Policy Documents

1. Who We Are

LSShetland is an education and listening services company based in Shetland. We are the data controller for personal data collected through our website (https://www.lsshetland.co.uk) and in the course of providing our services.

We are registered with the Information Commissioner's Office (ICO):

• ICO Registration Number: ZC090739
• Contact: office@lsshetland.co.uk
• Address: Lindale, Bigton, Shetland, ZE2 9JA

2. Our Lawful Basis for Processing

Under UK GDPR and the Data Protection Act 2018, we rely on the following lawful bases to process your personal data:

• Contract: To process your course registration or session booking and fulfil our obligations to you.
• Consent: To send you marketing emails about new courses, offers, or updates — only where you have opted in.
• Legitimate Interests: To improve our website and services, and to maintain records of interactions for business purposes, where this does not override your rights.
• Legal Obligation: Where we are required by law to retain or share information.

3. What Personal Data We Collect

We may collect the following personal data:

• Name
• Email address
• Phone number
• Postal address
• Information you share with us during listening or supervision sessions (handled with strict confidentiality)
• Technical data such as your IP address, browser type, and pages visited (collected via cookies and analytics tools — see our Cookie Policy)

4. How We Use Your Data

We use your personal data to:

• Process your course registration or session booking
• Communicate with you about your course, session, or enquiry
• Send you marketing communications where you have consented
• Improve our website and services
• Comply with our legal and regulatory obligations

5. Third-Party Services and Data Processors

We use the following third-party services on our website, which may process data on our behalf:

• IONOS (website hosting and SiteAnalytics): processes basic visitor analytics data
• Google Maps: used to display our location; subject to Google's own privacy policy
• Website Translator: a third-party translation service that may collect usage data

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

6. Cookies

We use cookies on our website. For full details of the cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy, available at https://www.lsshetland.co.uk/cookie-policy.

7. Data Retention

We retain your personal data only for as long as necessary:

• Client session records: retained for 12 months after your final session
• Course registration records: retained for 3 years for CPD and audit purposes
• Marketing mailing list: retained until you unsubscribe or request removal
• Website enquiry data: retained for 12 months

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: to request a copy of the data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data (the 'right to be forgotten')
• Right to restrict processing: to ask us to limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at: office@lsshetland.co.uk

9. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)

• Website: https://ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to those who need it to perform their role.

11. Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated 'Last updated' date. We encourage you to review this policy periodically.

13. Contact Us

For any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

LSShetland

Lindale, Bigton, Shetland, ZE2 9JA

Email: office@lsshetland.co.uk

Tel: 07542 528754