Introduction
Yonder Trading LTD, trading as Passion 2 Profit, is committed to providing a superior learning experience for everyone we work with. We understand that our users are dedicated to their success, and we are equally committed to ensuring that every interaction with our content is optimized for maximum educational potential. To enable us to do this, Passion 2 Profit needs to gather and use certain information about individuals.
This policy describes how personal data is collected, handled, and stored to meet the company’s data protection standards — and to comply with legal requirements.
Why This Policy Exists
This Data Protection Policy ensures that Passion 2 Profit:
Complies with data protection laws and follows industry best practices.
Protects the rights of staff, customers, affiliates, and partners.
Is open about how it stores and processes individuals’ data.
Protects itself from the risks of a data breach.
EU General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) governs how organizations, including Passion 2 Profit, must collect, handle, and store personal information of individuals located within the European Union (EU). These rules apply regardless of whether data is stored electronically, on paper, or in other formats. Personal information must be collected and used fairly, stored securely, and not disclosed unlawfully.
The GDPR outlines eight core principles, which ensure that personal data must:
Be processed fairly and lawfully.
Be obtained only for specific, lawful purposes.
Be adequate, relevant, and not excessive.
Be accurate and kept up to date.
Not be held for longer than necessary.
Be processed in accordance with the rights of data subjects.
Be protected in appropriate ways.
Not be transferred outside the European Economic Area (EEA), unless that country or territory ensures an adequate level of protection.
1. Policy Statement
Passion 2 Profit receives, uses, and stores personal information about customers, affiliates, partners, and colleagues as part of its everyday business operations. It is crucial that this information is handled lawfully and appropriately, in accordance with the Data Protection Act 2018 and the General Data Protection Regulation (collectively referred to as the ‘Data Protection Requirements’).
We take our data protection duties seriously because we value the trust placed in us to use personal information responsibly.
2. About This Policy
This policy and any other documents referenced within it set out the basis on which we will process any personal data we collect. This policy does not form part of any employee’s contract of employment and may be amended at any time.
Passion 2 Profit is responsible for ensuring compliance with the Data Protection Requirements and this policy. Any questions or concerns about its operation should be referred to our Data Protection Officer (DPO).
3. What is Personal Data?
Personal data is defined as any data (whether stored electronically or in physical form) related to a living individual who can be identified directly or indirectly from that data.
Processing refers to any activity involving personal data, including obtaining, recording, holding, organizing, amending, retrieving, using, disclosing, erasing, or destroying it. This also includes transferring personal data to third parties under strict privacy conditions.
Sensitive personal data includes contact information, addresses, session activity on the platform, and IP location. Such data can only be processed under strict conditions and for the express purposes for which it was collected.
4. Data Protection Principles
Anyone processing personal data must ensure that data is:
Processed fairly, lawfully, and transparently.
Collected for specific, legitimate purposes and not processed further in a way that is incompatible with those purposes.
Adequate, relevant, and limited to what is necessary for the intended purposes.
Accurate and, where necessary, kept up to date.
Kept in a form that permits identification of data subjects for no longer than is necessary.
Processed in line with individuals’ rights and protected using appropriate security measures.
Not transferred outside the EEA without ensuring adequate protection of personal data.
5. Fair and Lawful Processing
Passion 2 Profit will only process personal data where it is required for lawful purposes. These include (but are not limited to):
Where the individual has provided consent.
Where processing is necessary for the performance of a contract.
To comply with legal obligations.
For the legitimate interests of the business.
Sensitive personal data may only be processed under additional legal conditions.
6. Collection of Information
We receive and store information about you such as:
Information you provide: We collect personal data, such as your name, email address, postal address, payment method, and telephone number, provided through forms, during transactions, customer service interactions, or surveys.
Information we collect automatically: We collect information about your interactions with our platform, such as course progress, search queries, customer service interactions, IP addresses, and device identifiers.
See our [Privacy Policy] for further details on data collection practices.
7. Use of Information
We use the information we collect to provide, analyze, administer, enhance, and personalize our services and marketing efforts. This includes:
Enhancing user experience by understanding your platform usage.
Personalizing content to match user preferences.
Using data such as course completion rates to improve learning tools.
Our primary aim is to use collected data to continuously improve the educational experience for our users.
8. Processing for Limited Purposes
We will only process personal data for the purposes we’ve outlined in this policy or for other legitimate reasons allowed under the Data Protection Requirements.
9. Notifying Individuals
If we collect personal data directly from an individual, we will inform them about:
The purpose for which we are collecting the data.
How it will be processed and shared.
Their rights regarding their personal data.
If we receive personal data from other sources, we will notify the individual within one month.
10. Adequate, Relevant, and Non-Excessive Processing
We will only collect personal data that is necessary for the purposes communicated to the individual.
11. Accurate Data
We will ensure that all personal data is accurate and kept up to date. We will take reasonable steps to correct or delete inaccurate data.
12. Timely Processing
Personal data will only be retained for as long as necessary for the purposes for which it was collected. We will take steps to securely erase data when it is no longer needed.
13. Processing in Line with Data Subject’s Rights
Individuals have the right to:
Request confirmation of whether their personal data is being processed.
Request access to the data held about them.
Request rectification, erasure, or restriction of processing.
Lodge a complaint with a supervisory authority.
Object to processing, including for direct marketing.
14. Data Security
We will take appropriate measures to protect personal data from unauthorized or unlawful processing and accidental loss, destruction, or damage. These measures include:
Confidentiality: Ensuring only authorized personnel have access to personal data.
Integrity: Ensuring personal data is accurate and fit for the purposes for which it is processed.
Availability: Ensuring authorized users can access data when needed for legitimate purposes.
15. Transferring Personal Data Outside of the EEA
We may transfer personal data outside the European Economic Area (EEA) only if appropriate safeguards are in place. This includes ensuring the receiving country offers adequate protection of personal data or obtaining explicit consent from the individual.
16. Disclosure and Sharing of Personal Data
We may share personal data with other members of our corporate group or external partners under strict conditions. All third-party partners must comply with our data protection standards.
17. Subject Access Requests
Individuals may formally request access to the personal data we hold about them. These requests should be forwarded to our data protection team immediately.
18. Changes to This Policy
We may modify this Data Protection Policy at any time. If changes are significant, we will provide notice through our services or via email to give users the opportunity to review the changes and decide whether to continue using our services.
Contact Us: For any questions regarding this policy, please contact us at support@passion2profit.com or via post.
Yonder Trading LTD, T/A Passion @ Profit, 5 Craig Terrace, Innerleithen EH44 6LU, UK
