Last Updated: 01 October 2024

Free Movement Publishing Ltd (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website www.freemovement.org.uk or use our services.

1. Who We Are

Free Movement Publishing Ltd is a company registered in the United Kingdom, providing immigration law information and training services. Our registered address is St Brandons House, 27-29 Great George Street, Bristol, BS1 5QT, United Kingdom.

2. Information We Collect

We collect personal data to provide our services efficiently and securely. This may include:

• Personal Information: Name, email address, job title, place of work, and business address.
• Payment Information: When you make a purchase, we collect information through our payment processor, Stripe, which includes your name, card number, CVC, and expiry date.
• Course and Event Data: For members taking our online courses via WP Courseware, we collect course progress and completion information to issue certificates. For users purchasing  webinars and workshops, which are sold via WooCommerce, we collect registration data including your name, email, billing address, job title, and place of work.
• Website Usage Data: We collect information using Google Analytics 4 (GA4), Google Tag Manager (GTM), and cookies, including IP addresses, browser types, and user behavior on our site.

3. How We Collect Data

• Forms and Submissions: Personal data is collected via Gravity Forms when users submit enquiries or request information. Data collected includes your name and email.
• Email Marketing: When you subscribe to our newsletter or updates, your name and email are stored in Mailchimp.
• Memberships and Subscriptions: We collect data such as name, email, and billing information (business address) during membership sign-ups on Memberpress.
• Webinars, Workshops and eBooks: We collect data such as name, email, billing information, job title and work address during product purchases on WooCommerce.
• Invoicing: For corporate memberships and invoicing via Xero, we collect name, email, business, and business address.
• OptinMonster: We use OptinMonster to manage and collect data for marketing and lead generation purposes.

4. How We Use Your Information

We use the personal data we collect to:

• Manage memberships, subscriptions, course enrolments, webinar/workshop registrations and product sales.
• Process payments and provide training services, including issuing certificates of course completion.
• Send newsletters and marketing communications (with your consent).
• Improve our website and services by analysing usage data collected through GA4 and GTM.
• Provide you with the necessary information for your Continuous Professional Development (CPD).
• Manage forum participation for members through wpForo, where they can interact with other members.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For email marketing and newsletter subscriptions.
• Contractual Necessity: For processing payments, managing memberships, subscriptions, and course completion data.
• Legitimate Interest: For improving our website, analysing user behaviour, and managing lead generation through tools like OptinMonster.

6. Automated Profiling

Automated profiling refers to any automated processing of personal data to evaluate certain personal aspects, such as analysing user behaviour for targeted marketing or advertising. In our case, we do not use any automated profiling techniques. Any data collected via tools like GA4 and GTM is anonymized and used for analytical purposes only.

7. Third-Party Service Providers

We may share your data with third-party service providers to assist in operating our website and services:

• Payment Processor: Stripe for handling payment transactions.
• Email Marketing: Mailchimp for sending newsletters and updates.
• Hosting and Data Storage: MemberHost for website hosting, and Xero for invoicing.
• Webinars and Workshops: We occasionally use third-party trainers to deliver webinars and workshops, and their access to your data is limited to what is necessary for those sessions.
• Lead generation: OptinMonster for lead generation and marketing campaigns.

8. Data Retention

We retain personal data for as long as necessary to provide our services or as required by law. Specifically:

• User Data: Retained until users request deletion or opt-out.
• Course and Event Data: Retained to verify course completion for certification purposes and attendance at webinars/workshops.
• Billing Data: Retained for minimum 6 years in compliance with tax and accounting obligations. After this period, users may request deletion.

9. Your Rights

You have the right to:

• Access: Request access to your personal data.
• Correction: Update or correct any inaccuracies in your personal data via your member login.
• Deletion: Request that we delete your personal data, subject to legal obligations (e.g., retention for tax purposes). Requests can be made by emailing editor@freemovement.org.uk.

10. Data Security

We take data security seriously. We use secure servers, firewalls, and other security measures to protect your personal information. Access to your data is restricted to authorised personnel who have secure login credentials, and all access is tracked to ensure accountability.

11. Data Breach Notification

In the unlikely event of a data breach, we will promptly notify affected users and relevant regulatory authorities, in compliance with GDPR requirements. We will provide details on the nature of the breach, what data has been affected, and any actions users should take.

12. International Data Transfers

We do not transfer personal data outside of the European Union. All personal data is stored securely within the EU.

13. Cookies and Tracking Technologies

We use cookies to enhance your experience on our website. These cookies help us analyse site traffic and user activity through GA4 and GTM. You can adjust your browser settings to refuse cookies, though this may impact your ability to use certain features of our website. Read our cookies policy here.

14. Children’s Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect or process personal data from children. If we become aware that a child has provided us with personal information, we will take steps to delete such data in compliance with applicable laws.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices. When we make significant changes, we will notify you via email or a notice on our website.

16. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at editor@freemovement.org.uk.