Privacy Policy
Effective Date: 01/01/2018
Last Updated: 01/02/2025
Introduction
At Flying Fish UK Ltd, we are committed to protecting your privacy and ensuring transparency in how we collect, use, and share your personal data. This Privacy Policy explains how we handle personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our services, you agree to the terms outlined in this policy.
What Information We Collect
We may collect the following types of personal data:
- Identity Data: Full name, job title, employer details
- Contact Data: Address, phone number, email address
- Training Data: Course enrolments, attendance records, certifications
- Payment Data: Billing details and transaction history (processed securely)
- Technical Data: IP address, browser type, and interactions with our website
- Marketing Preferences: Preferences for receiving communications from us
How We Use Your Information
We process personal data for the following purposes:
- To deliver training courses and services
- To process enrolments and issue certifications
- To communicate course schedules, updates, and requirements
- To comply with legal and regulatory requirements
- To improve our services and customer experience
- To send marketing communications (with your consent)
When We Share Your Information
We may share personal data with trusted third parties in the following circumstances:
- Accrediting Bodies & Certification Providers – To process course completion and issue certificates
- Employers & Sponsors – If your training is arranged or funded by your employer
- Regulatory Authorities – Where required for compliance with UK law
- Service Providers – Such as payment processors, IT support, and marketing agencies
- Legal Obligations – If required by law or to protect our rights and safety
We never sell your personal data to third parties.
Legal Basis for Processing Personal Data
Under UK GDPR, we rely on the following legal bases:
- Contractual Obligation – To fulfil training agreements
- Legitimate Interest – To improve services and maintain records
- Legal Compliance – To meet regulatory requirements
- Consent – For marketing and optional communications
Data Retention
We retain personal data only for as long as necessary:
- Records of your STCW certificate details are held until your 70th birthday or five years from the date of issue (to comply with accreditation requirements)
- Marketing data: Until consent is withdrawn
Your Rights
You have the following rights under UK GDPR:
- Access – Request a copy of your personal data
- Correction – Update inaccurate or incomplete information
- Erase – Request deletion of your data (subject to legal obligations)
- Restriction – Limit how we process your data
- Objection – Opt out of certain processing activities, such as marketing
- Data Portability – Receive your data in a structured format
Data Security
We implement strict security measures to protect your data, including:
- Encryption of sensitive data
- Access control and authentication processes
- Regular security audits and staff training
Marketing & Communication Preferences
We will only send marketing emails if you have given consent. You can opt-out at any time by:
- Clicking the “Unsubscribe” link in emails
- Contacting us at mail@flyingfishonline.com
Changes to This Privacy Policy
We may update this policy from time to time. Any significant changes will be communicated via email or on our website.
Contact Us
If you have any questions or concerns about this Privacy Policy, contact us at:
Flying Fish UK Ltd
Email: mail@flyingfishonline.com
Phone: +44 01983 280641
Address: 124 High Street, Cowes, Isle of Wight, P031 7AY