Privacy Policy for Stonemason's Path

At Stonemason's Path, a provider of bespoke career solutions and professional development, we are committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and process your data when you interact with our online platform and utilise our services, including bespoke career coaching, executive leadership training, skills gap analysis, tailored CV and LinkedIn profile optimisation, interview preparation workshops, career transition guidance, and professional networking strategies.

1. Information We Collect

We collect various types of information to provide and improve our services to you.

1.1. Personal Data You Provide Voluntarily

This includes information you provide when you register for an account, subscribe to our newsletter, request information about our services, complete a contact form, participate in a survey, or engage in our coaching and training programmes. This data may include:

• Contact Information: Your name, email address, phone number, and physical address.
• Professional Information: Your career history, educational background, skills, career aspirations, CVs, LinkedIn profile details, and any other information relevant to your professional development that you choose to share.
• Correspondence: Records of communications and interactions with us.
• Payment Information: While we do not directly store full credit card details, we may collect billing addresses and transaction details related to the purchase of our services. Payment processing is handled by secure third-party providers.

1.2. Information We Collect Automatically

When you visit our online platform, we may automatically collect certain information about your device and browsing activity, including:

• Technical Data: IP address, browser type and version, operating system, device type, and referrer URL.
• Usage Data: Pages viewed, time spent on pages, navigation paths, and interactions with elements on our site.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

2. How We Use Your Information

We use the collected information for various purposes, primarily to provide and enhance our career solutions:

• To Provide and Maintain Our Services: Including delivering bespoke career coaching, executive leadership training, content, and resources tailored to your needs.
• To Personalise Your Experience: Understanding your professional background and goals allows us to offer more relevant advice and training.
• To Process Transactions: Administering payments for services purchased.
• To Communicate With You: Responding to inquiries, sending service-related updates, newsletters, and promotional materials that align with your interests.
• For Internal Operations: Data analysis, improving our website and services, identifying usage trends, and ensuring the security of our platform.
• To Comply with Legal Obligations: Adhering to applicable laws, regulations, and legal processes.

3. Legal Basis for Processing Personal Data (GDPR)

For individuals in the European Economic Area (EEA) and the UK, our processing of your personal data is based on the following legal grounds:

• Performance of a Contract: When processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (e.g., providing career coaching services).
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, and your fundamental rights do not override those interests (e.g., improving our services, preventing fraud, direct marketing where permitted).
• Consent: When you have given explicit consent for specific processing activities (e.g., subscribing to marketing communications). You have the right to withdraw your consent at any time.
• Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.

4. Sharing Your Information

We do not sell your personal data. We may share your information with limited third parties under specific circumstances:

• Service Providers: We may engage third-party companies and individuals to facilitate our service, provide service-related functions, or assist us in analysing how our service is used (e.g., payment processors, hosting providers, analytics providers, email marketing services). These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal Requirements: We may disclose your personal data in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of Stonemason's Path, prevent or investigate possible wrongdoing in connection with the service, protect the personal safety of users of the service or the public, or protect against legal liability.
• Business Transfers: If Stonemason's Path is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.

5. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. When assessing the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Your Data Protection Rights

Depending on your location, particularly if you are in the UK or EEA, you have certain rights regarding your personal data. These rights may include:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
• The Right to Erasure (Right to Be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
• The Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

7. Security of Your Data

The security of your data is paramount to us. We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

8. Links to Other Sites

Our service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Children's Privacy

Our services are not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our service, prior to the change becoming effective and update the "last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By Post: Stonemason's Path, 17 Regent's Wharf, Coronation Road, Floor 3, Bristol, BS1 2EP, UK