Privacy Policy

The data controller is Subio Services Limited, a company registered in England and Wales (company number 13473006). If you have any questions about this policy or how we handle your data, please contact us at team@subio.co.uk.

We may collect the following personal data:

• Contact information — your name, email address, and organisation name when you submit an enquiry via our contact form.
• Enquiry details — the content of messages you send us, including your area of interest (e.g. Leadership Development, Management Essentials, K2S Framework).
• Usage data — anonymised information about how you interact with our website, such as pages visited and time spent, collected via analytics tools.
• Communications — records of any email correspondence between you and Subio.

We use your personal data for the following purposes:

• To respond to your enquiries and provide information about our programmes and services.
• To fulfil any contractual obligations where you have engaged Subio for services.
• To improve our website and understand how visitors use it.
• To send you relevant updates or information about our services, where you have given consent or where we have a legitimate interest to do so.
• To comply with our legal obligations.

We process your personal data on the following legal bases:

• Legitimate interests — responding to enquiries and improving our services.
• Contract performance — where you have engaged us to deliver services.
• Consent — where you have explicitly opted in to receive marketing communications.
• Legal obligation — where we are required to process data to comply with the law.

We do not sell your personal data. We may share your data with trusted third parties only where necessary to operate our business, including:

• Technology and hosting providers who support the operation of our website and communications.
• Professional advisers such as accountants or legal counsel, where required.
• Regulatory authorities or law enforcement, where we are legally required to do so.

All third parties are required to handle your data securely and in accordance with applicable data protection law.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is typically retained for up to 3 years. If you become a client, we retain relevant records for up to 7 years in line with our legal and contractual obligations.

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data in certain circumstances.
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at team@subio.co.uk. We will respond within one calendar month.

Our website may use cookies and similar technologies to improve your browsing experience and analyse site usage. You can control cookie settings through your browser. By continuing to use our website, you consent to our use of cookies in accordance with this policy.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you contact the ICO.