Purpose
Tulleeho is committed to protecting the personal data of its students, staff, partners, and stakeholders. This policy explains how we collect, use, store, and safeguard personal information in compliance with applicable data protection laws, including GDPR where relevant.
For any questions related to data protection, please contact us at:[email protected]
Scope
This policy applies to all personal data processed by Tulleeho in relation to:
- Students (past, present, and prospective)
- Staff, trainers, contractors, and partners
- Website users and event participants
This includes data shared with WSET® Awards for the purpose of qualification delivery, assessment, and certification.
What Data We Collect
We may collect and process personal information such as:
- Name, date of birth, gender, contact details
- Course registrations, examination records, and results
- Feedback and communication records
- Limited sensitive data (such as health-related information) only where required to support reasonable adjustments or special consideration requests
How We Use Personal Data
Personal data is processed only for legitimate and defined purposes, including:
- Administration and delivery of WSET® and other education programmes
- Examination registration, certification, and post-results services
- Communication related to courses, events, and education services
- Meeting regulatory and awarding body requirements
Personal data is shared only with WSET® Awards or relevant authorities where required and is never sold or shared with unauthorized third parties.
Data Protection Principles
Tulleeho ensures that personal data is:
- Processed lawfully, fairly, and transparently
- Collected only for specific and necessary purposes Accurate and kept up to date
- Stored securely and accessed only by authorized personnel
- Retained only for as long as necessary
Your Rights
- Data subjects have the right to:
- Request access to their personal data
- Request correction of inaccurate or incomplete data
- Withdraw consent where applicable
- Request deletion of data when it is no longer required
- Object to certain types of data processing
Data Security
Tulleeho uses appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. In the event of a data breach, affected individuals will be informed, and corrective action will be taken promptly.
Policy Updates
This policy may be updated periodically to reflect changes in legal requirements or operational practices. Any significant updates will be communicated via our official channels.