Privacy PolicyVM & Retail Experience Design Distance Learning Course
Last Updated: 12th April 2026
1. INTRODUCTION
1.1 The Shop & Display Equipment Association ("SDEA", "we", "us", "our") is committed to protecting your privacy and personal data.
1.2 This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website (www.learnvm.co.uk) and enroll in our VM & Retail Experience Design Distance Learning Course.
1.3 SDEA is the data controller for the personal data we process.
Our contact details are:
Shop & Display Equipment Association
24 Croydon Road
Caterham CR3 6YR
United Kingdom
Email: enquiries@sdea.co.uk
Telephone: 01883 348911
Website: www.learnvm.co.uk
1.4 This Privacy Policy should be read alongside our Terms and Conditions.
2. INFORMATION WE COLLECT
2.1 Information You Provide to Us When you enroll in our Course or contact us, we collect:
Personal Details: Full name. Email address. Telephone number. Postal address (if provided)
Payment Information: Payment card details (processed securely by Stripe - we do not store full card details) Billing address.Transaction records
Course-Related Information:
Assignment submissions
Communication with tutors
Progress records
Feedback and assessments
Communication:
Emails, phone calls, or messages you send us
Responses to surveys or feedback forms
2.2 Information We Collect Automatically: When you visit our website, we may automatically collect:
Technical Information: IP address. Browser type and version. Operating system.Time zone and location. Device information
Usage Information: Pages you visit on our website. How you navigate our website. Time spent on pages. Links you click. Referring website
Cookies:See Section 8 for details about cookies3.
3. HOW WE USE YOUR INFORMATION
3.1 Legal Basis for ProcessingWe process your personal data under the following legal bases:
Contract Performance:To provide the Course you've enrolled in. To deliver materials and tutor support. To process your payments. To issue your certificate
Legitimate Interests:To improve our Course and services. To communicate about SDEA activities. To prevent fraud. To maintain security
Legal Obligation:To comply with tax and accounting requirementsTo respond to legal requestsTo maintain records as required by lawConsent:To send marketing communications (where required)To use cookies (see Section 8)
3.2 Specific Uses. We use your information to:
Deliver the Course:Assign you to a tutor. Send course materials. Review assignments and provide feedback. Track your progress. Issue certificates upon completion
Communicate with You: Send course-related updates. Respond to your queries. Provide tutor support. Send administrative notifications
Process Payments:Process enrollment feesIssue receipts. Handle refunds (if applicable)Maintain financial records
Improve Our Services:Analyze how students use the Course. Improve course materials. Develop new content. Enhance the learning experience
Comply with Legal Obligations:Maintain records for tax purposes. Respond to legal requirements. Protect against fraud
4. WHO WE SHARE YOUR INFORMATION WITH
4.1 Your Assigned Tutor. Your name, email, and assignment submissions are shared with your assigned tutor (Barbara Chapman or John Abbate) to provide course support and feedback.
4.2 Service ProvidersWe share data with trusted third parties who help us deliver the Course:
Stripe (Payment Processing):Processes payments securelyWe do not store your full payment card detailsPrivacy policy: https://stripe.com/privacy
Email Service Provider:Sends course materials and communications[Insert provider name if applicable]
Website Hosting:Hosts our website and course materials[Insert provider name if applicable]4.3 Legal RequirementsWe may disclose your information if required by law, court order, or to:Comply with legal processes. Protect our rights or property. Prevent fraud or abuse. Protect the safety of others
4.4 Business Transfers; If SDEA is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change and your rights.
4.5 We Do Not Sell Your Data. We never sell, rent, or trade your personal information to third parties for marketing purposes.
5. INTERNATIONAL TRANSFERS
5.1 Your data is primarily stored and processed in the United Kingdom.
5.2 Some of our service providers (such as Stripe) may process data outside the UK/EEA. When this occurs:We ensure appropriate safeguards are in place. Data is protected under UK GDPR standards. We use standard contractual clauses or other approved mechanisms
5.3 By using our services, you consent to these transfers where necessary for service delivery.
6. HOW LONG WE KEEP YOUR INFORMATION
6.1 Retention Periods; Course Enrollment Data:We retain your enrollment details, assignment records, and communication for 7 years after course completion for record-keeping and regulatory purposes.Payment Records:Financial transaction records are kept for 7 years to comply with UK tax law.Marketing Communications:We keep marketing consent records until you withdraw consent, then for 3 years to evidence your preference.Website Usage Data:Analytics and technical data are typically retained for 2 years.
6.2 Right to Request Deletion: You can request earlier deletion of your data (subject to our legal obligations). See Section 7 for your rights.
7. YOUR RIGHTS: Under UK GDPR, you have the following rights:
7.1 Right of Access: You can request a copy of the personal data we hold about you.
7.2 Right to Rectification. You can ask us to correct inaccurate or incomplete data.
7.3 Right to Erasure ("Right to be Forgotten")You can request deletion of your data in certain circumstances (subject to legal obligations).
7.4 Right to Restrict Processing: You can ask us to limit how we use your data in certain situations.
7.5 Right to Data Portability. You can request your data in a machine-readable format to transfer to another provider.7.6 Right to Object. You can object to processing based on legitimate interests or for marketing purposes.
7.7 Rights Related to Automated Decision-Making. We do not use automated decision-making or profiling that produces legal or significant effects.
7.8 Right to Withdraw Consent. Where we process data based on consent, you can withdraw it at any time.
7.9 How to Exercise Your Rights. To exercise any of these rights, contact us:Email: enquiries@sdea.co.uk
Telephone: 01883 348911
Post: SDEA, 24 Croydon Road, Caterham CR3 6YRWe will respond within 30 days of receiving your request.8. COOKIES8.1 What Are Cookies?Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience.8.2 Types of Cookies We UseStrictly Necessary Cookies:Essential for website functionalityEnable core features like security and enrollmentCannot be disabledPerformance Cookies:Help us understand how visitors use our websiteCollect anonymous usage statisticsUsed to improve website performanceFunctional Cookies:Remember your preferences and settingsEnhance user experienceOptional but recommendedMarketing Cookies (if applicable):Track website visits for advertising purposesRequire your consent8.3 Managing CookiesYou can control cookies through:Our cookie consent banner (first visit)Your browser settingsThird-party opt-out toolsNote: Disabling cookies may affect website functionality.8.4 Third-Party CookiesWe may use third-party services that set cookies:Google Analytics (website analytics)Stripe (payment processing)[Other services if applicable]Each has its own privacy policy governing cookie use.9. DATA SECURITY9.1 How We Protect Your DataWe implement appropriate technical and organizational measures to protect your data:Technical Measures:Secure Socket Layer (SSL) encryption for data transmissionSecure payment processing via Stripe (PCI DSS compliant)Password-protected systemsRegular security updates and patchesFirewall protectionOrganizational Measures:Access controls (limited to authorized personnel only)Staff training on data protectionRegular security reviewsData protection policies and procedures9.2 Your ResponsibilityYou are responsible for:Keeping your login details confidentialUsing strong passwordsNot sharing access with othersNotifying us of any suspected security breach9.3 Data Breach NotificationIn the unlikely event of a data breach affecting your personal data, we will:Notify the Information Commissioner's Office (ICO) within 72 hoursInform you without undue delay if the breach poses a high riskTake steps to minimize harm10. CHILDREN'S PRIVACY10.1 Our Course is intended for adults (18+).10.2 We do not knowingly collect personal data from children under 16 without parental consent.10.3 If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly.10.4 If you believe we have collected data from a child inappropriately, contact us immediately.11. MARKETING COMMUNICATIONS11.1 Our MarketingWe may send you marketing communications about:SDEA courses and servicesIndustry news and updatesEvents and opportunitiesMember benefits11.2 Your ConsentWe only send marketing emails where you have:Given explicit consent, orEnrolled in our Course (legitimate interest for similar services)11.3 UnsubscribeYou can opt out of marketing at any time by:Clicking "unsubscribe" in any marketing emailEmailing enquiries@sdea.co.ukCalling 01883 348911Note: You will continue to receive essential course-related communications even if you unsubscribe from marketing.12. THIRD-PARTY WEBSITES12.1 Our website may contain links to third-party websites.12.2 We are not responsible for the privacy practices of external websites.12.3 We recommend reading the privacy policy of any website you visit.12.4 This Privacy Policy applies only to www.learnvm.co.uk and our Course services.13. CHANGES TO THIS PRIVACY POLICY13.1 We may update this Privacy Policy from time to time to reflect:Changes in lawNew technologiesChanges to our servicesImprovements to our practices13.2 We will notify you of significant changes by:Posting the updated policy on our websiteUpdating the "Last Updated" dateEmailing enrolled students (for material changes)13.3 Continued use of our services after changes indicates acceptance of the updated policy.13.4 We encourage you to review this policy periodically.
14. COMPLAINTS
14.1 Contact Us FirstIf you have concerns about how we handle your data, please contact us:
Email: enquiries@sdea.co.uk
Telephone: 01883 348911
Post: SDEA, 24 Croydon Road, Caterham CR3 6YR
We will investigate and respond within 30 days.
14.2 Information Commissioner's Office (ICO)You have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk
Report online: https://ico.org.uk/make-a-complaint/15.
CONTACT US
or any questions about this Privacy Policy or how we handle your data:
Email: enquiries@sdea.co.uk
Telephone: 01883 348911
Post: Shop & Display Equipment Association, 24 Croydon Road, Caterham CR3 6YR
Website: www.learnvm.co.uk
16. SUMMARY OF YOUR RIGHTSYour personal data rights:✓ Know what data we hold about you
✓ Request corrections to inaccurate data
✓ Request deletion (subject to legal obligations)
✓ Restrict how we use your data
✓ Receive your data in portable format
✓ Object to certain processing
✓ Withdraw consent
✓ Complain to the ICO We will:✓ Process your data lawfully and fairly
✓ Keep your data secure
✓ Only use data for stated purposes
✓ Retain data only as long as necessary
✓ Respect your privacy rights
✓ Respond to your requests within 30 days
End of Privacy Policy; By using our website and services, you acknowledge that you have read and understood this Privacy Policy.