Privacy Policy

This Privacy Policy sets out the data processing practices carried out through the use of the Sumigi website.


H2 Software Ltd ("H2 Software", "the Company", or "We") collects information from visitors to this website through the use of online forms. We collect your details when you email us with an enquiry. We also collect information about the transactions you undertake through this site including details of payment cards used.

In addition to the above, we collect information automatically about your visit to our website. Please see the section on cookies for more details.


We may process personal information collected via this website or other electronic communications networks used by the Company, for the following purposes:

Advertising, Marketing, Public Relations, General Advice Services: The identification of recipients for Company services and administration of promotional campaigns, the advertising and promotion of the Company and its services including by direct marketing means, the advertisement and provision of general advice to members of the public about Company services, the advertisement and promotion of the Company through third party products and services e.g. financial sponsorship, fundraising for the Company and other organisations.

Accounts and Records: The administration of supplier records relating to goods, orders, services, accounts provided by the Company.

Education: Administration of education and training such as registration, calculation and publication of exercise results, provision of education and training such as the planning and control of curricula and exams, and commissioning, validating and producing educational materials, administration of student awards and fees.


Any personal data captured through Sumigi is used and held in accordance with the requirements of the General Data Protection Regulations (GDPR). Sumigi data is stored on databases located in London, England, United Kingdom.


We will only keep your personal data for as long as is necessary for the purpose for which it is processed.

We will permanently delete your account and any and all personal data, including workbook progress, after 12 months of inactivity.


We will only disclose your personal data to a third party when we are required to by law, where we have your specific consent, or to the following:

  • companies or suppliers with whom we engage to process data on our behalf – if so, we will ensure adequate arrangements are in place to protect your personal data, such as a data sharing agreement
  • relevant government departments and agencies 
  • professional and regulatory bodies in relation to confirmation of qualifications, professional conduct and the accreditation of courses
  • legal representatives
  • internal and external auditors.

From time to time, we will transfer limited personal data outside the European Economic Area. Where this does occur, the Company will adhere to the requirements of the General Data Protection Regulation and ensure that adequate technical and organisational controls are in place.


Your rights including access to information and correction

You have a number of rights under the General Data Protection Regulation, including the right:

  • to rectify inaccuracies in personal data that we hold about you
  • to be forgotten in some circumstances, that is your details to be removed form systems that we use to process your personal data
  • to restrict the processing of your personal data in certain ways
  • to obtain a copy of your data in a commonly used electronic form
  • to withdraw consent where that is the legal basis of our processing
  • to object to certain processing of your personal data by us.

Further information about your rights can be found on the ICO’s website. You may also contact the Data Protection Officer for further information.

You have the right to ask to see what personal data we hold about you, known as a subject access request. Please contact us by email at

You have a right to complain to the ICO about the way in which we process your personal data. 


Cookies are files placed on your computer to collect standard internet log information and visitor behaviour information. This helps us to understand visitor behaviour, to remember your preferences and improve user experience.

For further information about cookies you can visit and to find out more about how we use cookies, please refer to the cookie information web page.


Our website may contain links to other websites that are outside our control and are not covered by this privacy notice. Our notice only applies to the Sumigi website so when you link to other websites, you should read their own privacy policies.


We keep our privacy notice under regular review and the notice was last updated on 29 July 2018.

In particular, as the General Data Protection Regulation is new law and the extent of the lawful grounds for processing data has yet to be fully understood, the Company may review and update this notice. Any updates will be placed on this webpage.


If you have any questions about our privacy notice or the information we hold about you, you can contact the Company's Data Protection Officer by email at or you can write to H2 Software Limited, c/o 4 Riverview, Walnut Tree Close, Guildford, Surrey, GU1 4UX.