The Business Technology Academy (“we”, “our”, “the Academy”) is committed to protecting the privacy and personal data of all visitors to our website, learners, staff, and partners. This policy explains how we collect, use, store, and protect personal data in compliance with the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
This policy applies to:
Visitors to our website.
Learners and prospective learners.
Employees, contractors, and job applicants.
Partner organisations and suppliers.
We process personal data under the following lawful bases as set out in Article 6 GDPR:
Contract – where processing is necessary for the performance of a contract with you (e.g., course registration).
Consent – where you have given clear consent (e.g., to receive newsletters).
Legal obligation – where processing is necessary to comply with the law.
Legitimate interests – where processing is necessary for our educational and business interests, and your rights are not overridden.
The types of personal data we may collect include:
Identity data: name, date of birth, student/employee ID.
Contact data: email address, phone number, postal address.
Educational & professional data: qualifications, CVs, job applications, internship placements.
Technical data: IP address, browser type, cookies, and usage data on our website.
Payment data: billing and transaction details (processed securely via third-party providers).
We may use your personal data for the following purposes:
To process course applications and registrations.
To provide access to learning platforms and resources.
To manage internships, partnerships, and job placements.
To communicate with you about courses, events, and opportunities.
To comply with employment, tax, and regulatory requirements.
To improve our website and services through analytics.
We do not sell your personal data. We may share it with:
Education partners and internship providers (where necessary for placements, with your consent).
Service providers (e.g., IT support, payment processors, email platforms).
Regulatory authorities where legally required.
All third parties are bound by confidentiality and data protection obligations.
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (such as EU Standard Contractual Clauses) are in place to protect your data.
We retain personal data only for as long as necessary:
Learner records: up to 7 years after completion of a course.
Employee/contractor records: as required by Irish employment law.
Marketing data: until you withdraw consent or unsubscribe.
Under GDPR, you have the following rights:
Right of access to your personal data.
Right to rectification of inaccurate data.
Right to erasure (“right to be forgotten”).
Right to restrict processing.
Right to data portability.
Right to object to processing (including direct marketing).
Right to withdraw consent at any time (where processing is based on consent).
To exercise these rights, contact us at [Insert Contact Email].
We implement appropriate technical and organisational measures to safeguard your personal data, including:
Secure servers and encrypted connections (SSL).
Restricted access controls and authentication.
Staff training in data protection compliance.
Our website uses cookies and similar technologies to improve user experience and analyse traffic. You can control cookie preferences through your browser settings. See our separate Cookie Policy for details.