Purpose of this privacy policy
This privacy policy explains how Cadmium Education Ltd collects and uses your personal data through your use of this website and our services, including any data you may provide when registering with us, making an enquiry, or purchasing services.
Children and minor students
Our website is primarily intended for adults, including parents, guardians, and individuals seeking mentorship services.
Cadmium Education Ltd provides mentorship services that may involve students under the age of 18. Where services are delivered to a minor student, the parent or legal guardian acts as the contracting party and provides the relevant information.
Parents or guardians are responsible for supervising the minor student’s use of our services. Where personal data relates to a minor student, consent will be obtained from the parent or legal guardian where required.
Controller
Cadmium Education Ltd is the controller and responsible for your personal data.
Throughout this policy the terms “we”, “us”, and “our” refer to Cadmium Education Ltd.
The types of personal data we collect about you
Personal data means any information that can identify an individual.
We may collect, use, store and transfer the following categories of personal data:
1. Identity Data
Includes first name, last name, pronouns and username or a similar identifier.
2. Contact Data
Includes email address, telephone number and billing address.
3. Financial Data
May include limited payment-related information where required for billing purposes. Payment card details are processed securely by third-party payment providers.
4. Transaction Data
Includes details about payments to and from you and details of products or services you have purchased from us.
5. Technical Data
Includes IP address, login data, browser type and version, time zone setting and location, browser plug-ins, operating system, platform, device identifiers and other technology on the devices used to access the website.
6. Profile Data
Includes username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
7. Usage Data
Includes information about how you interact with and use our website, products and services.
8. Marketing and Communications Data
Includes your preferences in receiving marketing from us and your communication preferences.
9. Aggregated Data
We may also use aggregated data such as statistical or demographic data. This data does not reveal your identity and is therefore not personal data.
For example, we may aggregate usage data to understand how visitors interact with specific areas of the website in order to improve our services.
How your personal data is collected
We collect data in several ways:
1. Information you provide directly
You may provide personal data by filling in forms or corresponding with us by email, phone or otherwise. This includes when you:
• apply for or purchase our services
• create an account to access course materials or programme resources
• submit an enquiry through our website or by email
• subscribe to communications or publications
• request marketing information
• book or participate in mentorship sessions
• upload or share materials such as portfolio work or written drafts
• provide feedback or communicate with us
2. Automated technologies
As you interact with our website we may automatically collect technical data about your equipment and browsing behaviour through cookies and similar technologies.
Further information is available in our Cookie Policy.
3. Third parties
We may receive personal data from third-party providers where necessary for the operation of our services. This may include:
• technical data from analytics providers such as Google
• marketing or advertising service providers who help measure advertising effectiveness
• contact, financial and transaction data from payment processors
• technical data from website hosting, infrastructure and analytics providers
How we use your personal data
1. Legal basis
Under data protection law we must have a lawful basis for processing your personal data.
We rely on the following legal bases.
2. Performance of a contract
Where processing is necessary to perform a contract with you or to take steps before entering into a contract.
3. Legitimate interests
Where processing is necessary for our legitimate interests in running and improving our business, provided these interests are not overridden by your rights.
4. Legal obligation
Where processing is necessary to comply with a legal requirement.
5. Consent
Where you have provided explicit consent for a specific purpose, for example receiving newsletters.
Purposes for which we use personal data
1. Registering you as a customer
We use identity and contact data to register you as a client of Cadmium Education Ltd.
This processing is necessary for the performance of a contract.
We retain this data for up to six years after the end of our relationship to comply with legal, tax and accounting obligations. Certain information may be retained longer where reasonably necessary for legitimate business purposes.
2. Processing and delivering services
We use identity, contact, financial, transaction and marketing communication data to:
• manage payments, fees and charges
• deliver services you have purchased
• collect and recover money owed
This processing is necessary to perform our contract with you and for our legitimate interests in recovering debts.
Financial and transaction records are retained for six years in accordance with UK tax and accounting requirements.
3. Managing our relationship with you
We use identity, contact, profile and communications data to:
• notify you about changes to our terms or privacy policy
• respond to requests, complaints or queries
• maintain accurate records of our relationship
This processing is necessary for contractual obligations, legal obligations and legitimate interests.
Data is retained for up to six years after the relationship ends.
4. Surveys, competitions and feedback
We may process identity, contact, profile, usage and communication data when you choose to participate in surveys or promotions.
This processing helps us improve our services and understand customer experience.
Survey data is normally retained for up to two years.
5. Website administration and protection
We use identity, contact and technical data to operate and secure our website, including:
• system maintenance
• performance monitoring
• troubleshooting
• fraud prevention
• infrastructure management
Technical and security data is generally retained for up to twelve months unless longer retention is required for security or legal reasons.
6. Website analytics and improvement
We analyse technical and usage data to understand how users interact with the website and to improve functionality, services and user experience.
Analytics data is typically retained for up to twelve months unless a shorter retention period applies through the analytics provider.
7. Marketing communications
We may use identity, contact, profile, usage and communication data to send information about services that may be relevant to you.
You can opt out of marketing communications at any time by using the unsubscribe link or contacting us directly.
Marketing preferences are retained until you withdraw consent or unsubscribe.
8. Student work and testimonials
With permission we may showcase examples of student work, testimonials or outcomes for promotional or educational purposes.
Where identifiable student work is used, consent will be obtained. For students under 18 this consent will be obtained from a parent or legal guardian.
9. Direct marketing
When registering or providing personal data you may be asked to indicate whether you wish to receive marketing communications.
You can opt out at any time by using the unsubscribe link in communications or contacting us at:
Administrative communications related to bookings, services or updates will still be sent where necessary.
Disclosures of your personal data
We may share your personal data with trusted service providers where necessary to operate our services.
This may include providers of:
• payment processing
• website hosting
• analytics services
• communication tools
• infrastructure and technical services
If our business is sold, transferred or merged with another organisation, personal data may be transferred to the new owners under the same privacy conditions.
All third parties are required to respect the security of your personal data and process it only according to our instructions.
International transfers
Some service providers may be located outside the United Kingdom.
Where personal data is transferred internationally we ensure appropriate safeguards are in place, including recognised contractual protections such as the International Data Transfer Agreement (IDTA).
These safeguards ensure your personal data receives protection equivalent to UK standards.
Data security
We implement appropriate security measures to protect personal data from:
• unauthorised access
• accidental loss
• misuse
• alteration
• disclosure
Access to personal data is restricted to employees, contractors and service providers who require it to perform their roles.
Procedures are in place to respond to suspected data breaches and we will notify affected individuals and regulators where required by law.
Data retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
This includes legal, regulatory, tax and accounting obligations.
Under UK law certain customer information must be retained for six years after the end of the customer relationship.
In some cases personal data may be anonymised and used for research or statistical purposes.
Your legal rights
Under data protection law you have several rights regarding your personal data.
These include the right to:
• request access to your personal data
• request correction of inaccurate or incomplete data
• request erasure of personal data in certain circumstances
• object to processing based on legitimate interests
• object to direct marketing at any time
• request transfer of your data in a structured format
• withdraw consent where processing is based on consent
• request restriction of processing in certain circumstances
Requests can be made by contacting us using the details below.
We normally respond within one month.
Contact details
If you have questions about this privacy policy or wish to exercise your rights you can contact us at:
Email:
hello@cadmiumeducation.com
Postal address:
Cadmium Education Ltd
124 City Road
London
EC1V 2NX
Complaints
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK authority responsible for data protection.
We ask that you contact us first so that we can attempt to resolve any issue directly.
Changes to this privacy policy
We keep this policy under regular review.
Last updated: 7 March 2026
It is important that the personal data we hold about you is accurate and up to date. Please inform us if your personal details change during your relationship with us.
Third-party links
Our website may contain links to external websites or services.
We do not control these websites and are not responsible for their privacy practices.
When leaving our website we encourage you to read the privacy policies of any third-party sites you visit.