Introduction
We are committed to safeguarding the privacy of our website visitors, participants and contacts; this policy sets out how we will treat your personal information.
Sea Salt Learning Ltd, a company registered in England and Wales (company number 09059565), is the controller of the personal data described in this policy. You can contact us about it at hello@seasaltlearning.com.
What information do we collect?
We may collect, store and use the following kinds of personal data:
- Information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type, referral source, length of visit and number of page views);
- Information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our services (including courses);
- Your name, email address, organisation and role when you register for an event or programme, register your interest in one, download a book or guide, or sign up for our newsletter;
- Dietary and access needs you tell us about for an event. These can reveal information about your health or religion, so we only use them to look after you at our events;
- Your attendance at our events and programmes, and progress towards any certification;
- Notes our staff record about our work with you or your organisation;
- Who you report to or assist at work, and how your organisation relates to others (for example, that it is part of a group). We sometimes learn this from your colleagues or from public sources rather than from you;
- Whether you have agreed to receive marketing emails from us, and the evidence of that choice (see “Marketing emails” below);
- Any other information that you choose to send to us.
Using your personal data
Personal data submitted on this website will be used for the purposes specified in this privacy policy or in relevant parts of the website. We may use your personal information to:
- Administer the website;
- Supply to you services purchased via the website, and run the events and programmes you register for;
- Send statements and invoices to you, and collect payments from you;
- Send you general (non-marketing) commercial communications;
- Send you email notifications which you have specifically requested;
- Send to you our newsletter and other marketing communications relating to our business which we think may be of interest to you, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications);
- Deal with enquiries and complaints made by or about you relating to the website.
- We will not without your express consent provide your personal information to any third parties for the purpose of direct marketing.
Our lawful bases
We rely on the following lawful bases under UK data protection law:
- Contract: to register you for events and programmes, deliver them, and send you sign-in codes, booking confirmations and joining details;
- Consent: to send you marketing emails, and to use any dietary or access needs you give us (you can withdraw consent at any time);
- Legitimate interests: to keep records of our work with the organisations and people we deal with, to keep our website secure and free of spam, and to count visits to our short links anonymously;
- Legal obligation: to keep invoices and accounting records.
Marketing emails
Our forms include an unticked box that reads: “Keep me updated with Sea Salt Learning news, events and offers. You can change what you receive or unsubscribe at any time.” If you tick it, we will email you our newsletter, news of upcoming events, and offers. We record when and where you ticked it and the exact wording you saw. The box is never ticked for you, and you never have to tick it to register for an event or download a book.
Every marketing email has a link to change what you receive and a one-click unsubscribe link. You can also email us and we will make the change for you and keep a record of it. If you unsubscribe and later tick the box again, for example when registering for an event, we treat that as your new choice.
Unsubscribing from marketing does not stop service emails, such as sign-in codes, booking confirmations, joining details and messages about a programme you are taking part in. If emails to your address bounce, or you report one of our emails as spam, we stop sending marketing to that address.
QR codes and short links
When you scan one of our QR codes or follow one of our short links (go.seasaltlearning.com), we count the visit anonymously. We record the time, the type of device (for example, phone or computer) and the site you came from. We use a code that changes every day to avoid counting the same visit twice on a given day, and it cannot identify you. We do not store your IP address, browser details or any cookie, and we cannot link a scan to you or to your visits on other days. Cloudflare delivers these links on our behalf and processes your IP address in transit as our processor. We keep individual scan records for 13 months, then only daily totals.
Disclosures
We may disclose information about you to any of our employees, officers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes as set out in this privacy policy.
In addition, we may disclose information about you:
- To the extent that we are required to do so by law;
- In connection with any legal proceedings or prospective legal proceedings;
- In order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
- To the purchaser (or prospective purchaser) of any business or asset which we are (or are contemplating) selling.
Except as provided in this privacy policy, we will not provide your information to third parties.
Who processes data for us
These suppliers process personal data on our behalf, under contract and only on our instructions:
- Hetzner: hosting for our website and systems, in the EU;
- Amazon Web Services (Amazon SES): sending our emails, from the UK and Ireland;
- Cloudflare: delivering our short links;
- Microsoft 365: email and documents;
- Zoom: online sessions;
- Xero: invoicing and accounts;
- Google: website analytics (Google Analytics) and spam protection on our forms (reCAPTCHA);
- Automattic: website features, statistics and spam filtering (Jetpack, WordPress.com and Akismet).
International transfers
Some of these suppliers, or their own subcontractors, may process data outside the UK and the European Economic Area, for example in the United States. Where they do, we rely on the UK’s adequacy regulations (including the UK-US data bridge) or on standard contractual clauses with the UK addendum to protect your data.
How long we keep your data
- Event, programme and certification records: for as long as we run the programme and for six years after your last involvement with us;
- Dietary and access needs: kept on your record so you do not have to repeat them, until you ask us to remove them;
- Invoices and accounting records: six years, as the law requires;
- Your marketing choice and its evidence: for as long as we email you, and for six years after;
- If you unsubscribe or ask us to delete your data, we keep a minimal record (your email address and that you do not want marketing) so that we never email you marketing by mistake;
- Older submissions from our website forms are held in our website’s database while we move them into our current systems; once that is done we will delete what we no longer need.
Cookies
This website uses cookies from Google Analytics to understand how visitors use it, from Google reCAPTCHA to protect our forms from spam, and from Jetpack (WordPress.com) for site statistics and features. Our participant site (participant.seasaltlearning.com) only uses a cookie to keep you signed in. You can block or delete cookies in your browser settings.
Security of your personal data
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. You are responsible for keeping your password and user details confidential. We will not ask you for your password.
Policy amendments
We may update this privacy policy from time-to-time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes. This policy was last updated on 14 October 2026.
Your rights
You have the right to:
- Ask for a copy of the personal information we hold about you;
- Ask us to correct information that is wrong or incomplete;
- Ask us to delete your information;
- Ask us to restrict how we use your information, or object to our use of it;
- Object to direct marketing at any time, which we will always honour;
- Ask for information you gave us in a portable format;
- Withdraw your consent at any time, where we rely on it.
These requests are normally free, and we will respond within one month. To make one, email hello@seasaltlearning.com.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk).
Third party websites
The website contains links to other websites. We are not responsible for the privacy policies or practices of third party websites.
Updating information
Please let us know if the personal information which we hold about you needs to be corrected or updated.
Contact
If you have any questions about this privacy policy or our treatment of your personal data, please write to us by email to hello@seasaltlearning.com