Privacy policy

 Purpose 

Hable Education Ltd takes the protection of your personal data very seriously and strictly adheres to the rules set out by data protection laws and the General Data Protection Regulation (UK GDPR and EU GDPR).

This privacy notice gives you information on how we collect and process your personal data through your use of this site and any data you may provide if you contact us regarding our products and services. 

We have appointed a person responsible for data protection, who is responsible for monitoring and providing guidance on our GDPR compliance. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the contact information in the “Contact Us” section of this privacy notice.

Introduction 

Hable is an expert in Microsoft adoption and change management. We help organisations close their digital skills gap, embrace AI and get more from Microsoft 365. Our mission is to inspire people to learn new skills, embrace change and unlock the potential of technology, making work easier and more efficient and giving people back their time, so they can focus on what really matters. 

Why We Collect Your Personal Information  

We collect and use your personal data for the following purposes: 

• To respond to enquiries, requests for information and other communications from you. 

   

• To provide our products and services, including webinars, meetings and related support. 

   

• To enter into, manage and fulfil contracts with customers, suppliers and other business partners. 

   

• To keep our website safe, secure and working effectively. 

   

• To understand how our website and services are used, so we can improve them. 

   

• To contact you about relevant updates, products, services or opportunities, where we are permitted to do so. 

   

• To use testimonials, photographs or videos for public relations or promotional purposes, where you have given your explicit consent. 

Lawful Basis of Processing Information  

We only collect and use personal information where we have a lawful basis to do so. Depending on the circumstances, we may rely on one or more of the following lawful bases:

• Consent – where you have given us clear permission to process your personal data for a specific purpose, such as receiving marketing communications or allowing us to use testimonials, photographs or videos.
• Contract – where processing is necessary to enter into or perform a contract with you, your organisation, our customers or our suppliers.
• Legal obligation – where processing is necessary for us to comply with a legal or regulatory obligation.
• Legitimate interests – where processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include responding to enquiries, managing customer and supplier relationships, improving our website and services, keeping our website secure, and carrying out appropriate marketing or business development activity.

What Information We Collect and Where From 

We collect personal information from you, for example, if you contact us on our website contact form, request product information, call us or use any of our services. The categories of personal information that we may collect, store and use about you include: 

• Contact details and identification information: Name, email address, phone number, job title, and organisation. 
• Technical information: IP address, browser type, operating system, and other cookie data (please see the Cookie Policy for further information). 
• Marketing preferences: Whether you have opted in to receive communications from us. 

If you are a client/customer we may provide webinar services to your employees. We will only process employee names and work email addresses to provide your employees with access to the webinars which are hosted on Microsoft Teams.  

We may process client/customer names and images when we record online meetings. We may also process names when using Microsoft Copilot for AI transcriptions with our clients/customers.  

We do not collect special category data from clients or customers.  

Personal Data we Collect from Third Parties 

 We may collect your personal information through your company where this is necessary to set up, manage or deliver a service or agreement with us.

Job Applicants 

If you apply for a role at Hable Education Ltd, we may collect and use your personal information to assess your suitability for the role, progress your application, communicate with you during the recruitment process and take steps before entering into an employment contract.

The lawful bases we may rely on include contract, where processing is necessary to take steps at your request before entering into an employment contract; legal obligation, where we need to comply with employment, right to work or other legal requirements; and legitimate interests, where processing is necessary to manage recruitment, assess candidates and improve our recruitment process.

This may include the following information:

• Name, address, telephone number and email address.
• LinkedIn profile, where you have applied through this channel.
• Education details, previous employment and referees.
• Any information you provide to us through your CV.
• Information about reasonable adjustments, where relevant.

Where you provide information about reasonable adjustments, and this contains health data, we will process this special category data where necessary to meet our obligations in employment law and to protect your fundamental rights, including under Article 9(2)(b) of the UK GDPR and Schedule 1, Part 1, paragraph 1 of the Data Protection Act 2018.

We will retain this information for six months. 

If you have any questions about how we handle personal data for job applications, please contact us using the “Contact Us” section of this privacy notice.

How Long We Keep Your Data 

We keep personal data only for as long as we need it for the purpose it was collected, or where we are required to keep it for legal, regulatory, contractual, audit, tax, accounting, complaint-handling or legitimate business reasons. Our retention periods are set out in our internal retention policy and are reviewed periodically.

For clients and customers, where we have entered into a contract with you, we will retain relevant contract and account information for seven years after the contract has ended, unless a longer period is required for legal, regulatory, audit, tax, accounting or dispute-resolution purposes.

For client/customer employees attending webinars or meetings, we will normally retain names and work email addresses for 60 days. We may retain this information for longer where needed for service delivery, contractual obligations, audit evidence, complaint handling, legal claims, security purposes or other documented business reasons. Where information is retained for longer, we will keep it only for as long as necessary and in line with our retention policy.

Security Of Personal Information 

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, alteration or disclosure. 

Access to personal data is limited to employees, contractors and trusted third parties who have a genuine business need to access it. Anyone who processes personal data on our behalf must do so only in line with our instructions and applicable data protection requirements. 
 
Our security measures include access controls, encryption of sensitive data during transmission, regular security assessments and reviews of our processes and third-party providers, and information security and data protection training for employees. 

We also have policies and procedures in place to identify, assess and respond to potential personal data breaches. We will notify affected individuals, relevant third parties and regulators where we are legally required to do so. 

 

Children's Information  

 We do not knowingly collect information on children. If we have collected personal information on a child, please contact us immediately using the details in the “Contact Us” section of this privacy notice, so we can remove this information without undue delay.

Who We Share Your Data With 

Hable may disclose your personal data to trusted third parties where this is necessary to help us deliver our services, operate our website, manage our business, meet legal requirements or fulfil our contractual obligations. All third parties are contractually required to protect the personal data we provide to them.

We may share your data with the following categories of recipients:

• Business partners, suppliers and contractors: Where this is necessary to deliver services or perform a contract with them or with you.
• Third-party service providers: For example, IT support, cloud-based software services, telecommunications providers, website management tools and marketing platforms such as HubSpot.
• Payment and credit control providers: To manage payments, invoicing and appropriate credit control checks.
• Professional advisers: Such as lawyers, auditors and other advisers who support us with legal, financial, compliance or contractual matters.
• Legal authorities or regulators: Where we are required to share information by law or to protect our legal rights.
• Web analytics and search engine providers: To support the continued improvement and optimisation of our website.

We take steps to ensure that all third-party providers meet appropriate data protection and security standards.

Your Individual Rights 

You have rights under data protection law in relation to your personal data. These rights are summarised below. Some rights only apply in certain circumstances, but you can contact us if you would like to exercise any of them or if you have any questions.

Your rights include:

• The right to be informed about how we collect and use your personal data.
• The right of access to request a copy of the personal data we hold about you.
• The right to rectification if you believe the personal data we hold about you is inaccurate or incomplete.
• The right to erasure in certain circumstances.
• The right to restrict processing in certain circumstances.
• The right to data portability where this applies.
• The right to object to certain types of processing, including direct marketing.

You also have the right to withdraw consent at any time where we rely on consent to process your personal data. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

You can find more information about your rights on the ICO website: https://ico.org.uk/for-the-public/.

Failure To Provide Personal Information 

Where we need to collect personal data by law, to process your instructions or to perform a contract we have with you, and you fail to provide that data when requested, we may not be able to carry out your instructions or perform the contract we have, or are trying to enter into, with you. In this case, we may have to cancel our engagement or contract with you, but we will notify you if this is the case at the time.

Cookies  

Our website uses cookies. Please see our Cookies Policy for full details of the cookies used on our website. Please find the link to our Cookies Policy here: Cookie Policy.pdf

Automated Decision Making

Your personal data is not used in any automated decision making (a decision made solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain conditions about an individual). 

International Transfers

In some circumstances, your personal data may be transferred to, stored in or accessed from countries outside the UK. This may happen, for example, where we use trusted third-party service providers who support the delivery, hosting, security or administration of our services.

Where we transfer personal data outside the UK, we will ensure that appropriate safeguards are in place to protect it in accordance with applicable data protection laws.

These safeguards may include transferring personal data to a country or organisation covered by UK adequacy regulations, using the UK International Data Transfer Agreement, using the UK Addendum to the EU Standard Contractual Clauses, carrying out transfer risk assessments where required, or relying on another lawful transfer mechanism available under data protection laws.

For more information about international transfers and safeguarding measures, please contact us using the details in the “Contact Us” section of this privacy notice.

If you have any queries about this privacy notice, how we have handled your data, or if you wish to raise a complaint in relation to your personal data, please do not hesitate to contact us. You can contact us by:

Email: dpo@hable.co.uk 

By Post: Suite 3 Bignell Park Barns, Chesterton, Bicester, Oxfordshire, OX26 1TD 

If you are concerned about how we have handled your data, we encourage you to contact us first so we can try to resolve your concerns. You also have the right to make a complaint to the Information Commissioner’s Office if you are unhappy with how we have handled your personal data. You can contact the Information Commissioner’s Office using the details below:

By Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

By Website: Click Here 

By Email: casework@ico.org.uk 

By Phone: 0303 123 1113 

Privacy Notice Review and Amendments 

We keep this privacy notice under regular review. This privacy notice was last reviewed and amended on 09/09/2026. 

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.