Purpose

Tulleeho is committed to protecting the personal data of its students, staff, partners, and stakeholders. This policy explains how we collect, use, store, and safeguard personal information in compliance with applicable data protection laws, including GDPR where relevant.

For any questions related to data protection, please contact us at:[email protected]

Scope

This policy applies to all personal data processed by Tulleeho in relation to:

• Students (past, present, and prospective)
• Staff, trainers, contractors, and partners
• Website users and event participants

This includes data shared with WSET® Awards for the purpose of qualification delivery, assessment, and certification.

What Data We Collect

We may collect and process personal information such as:

• Name, date of birth, gender, contact details
• Course registrations, examination records, and results
• Feedback and communication records
• Limited sensitive data (such as health-related information) only where required to support reasonable adjustments or special consideration requests

How We Use Personal Data

Personal data is processed only for legitimate and defined purposes, including:

• Administration and delivery of WSET® and other education programmes
• Examination registration, certification, and post-results services
• Communication related to courses, events, and education services
• Meeting regulatory and awarding body requirements

Personal data is shared only with WSET® Awards or relevant authorities where required and is never sold or shared with unauthorized third parties.

Data Protection Principles

Tulleeho ensures that personal data is:

• Processed lawfully, fairly, and transparently
• Collected only for specific and necessary purposes  Accurate and kept up to date
•  Stored securely and accessed only by authorized personnel
• Retained only for as long as necessary

Your Rights

• Data subjects have the right to:
• Request access to their personal data
• Request correction of inaccurate or incomplete data
• Withdraw consent where applicable
• Request deletion of data when it is no longer required
• Object to certain types of data processing

Data Security

Tulleeho uses appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. In the event of a data breach, affected individuals will be informed, and corrective action will be taken promptly.

Policy Updates

This policy may be updated periodically to reflect changes in legal requirements or operational practices. Any significant updates will be communicated via our official channels.