This Privacy Policy explains how Doll Lantern Courses processes personal data in connection with the website and related course services. It applies to visitors, prospective learners, and registered users. By using the site, you acknowledge the practices described here.
Under GDPR, we process personal data only where we have a valid legal basis, such as performance of a contract, compliance with a legal obligation, legitimate interests, or consent where required. We also apply data minimisation, purpose limitation, and storage limitation principles in our handling of personal data.
Where GDPR applies, you may have rights to access, rectify, erase, restrict, object to processing, and receive a copy of certain data in a portable format. If processing is based on consent, you may withdraw consent at any time without affecting prior processing. You may also object to processing based on legitimate interests in appropriate cases.
We use personal data to operate the website, provide and manage professional development courses, process registrations, communicate with users, maintain security, improve site performance, handle payments or billing where applicable, comply with legal obligations, and manage disputes or enforcement matters. We may also use limited data for internal reporting and service administration.
We may share personal data with trusted service providers that support hosting, analytics, payment processing, communications, security, or course administration. These parties act on our instructions or as independent controllers where required by law. We seek appropriate contractual or organisational safeguards for such disclosures.
We may disclose personal data where required by law, regulation, court order, or other valid legal process. We may also share information when necessary to establish, exercise, or defend legal claims, or to protect the rights, safety, and security of the site, our users, or others.
We may collect identification details, contact information, account or enrollment data, payment-related records where needed, course preferences, communications, and technical data such as device and usage information. We limit collection to what is relevant for operating the site, delivering courses, managing requests, and meeting legal obligations.
We receive personal data directly from you when you create an account, register for a course, submit a form, or contact us. We also collect data automatically through the website, including logs, cookie data, and similar technical information. In some cases, we may receive limited information from service providers involved in payment, hosting, analytics, or course administration.
The site may use essential cookies for security and basic functionality, preference cookies to remember choices, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent depending on their purpose. We do not rely on cookies for purposes beyond those described in this policy without providing appropriate notice where required.
You may refuse or delete cookies through your browser settings. Some cookies are necessary for the site to function and cannot be disabled without affecting core features. Where the site provides a cookie banner or preference tool, you can use it to manage non-essential cookies. Browser settings may also allow you to block or remove stored cookies.
Depending on your location and the applicable law, you may have rights relating to your personal data, including access, correction, deletion, restriction, objection, and portability. You may also have the right to lodge a complaint with the competent supervisory authority if you believe your data has been processed unlawfully.
To exercise a privacy right, provide enough information for us to identify you and understand your request. We may ask for additional details to verify identity or clarify the scope of the request. We will respond within the period required by applicable law and may decline a request where legal exceptions apply.
We retain personal data for the period necessary to provide the service, manage records, resolve disputes, comply with legal obligations, and support legitimate business needs. When data is no longer required, we delete it, anonymise it, or otherwise restrict it in accordance with our retention practices and applicable law.
We may update this Privacy Policy from time to time to reflect changes in our processing practices, legal requirements, or service structure. The revised version will apply from the date it is posted unless a different effective date is stated. Where changes are material, we will take reasonable steps to draw attention to them.
