Seven Institute Privacy Policy

Last updated: 19 August 2026

Tuhura Ltd, trading as Seven Institute ("Seven Institute", "we", "us", "our"), is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Seven Institute is registered in England and Wales, company number 14903817, registered office at Flat 3, 13 Lymington Road, London, NW6 1HX, UK. We are registered with the Information Commissioner's Office (ICO). Please request our registration number, which we're awaiting confirmation of.

Who this policy covers

This policy applies to visitors to our website, customers who book training courses or services with us, and delegates who attend those courses.

What personal data we collect

Depending on how you interact with us, we may collect:

Contact details: name, job title, company name, email address, phone number, postal address
Booking and course information: courses booked, dates attended, any dietary or access requirements you tell us about, invoicing details
Payment information: processed by our payment providers (we do not store full card details ourselves)
Website usage data: IP address, browser/device information, pages visited, collected via Google Analytics
Correspondence: emails, calls, and other communications with us
Where we deliver an Insights Discovery workshop directly, information you enter into the Insights Discovery online evaluator platform (see Insights Discovery assessments below)

How we collect it

We collect information when you request a quote, book a course, request an LMS/e-learning demo, contact us by phone, email or web form, or browse our website.

Why we collect it, and our legal basis

We process personal data on the following bases:

Contract: to book, arrange, and deliver the training or services you've purchased
Legitimate interests: to respond to enquiries, administer your account, and understand how our website is used
Legal obligation: to meet accounting, tax, and regulatory requirements
Consent: where you've opted in to marketing communications; you can withdraw this at any time

How we use your information

To process bookings, issue invoices, and deliver courses
To provide customer support and respond to queries
To send service-related communications (booking confirmations, venue details)
To send marketing communications, where you've consented
To meet our legal and regulatory obligations
To monitor and improve website performance (via Google Analytics)

Insights Discovery assessments

Where Seven Institute delivers an Insights Discovery workshop directly on a client's behalf, delegates access the Insights Discovery online evaluator via a platform owned and operated by Insights, an independent third party. The information delegates provide to complete the evaluator is processed by Insights in line with Insights' own privacy notice.

Where Seven Institute instead supplies course materials and online platform credits to an organisation running its own accredited Insights Discovery practitioner, we do not have access to, or process, the resulting assessment or profile data. That relationship sits directly between the organisation and Insights.

We do not sell your personal data. We share it only where necessary, with:

Insights, where relevant to delivering an Insights Discovery workshop (see above)
Payment providers (e.g. Worldpay, PayPal), to process payments securely
IT and hosting providers (Microsoft Azure), who store data on our behalf under contract
Professional advisers and regulators, where required by law

International data transfers

All personal data we hold is hosted and processed within the UK and EU. We do not transfer personal data outside the UK or EU.

How long we keep your data

We keep personal data for up to 5 years from the point of collection. If you ask us to delete your data sooner, we will do so, unless we're required to retain it for longer to meet a legal obligation, for example financial and invoicing records, which UK law requires businesses to keep for a minimum period for tax purposes.

Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you

Have inaccurate data corrected
Have your data deleted, in certain circumstances
Restrict or object to our processing
Receive your data in a portable format
Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at info@seveninstitute.co.uk or write to us at Flat 3, 13 Lymington Road, London, NW6 1HX, UK. If you're unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office.

Cookies

Our website uses session and persistent cookies, including Google Analytics cookies, to help it function and to understand how it's used. Full details are in our Cookie Policy.

How we protect your data

We hold Cyber Essentials certification. Data is stored on secure servers behind a firewall, and access to personal data is limited to those who need it to do their jobs.

Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated "last updated" date.