Home Classes Pricing & Plans About Instructors Contact

DATA PROTECTION REQUESTS (DSAR)

Last updated: February 2026

1. PURPOSE

This policy explains how you can request access to, correction of, deletion of, or restriction of processing of your personal data, and how Newbold College of Higher Education (as controller for Newbold Connect) will respond.

2. HOW TO SUBMIT A REQUEST

Email: [email protected]

Subject line: Data Request (DSAR) — [Access / Correction / Deletion / Restriction / Objection / Portability]

Please include:

  • Your full name
  • The email address linked to your Newbold Connect account
  • The type of request you are making
  • Any relevant details to help us locate the information (e.g., purchase date, Class title, support ticket reference)

3. IDENTITY VERIFICATION

To protect your data, we may ask you to verify your identity before we respond. This may include:

  • confirmation from the account email address, and/or
  • additional information reasonably necessary to confirm identity

We will only request information that is proportionate to the risk and the request.

4. RESPONSE TIMELINES

We aim to respond without undue delay and, in most cases, within one month of receiving a valid request.

If a request is complex or numerous, we may extend the timeframe by up to two further months as permitted by law. If we extend, we will tell you why.

5. WHAT WE WILL PROVIDE

Depending on your request, we may provide:

  • confirmation of whether we process your personal data
  • a copy of your personal data (where required)
  • details on purposes, categories, recipients, retention, and source (where applicable)
  • correction of inaccurate data
  • deletion where applicable and lawful
  • restriction or objection outcomes where applicable
  • a portable copy of certain data where legally required

6. RIGHT TO OBJECT TO DIRECT MARKETING

You have an absolute right under Article 21(2) of UK GDPR to object at any time to the processing of your personal data for direct marketing purposes, including any profiling carried out in connection with direct marketing. If you object, we must stop processing your data for that purpose immediately. You do not need to give us a reason.

To exercise this right, email us at [email protected] with the subject line: Data Request (DSAR) — Objection (Direct Marketing). You can also unsubscribe from any marketing email by clicking the unsubscribe link in that email.

7. LIMITS AND EXCEPTIONS

Some requests may be refused or limited where permitted by law (for example, where disclosure would adversely affect the rights and freedoms of others, or where we are legally required to retain certain records).

If we refuse or limit your request, we will explain the basis for the decision.

8. COMPLAINTS

If you are unhappy with our response, you may:

  • reply to us to request a review, and/or
  • raise a concern with the UK Information Commissioner’s Office (ICO)

9. CHANGES TO THIS POLICY

We may update this policy to reflect legal, operational, or platform changes. The date at the top of the page shows the latest version.