GDPR POLICY
Last Updated: April 2026
Introduction
AcornStar Ltd is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This policy explains how we process your personal data, your rights as a data subject, and how to contact us if you have concerns.
Data Controller
AcornStar Ltd, Lowtown, Robertstown, Co Kildare, Ireland is the data controller responsible for your personal data. Contact us at info at acornstar dot com.
What Data We Collect
When you register for our online training courses, we collect: name, email address, phone number, company name, job title, and course completion information. If you’re part of a company or organisation, we may collect information about your employer so we can provide course reports to your manager or training administrator.
Why We Collect Your Data
We process your personal data for the following lawful reasons: To provide you with access to our online training courses under our contract with you. To send you course completion certificates and training reports to your employer or manager if you’re enrolled through a company. To contact you with promotional materials and marketing about our courses and services, but only where you have given us consent or where you are an existing customer. To comply with legal obligations regarding training records and certification.
Who We Share Your Data With
We only share your personal data with the managers, supervisors, or training administrators at your company or organisation for the purpose of providing them with course completion reports and training progress. We do not share your data with any third parties for marketing purposes. We do not sell or rent your personal data to anyone. Your data is only used for the purposes stated in this policy.
Your Rights
Under GDPR, you have the right to: Access your personal data and receive a copy of what we hold about you. Correct any inaccurate or incomplete data. Request deletion of your data where we no longer have a lawful reason to process it. Withdraw your consent to marketing communications at any time. Object to processing of your data. Request restriction of processing. Request data portability, meaning we provide your data in a structured format you can transfer elsewhere.
To exercise any of these rights, contact us at info at acornstar dot com.
Data Retention
We retain your personal data for as long as necessary to provide you with our services and fulfil our legal obligations. Course completion certificates and training records are retained for a minimum of three years as required by training standards. Marketing contact information is retained until you unsubscribe or withdraw consent. Once you request deletion, we will remove your data within thirty days unless we have a legal obligation to retain it.
Security
Your personal data is stored securely on our learning management system hosted by our third-party provider. We use industry-standard encryption and security measures to protect your data from unauthorised access, loss, or damage.
Complaints
If you have concerns about how we process your personal data, you can contact us at info at acornstar dot com. You also have the right to lodge a complaint with the Data Protection Commission in Ireland at www dot dataprotection dot ie.
Marketing Communications
We will only contact you with promotional materials, newsletters, and marketing information where: You have explicitly consented to receive such communications, or you are an existing customer and we are contacting you about similar services you have already purchased from us. You can withdraw your consent to marketing at any time by contacting us at info at acornstar dot com or by clicking the unsubscribe link in any email we send you.
Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date. Your continued use of our services constitutes acceptance of the updated policy.