Privacy Policy

01. Who We Are

CTDC is a group of affiliated companies committed to justice-oriented research, consultancy, facilitation, and education. Our registered office is 1 Gough Square, London, EC4A 3DE, United Kingdom.

For any questions about this policy or your personal data, please contact:
Email: [email protected]

02. What Personal Data We Collect

We may collect the following types of data through our website:

• Contact details (e.g. name, email address, organisation, phone number);
• Form submissions (e.g. messages, expressions of interest, consultancy queries);
• Demographic data voluntarily shared for learning or outreach purposes;
• Usage data (e.g. IP address, browser type, device type, pages visited);
• Cookies and tracking data (see Section 07).

We do not collect or store sensitive personal data (e.g. health, ethnicity, sexual orientation) unless it is explicitly provided for safeguarding or research purposes and processed under strict controls.

03. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and expressions of interest;
• Support learning and continuous improvement of our systems, educational content, and user experience;
• Share updates about CTDC Academy courses, programmes, or events (if you opt in);
• Improve our website functionality and user experience;
• Monitor the performance and accessibility of our services;
• Comply with legal obligations and prevent misuse.

We will not use your data for automated profiling or make decisions solely based on algorithms.

04. Lawful Basis for Processing

We process personal data on the following legal bases:

• Legitimate interest — responding to your direct enquiries or feedback;
• Consent — where you opt in to receive updates or marketing communications;
• Legal obligation — for record-keeping, safeguarding, or regulatory compliance.

You can withdraw your consent at any time by contacting us.

CTDC ensures all processing aligns with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability — as set out in UK GDPR Article 5.

05. Data Storage and Retention

Your data is stored securely using approved cloud platforms and security protocols. We retain:

• Contact and enquiry data for up to 24 months from last interaction;
• Course interest submissions for up to 24 months or until the relevant course cycle ends;
• Technical usage data for a shorter period, typically up to 12 months.

We securely delete or anonymise data when no longer required.

06. Sharing Your Data

We do not sell or rent your data.

We may share data only with:

• Service providers (e.g. cloud hosting, email, or form providers) acting under strict Data Processing Agreements;
• Regulators or legal authorities where required by law.

We ensure all third parties meet our security and data protection standards.

07. Cookies and Analytics

CTDC uses cookies to:

• Enable website functionality, such as keeping you signed in and remembering your language and cart;
• Remember your choice about embedded media.

We count page views ourselves, not through a third-party analytics service. A page view records the page, the time, the page you came from, your browser, the network part of your IP address and the id of your session cookie, so that the views in one visit can be counted as one; if you are signed in, it records which account. It never records your full address, your location or the query string of the link you followed. Page views are kept for 90 days.

Embedded videos and maps (YouTube, Vimeo and Google Maps) set cookies of their own, so they load only after you accept them. You will be asked on your first visit.

08. Your Rights

You have the right to:

• Access your data;
• Request correction or deletion;
• Object to processing or request restriction;
• Withdraw consent at any time;
• Lodge a complaint with the Information Commissioner’s Office (ICO).

Requests will be processed within one month.

09. International Users

If you are located outside the UK, your data may be transferred to the UK for processing. By interacting with our site, you consent to this transfer, subject to the safeguards described in this policy.

10. Updates to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be posted on our website with an updated effective date.

If you have any questions or concerns about this policy or your data, please contact us at [email protected].