data protection rights, please contact us:
Please include:
We may need to verify your identity before processing your request.
We will respond to your request within one month. In complex cases, we may extend this by a further two months, but we will inform you if this is necessary.
We process personal data under the following lawful bases:
Where we process special category data (such as information about additional learning needs), we do so with explicit consent and only where necessary to provide appropriate support.
Our services are designed for children and teenagers. We:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
If you are unhappy with how we have handled your personal data, please contact us first at [email protected] so we can address your concerns.
You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last reviewed.