Privacy Policy

Last Updated: May 15, 2026

Introduction

This Privacy Policy describes how crystalveil-rift collects, uses, stores, and protects personal information provided through our website and services. We are committed to protecting the privacy of our users, particularly children and young people participating in our educational programmes.

Information We Collect

Personal Information

We collect the following types of personal information:

• Student names and ages
• Parent or guardian contact information including email addresses
• Enrollment and programme selection details
• Educational progress information for enrolled students
• Communication preferences

Automatically Collected Information

When you visit our website, we may automatically collect:

• Browser type and version
• Device information
• IP address
• Pages visited and time spent on pages
• Referring website addresses

How We Use Your Information

We use collected information for the following purposes:

• Processing programme enrollments and managing student participation
• Communicating with parents and guardians regarding programme details, scheduling, and student progress
• Improving our educational programmes and website functionality
• Responding to inquiries and providing customer support
• Complying with legal obligations
• Analyzing website usage to enhance user experience

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To fulfill our obligations under enrollment agreements
• Legitimate Interests: To operate and improve our educational services
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell personal information. We may share information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our website and delivering services, under strict confidentiality agreements
• Legal Requirements: When required by law or to protect our rights, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected individuals

Children's Privacy

We provide educational services to minors and take their privacy seriously. We collect personal information about children only with parental or guardian consent. Parents have the right to:

• Review information collected about their child
• Request deletion of their child's information
• Refuse further collection or use of their child's information

We do not knowingly collect information directly from children without parental consent.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls limiting data access to authorized personnel
• Staff training on data protection practices

However, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of information.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Student records are typically retained for the duration of programme participation plus three years for educational and legal purposes.

Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request access to personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Restriction: Request restriction of processing under certain circumstances
• Portability: Request transfer of your information to another service provider
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at [email protected]

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance website functionality and analyze usage. For detailed information about our cookie practices, please see our Cookies Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.

International Data Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify users of significant changes by posting the updated policy on our website with a revised "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: [email protected]
Address: 42 Sauchiehall Street, Glasgow G2 3AT, United Kingdom

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, if you believe we have not handled your personal information appropriately.