Privacy Policy | EddyLine UK

Privacy Policy

This Privacy Policy explains how EddyLine UK collects, uses, stores, and protects personal data.

EddyLine UK is a trading name of Declan Rooney, sole trader.

 

1. Who we are

EddyLine UK provides founder-led facilitation and consultancy services for leaders and teams.

For the purposes of UK data protection law, the data controller is Declan Rooney trading as EddyLine UK.

Contact email: dec@eddyline.uk
Postal address: 104 Monklands, Letchworth Garden City, Hertfordshire, SG6 4XG

 

2. What information we may collect

EddyLine UK may collect and process personal data such as:

  • name
  • email address
  • telephone number
  • organisation name
  • role or job title
  • enquiry details
  • project and booking information
  • correspondence records
  • website usage data where applicable

3. How we collect personal data

Personal data may be collected when you:

  • contact EddyLine UK by email or contact form
  • enquire about services
  • discuss or book work
  • correspond during the delivery of a project
  • use the website

4. How we use personal data

Personal data may be used to:

  • respond to enquiries
  • discuss, scope, and deliver services
  • manage bookings and administration
  • issue proposals and invoices
  • maintain records of work undertaken
  • improve the website and service experience where appropriate
  • meet legal, regulatory, or tax obligations

5. Lawful bases for processing

Depending on the context, personal data is processed under one or more of the following lawful bases:

  • consent
  • contract
  • legitimate interests
  • legal obligation

6. Data sharing

Personal data is only shared where necessary for the operation of EddyLine UK, for example with website, email, payment, accounting, scheduling, or cloud-based service providers, and only where appropriate safeguards are in place.

Personal data is not sold to third parties.

 

7. Data retention

Personal data is kept only for as long as reasonably necessary for enquiry handling, service delivery, record-keeping, legal, regulatory, or tax requirements.

If an enquiry does not proceed, related records are retained only for a reasonable period and then deleted or securely removed where appropriate.

 

8. Your rights

Under UK data protection law, you may have rights including the right to:

  • request access to your personal data
  • request correction of inaccurate data
  • request deletion where appropriate
  • object to certain processing
  • request restriction of processing
  • withdraw consent where consent is relied upon

Requests can be made by email to dec@eddyline.uk.

 

9. Cookies and website analytics

The EddyLine UK website may use cookies or similar website tools to help the website function properly and to understand basic website performance.

Where required, cookie consent options are provided.

 

If you reject non-essential cookies or tools, website functionality may remain available while non-essential analytics or similar features are limited.

 

10. Data security

Reasonable technical and organisational measures are used to help protect personal data from unauthorised access, misuse, loss, or disclosure.

 

11. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. The latest version will always appear on this page.

 

12. Contact

For privacy-related enquiries, please contact:

Declan Rooney
EddyLine UK
Email: dec@eddyline.uk
Postal address: 104 Monklands, Letchworth Garden City, Hertfordshire, SG6 4XG

 

Graduate Reset / Grad Check data collected
 

This section explains how EddyLine UK handles personal data connected with The Graduate Reset and Grad Check.

 

The Graduate Reset is a graduate-to-professional transition programme for employers. Grad Check is a practical readiness diagnostic used within The Graduate Reset. It helps EddyLine UK understand graduate transition themes, delivery priorities and cohort-level development needs.

 

Grad Check is not a psychometric test, personality profile, clinical assessment, recruitment se

lection tool, performance-management process or pass/fail assessment.

 

 

Personal data collected

 

When delivering The Graduate Reset or Grad Check, EddyLine UK may collect and use personal data relating to graduates, trainees, early-career employees, managers, employer contacts and other relevant participants.

 

This may include:

 

names;

roles, departments and work areas;

start dates or time in role;

employer and manager contact details;

graduate self-check responses;

scenario answers;

readiness reflections;

employer or manager baseline input;

delivery notes;

participant questions, comments or action commitments where relevant;

cohort-level themes;

employer debrief notes;

report notes;

manager reinforcement notes;

30-day check-back notes;

emails, forms, meeting notes and other correspondence.

 

EddyLine UK only asks for information that is relevant to scoping, preparing, delivering, reporting or following up The Graduate Reset.

 

 

How this information is used

 

Graduate Reset and Grad Check information may be used to:

respond to enquiries;

scope the work with the employer;

understand the graduate cohort and workplace context;

prepare and issue Grad Check;

review graduate self-check responses, scenario answers and employer baseline input;

shape programme emphasis;

select appropriate delivery examples or discussion areas;

deliver The Graduate Reset;

support participant reflection and action commitments;

identify cohort-level themes;

prepare an employer debrief;

create cohort-level reports;

provide manager reinforcement points;

complete the 30-day check-back;

improve programme quality, delivery control and internal learning;

manage booking, administration, invoicing and correspondence;

keep appropriate records for legal, accounting, insurance or business protection purposes.

 

 

Reporting boundary

 

EddyLine UK normally reports Graduate Reset and Grad Check findings to the employer at cohort level.

 

Individual raw Grad Check responses are not automatically shared with the employer as standard.

 

Participant notes, private reflections and raw individual responses are treated as development material. They are used to help EddyLine UK understand themes, shape delivery and prepare appropriate cohort-level feedback.

 

Where a cohort is very small, including one-to-one or very small group delivery, full anonymity cannot be guaranteed. In those cases, EddyLine UK will take care to report proportionately and avoid presenting development material as individual judgement.

Lawful basis for processing

 

EddyLine UK relies on different lawful bases depending on the purpose of the processing.

Where Graduate Reset or Grad Check information is needed to respond to an enquiry, prepare a proposal, manage a booking, deliver the agreed service, communicate with the employer or administer the programme, EddyLine UK may rely on contract or steps taken before entering into a contract.

 

Where information is used to shape delivery, understand cohort-level themes, support employer debrief, improve programme quality, manage business records, protect the development boundary or maintain reasonable business records, EddyLine UK may rely on legitimate interests. These interests include delivering a useful and safe service, supporting graduate development, helping employers understand cohort-level transition themes, improving the programme and protecting EddyLine UK’s business.

 

Where EddyLine UK needs to keep certain records for tax, accounting, legal, insurance or regulatory reasons, it may rely on legal obligation or legitimate interests.

 

Where consent is specifically requested, for example for a testimonial, case study, named quote, marketing use, optional feedback or optional additional information, EddyLine UK will rely on consent for that specific use. Consent can be withdrawn, but this will not affect processing that has already taken place before withdrawal.

 

 

Sensitive information

 

Graduates and other participants do not need to disclose deeply personal, clinical or sensitive information during Grad Check or The Graduate Reset.

 

EddyLine UK does not seek clinical, diagnostic, health, therapy, medical, psychological or special category information through Grad Check.

 

If a participant chooses to disclose sensitive information, EddyLine UK will handle it carefully and proportionately. Where possible, unnecessary sensitive detail will not be recorded.

 

If EddyLine UK becomes aware of a safeguarding, safety, legal, wellbeing, serious conduct or other significant concern, EddyLine UK may need to act proportionately. This may include pausing discussion, signposting the issue, raising an appropriate concern with the employer or taking another reasonable step depending on the circumstances.

 

 

Retention

 

Graduate Reset and Grad Check records are kept only for as long as reasonably necessary for the purpose for which they were collected.

 

This may include delivery, reporting, follow-up, quality control, internal learning, legal or accounting record keeping, insurance, dispute handling and reasonable business protection.

Where information is no longer needed, EddyLine UK will delete, minimise or anonymise it where appropriate.

 

Cohort-level learning, anonymised themes or non-identifiable programme improvement notes may be retained for longer where they no longer identify individual participants.

Third-party tools and service providers

 

EddyLine UK may use trusted third-party tools and service providers to support enquiries, website operation, forms, scheduling, email, document handling, cloud storage, invoicing, payment, accounting, analytics or programme administration.

 

This may include website hosting and form tools, email providers, cloud storage providers, online form providers, scheduling tools, accounting software and payment processors.

 

If Grad Check is completed through a third-party form tool, such as Google Forms, Microsoft Forms, Typeform or a similar provider, participant responses may be processed through that provider’s system before being reviewed by EddyLine UK.

 

Third-party providers are used only where needed to support the running, delivery or administration of EddyLine UK services.

 

 

Participant rights

 

Individuals have rights under data protection law, including the right to ask for access to their personal data, correction of inaccurate data, deletion in certain circumstances, restriction of processing, objection to certain processing and information about how their data is used.

These rights are explained in the main rights section of this Privacy Policy.

Requests can be made using the contact details set out in this Privacy Policy.

Information icon

We need your consent to load the translations

We use a third-party service to translate the website content that may collect data about your activity. Please review the details in the privacy policy and accept the service to view the translations.