Legal

Privacy notice

Workspace Nodehub is the data controller for personal data processed through this website and through enrolment in our rooms. The desk is at 1 Lamphey Road; Thirsk; YO7 2RU; United Kingdom. Email info@workspace-nodehub.digital. Telephone 079 0202 7234.

What we collect and why

If you send the contact form, we receive your name, email, optional topic, and message so we can reply. If you take a seat, we additionally keep billing contacts, dietary notes for in-person Thursdays, and homework you choose to submit. Lawful bases are typically contract (to provide a confirmed seat) or legitimate interests (to answer an enquiry from someone who wrote to us). We do not buy lists and we do not run behavioural advertising.

Server logs may record IP address, user agent, and requested path for security and diagnosis. That processing is legitimate interest in keeping the publication available and uncorrupted.

Cookies

Cookie use is described separately on the cookies page. Essential storage remembers your consent choice. Analytics cookies run only if you accept.

Retention

Unsuccessful enquiries are deleted after eighteen months unless a conversation is still open. Confirmed seat records are kept for seven years to meet United Kingdom accounting practice. Homework is kept for two years so tutors can write references if asked, then deleted unless you request earlier deletion. Server logs are rotated within ninety days except where a security incident requires a longer hold.

Your rights

Under the UK GDPR you may request access, correction, deletion, restriction, objection, and data portability where those rights apply. You may withdraw consent for optional cookies at any time by clearing the stored choice and using the banner again, or by writing to us. You may complain to the Information Commissioner’s Office (ico.org.uk). We would rather hear from you first.

Processors and international transfers

Email and form delivery may pass through processors in the United Kingdom or the European Economic Area. If a processor stores data in the United States, we rely on the UK Extension to the EU-US Data Privacy Framework where the organisation is listed, or on the UK International Data Transfer Agreement with supplementary measures. We do not send class lists to social networks.

Children

Programmes are aimed at working adults. We do not knowingly enrol anyone under 18.

Last updated 18 August 2026.