Skip to main content

Privacy policy

Overview

This statement outlines our privacy practices in connection with this website. We are not responsible for the content or privacy practices of external websites, and any external links are clearly identifiable. We may update this Privacy Policy at any time, and any changes will be published on www.uxdesigninstitute.com.

The UX Design Institute, company number 505339, located at 5 School House Lane East, Dublin 2 D02 N279, Ireland, is the data controller. This means we are responsible for deciding how your personal data is used and ensuring it is handled correctly in all situations. We respect your right to privacy and comply with our obligations under the General Data Protection Regulation (GDPR).

Any information you provide to us, such as subscribing to our email list, is used only for the purposes for which it was given. By submitting your information, you accept the practices described in this Privacy Policy.

Your data

We collect your data when you purchase our services, engage with customer support, submit contact or marketing forms on our website or interact with us on social media platforms.

We use this data to communicate with you, deliver our services, manage training events, process orders, handle invoicing, run satisfaction surveys and share information about our products and services. You can opt out of marketing at any time.

If you are a prospective, current or past student, we may process the following types of personal data so we can communicate with you and provide our courses:

  • personal identifiers such as your name

  • contact details such as your email address and phone number

  • financial data such as purchase history (we do not store credit card details)

  • social media engagement such as posts where you tag us

  • online course information such as course progression, exercises or exams

  • general location information

  • employment related information if you take part in a student hire programme

Your data may also be anonymised for statistical analysis.

Special category data

We may collect limited special category data such as health, disability or additional learning needs, but only when required to:

  • assess and provide reasonable accommodations

  • tailor learning materials or delivery

  • meet support related obligations

  • communicate with you or relevant support staff about adjustments

Minors

We do not knowingly collect personal information from children under 16. We do not provide services for purchase by children, nor do we market to them. If you are under 16, please do not submit personal information through our website.

Legal basis

We process your data on the basis of contract, consent where appropriate, legal obligation or our legitimate interest in providing services. You may ask about the specific basis used for any activity.

For electronic marketing such as newsletters, we will request your consent before processing your data.

Automatically collected data

We automatically collect certain technical information that is not usually personally identifiable such as the website you came from, browser type, domain name, referring URL, page views and device information. Where we have a defined purpose and lawful basis, we may combine this with other personal data we hold.

Information on Consent

When consent is the identified and appropriate legal basis for processing, your agreement allows us to process your personal data for the specific purposes outlined in this Privacy Policy.

You can withdraw your consent at any time by giving a clear indication of your wishes, whether through a written statement or another clear affirmative action. If you have any questions about withdrawing consent, please contact us using the details provided below.

Withdrawing consent does not affect the lawfulness of any processing carried out before consent was withdrawn.

Service providers

We work with trusted service providers who may act as data processors, sub-processors or third parties. We put written agreements in place with all providers and assess their data security practices before entering into any contract. These agreements include the required data protection clauses.

We expect all third parties to maintain appropriate technical and organisational security measures in line with Irish and EU data protection laws. Providers such as payment services, technical support teams, learning management systems or exam platforms may access the personal data they need to perform their functions, but they are not permitted to use it for any other purpose.

International transfers

If we transfer your personal data outside the EEA, we make sure it remains protected by putting appropriate safeguards in place. We use at least one of the following measures:

  • we transfer your data only to countries the European Commission has deemed to provide an adequate level of protection

  • where we work with service providers in other countries, we use European Commission approved contracts that give your personal data the same level of protection it receives within the EEA

Marketing

We may use your personal data to understand what products or services may be useful or relevant to you. This helps us decide which updates or offers you may find helpful.

We aim to give you clear choices about how your data is used for marketing and advertising. Where appropriate, we will ask whether you’d like to receive marketing communications from us.

We do not share your personal data with third parties for their marketing purposes. You can object to direct marketing at any time by using the opt out links in our communications or by contacting us using the details provided.

Advertising Choices

Google Ads:

We use Google Ads from time to time. Our advertising is based on keywords and we do not use remarketing unless we have obtained your consent.

You can opt out of Google Analytics for display advertising or adjust your Google Display Network preferences at: myadcenter.google.com. Google also recommends installing the Google Analytics Opt out Browser Add on at: tools.google.com/dlpage/gaoptout, which prevents your data from being collected and used by Google Analytics.

For more details on how Google handles data, please see the Google Privacy and Terms page at: google.com/intl/en/policies/privacy.

Cookies

Technical personal data

Like most websites, we collect statistical and analytical information on an aggregate basis when you visit our site. We may also collect certain technical data for security, administration and performance purposes.

When you visit our website and accept cookies, we may collect information such as your browser type and language, your Internet Protocol (IP) address and the actions you take on the site such as pages viewed or links clicked. Your IP address is considered personal data under the GDPR.

Some technical information is also provided to us by our internet service or hosting provider. Although we do not access this data regularly, it may be used to support our security measures, improve the content we provide and understand website usage. The information we may receive includes:

  • the IP address used

  • the date and time of access

  • the pages viewed and any documents downloaded

  • the previous internet address that linked you to our site

  • the user agent used to access the site

Security

We and our service providers follow strict security procedures to protect your personal data from accidental loss, destruction, damage, unauthorised access or unlawful processing. We use appropriate technical and organisational measures such as modern encryption, intrusion prevention and controlled account access.

We maintain security from the point your data is collected to the point it is destroyed. Our approach focuses on protecting the confidentiality, integrity and availability of your personal data:

  • Confidentiality means only authorised people can access your data

  • Integrity means your data is accurate and suitable for its intended purpose

Availability means authorised users can access your data when needed for legitimate purposes

Data retention

We keep your personal data only for as long as needed to fulfil the purposes for which it was collected, and for up to seven years afterwards to meet regulatory and reporting requirements or where permitted by law. We may also retain your data for the time needed to complete legitimate business operations, including legal, accounting and reporting obligations. When setting retention periods, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for processing, whether those purposes can be achieved in another way and any legal requirements that apply.

Your rights

You have several rights regarding your personal data. Depending on the legal basis for processing, you may have the right to:

  • request information about whether we hold personal data about you and why we are using it

  • request access to your personal data (a subject access request)

  • correct inaccuracies in the data we hold

  • erase or restrict your personal data where it is no longer needed for the original purpose
    object to processing based on our legitimate business interests, including profiling and marketing

  • object to automated decision making, including profiling, so you are not subject to decisions made solely by automated means

  • request the transfer of your personal data in an electronic, structured format to you or another party

  • withdraw your consent to processing at any time

You can also tell us about any changes to your personal data. We will update or delete your information in line with our obligations under the General Data Protection Regulation (GDPR).

We handle all rights requests in accordance with relevant data protection laws. To exercise any of these rights, please email hello@uxdesigninstitute.com.

Complaints

You have the right to raise a complaint with a supervisory authority at any time about how we process your personal data. Since our organisation is based in Ireland and our data processing takes place here, we are regulated by the Irish Data Protection Commission (DPC).

You can contact the DPC using the details below:

Website: www.dataprotection.ie

Phone: +353 57 8684800 or +353 (0)761 104 800

Email: info@dataprotection.ie

Address:

Data Protection Office, Canal House, Station Road, Portarlington, Co. Laois, R32 AP23

or

21 Fitzwilliam Square, Dublin 2, D02 RD28, Ireland

Third party sites

Our website may contain links to third party websites. Please note that we are not responsible for the content or privacy practices of these sites, as they have their own Terms and Conditions and Privacy Policies.