Privacy Policy

1. Data Controller and Scope

Green Room Paper ("we", "us", or "our") operates as the Data Controller for the personal information collected through this website. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR 2003).

This policy applies to all users accessing our resources regarding Canadian education tax credits, tuition fees, and professional examination deductions from within the United Kingdom or globally when interacting with our digital assets.

2. Categories of Data We Collect

We collect and process various types of information to provide you with accurate tax-related guidance:

• Identity Data: Full name, title, and professional status.
• Contact Data: Email address and telephone numbers provided via contact forms.
• Technical Data: Internet Protocol (IP) address, login data, browser type and version, time zone setting, and location data.
• Usage Data: Information about how you use our website, including the specific tax credit guides you visit.
• Marketing Data: Your preferences in receiving communication from us regarding educational tax updates.

3. Legal Basis for Processing

Under the UK GDPR, we must have a "lawful basis" for processing your personal data. We rely on the following:

• Consent: Where you have granted us clear permission to process your data for a specific purpose (e.g., subscribing to a newsletter).
• Contractual Necessity: Where processing is necessary to provide the specific tax analysis or services you have requested.
• Legal Obligation: Where we must comply with UK law or financial regulations.
• Legitimate Interests: Where it is necessary for our business interests (e.g., improving website security or analyzing user engagement) and your interests and fundamental rights do not override those interests.

4. Purpose of Processing

Green Room Paper uses your data for the following specific purposes:

• To provide personalized information on Canada Training Credits (CTC) and tuition fee deductions.
• To manage our relationship with you, including notification of changes to our Privacy Policy or Terms of Service.
• To administer and protect our website (including troubleshooting, data analysis, and system maintenance).
• To use data analytics to improve our website, services, and user experience.

5. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

Typically, contact information provided for inquiries is retained for 24 months after the last interaction, unless a longer period is required by law or to protect our legal position in the event of a dispute.

6. International Transfers

As our content specializes in Canadian tax regulations, some of our service providers may be located outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government.
• Where we use certain service providers, we may use specific contracts approved for use in the UK (Standard Contractual Clauses/International Data Transfer Agreement).

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Request access: Commonly known as a "data subject access request".
• Request correction: Of the personal data that we hold about you.
• Request erasure: This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
• Object to processing: Of your personal data where we are relying on a legitimate interest.
• Request restriction: Of processing of your personal data.
• Request transfer: Of your personal data to you or to a third party (Data Portability).
• Withdraw consent: At any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us via the details provided below.

8. Contacting the Regulator

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.