Skip to content


Data Protection Privacy Notice


This is the privacy notice of Sunsurfer Arts & Education Consultancy Limited. We respect your privacy and this notice will tell you how we look after your personal data

 Data controller

Michael Fellowes, director of Sunsurfer is the controller and responsible for your personal data. Contact Michael on:


If you register for a course accredited by Mental Health First Aid England we will pass your data onto MHFA England. MHFA England will have a different Data controller and Data protection policy.

Personal Information

Personal data, or personal information, means any information about an individual from which that person can be identified. You can find out more about personal data from the Information Commissioners Office.

We will use the personal information you give us:

  • To provide you with relevant training services
  • To manage the delivery of the training to you or your organisation.

We may collect, use, store and transfer different kinds of personal data about you. This may include, first name, last name, title, email address, billing address, office locations and phone numbers.

For our externally accredited Mental Health First Aid courses we will ask you to fill in equal opportunities forms. These forms include diversity questions. These forms are completely anonymous. We pass this information onto Mental Health First Aid England for their monitoring and statistics.

You provide us with your personal data or that of members of your organisation when you contact us by post, phone, email or otherwise

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Performance of Contract - this means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

Legitimate Interest - this means the interest of our business in conducting and managing our business to enable us to give you the best service. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Comply with a legal or regulatory obligation - this means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

Third Party – We do not provide or sell your data to any other organisation or person. We provide data on those enrolled on a MHFA England accredited courses to MHFA England for their administration purposes.

You have the right to withdraw consent to marketing at any time by contacting us on

Purposes for which we will use your personal data are in the Legitimate Interest Type table.

Legitimate Interest Type

Type Legitimate interest
Providing information about training courses, prices and administering courses Necessary for the delivery of training courses
Provision of information on products and services (Marketing) Our legitimate interests or your explicit consent
To provide you with information related to your training interests that you have indicated you are happy to receive or which you have asked for. Our legitimate interests or your explicit consent

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”).  We will take all reasonable steps necessary to ensure that your data is secure.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Your legal rights

Unless subject to an exemption under the data protection laws, you have the following rights with respect to your personal data:

  • The right to request a copy of the personal data which we hold about you;
  • The right to request that we correct any personal data if it is found to be inaccurate or out of date;
  • The right to request your personal data is erased where it is no longer necessary to retain such data;
  • The right to ask us not to process your personal data for marketing purposes

Queries, requests or concerns

To exercise all relevant rights, queries or complaints in relation to this policy or any other data protection matter between you and us, please contact our Data Protection Officer Michael Fellowes on