Privacy Policy

Last updated: 25 May 2026

Sandy Way ("we", "our", or "us") is committed to protecting the privacy of our website visitors, programme participants, and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sandy-way.com or participate in our programmes.

Information We Collect

Personal Information You Provide

When you enquire about our services or enrol in a programme, we may collect:

• Name and contact details (email address, postal address)
• Information about your child (name, age, learning needs)
• Payment information for programme fees
• Communication preferences
• Any other information you choose to provide in enquiry forms

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on site
• Referring website
• Device information

How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and communicate with you
• Process enrolments and manage programme participation
• Send you updates about your child's progress
• Improve our website and services
• Send marketing communications (only with your consent)
• Comply with legal obligations

Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract: To perform our contract with you for programme services
• Consent: For marketing communications and cookies
• Legitimate interests: To improve our services and respond to enquiries
• Legal obligation: To comply with applicable laws

Data Sharing

We do not sell your personal information. We may share your data with:

• Service providers who assist with our operations (payment processors, email services)
• Professional advisors (accountants, legal counsel)
• Regulatory authorities when required by law

All third parties are contractually required to protect your data and use it only for specified purposes.

Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, typically:

• Enquiry data: 2 years from last contact
• Programme participant data: 7 years after programme completion (for safeguarding purposes)
• Financial records: As required by UK tax law

Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at [email protected].

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our programmes serve children and teenagers. We collect information about minors only with parental consent and use it solely for programme delivery. We do not collect more information than necessary and do not market directly to children.

International Transfers

Your data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place.

Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top indicates when revisions were made. Continued use of our website after changes constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions or to exercise your rights, contact:

Sandy Way
14 Wellington Place
Belfast, BT1 6GE
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.