Our commitment to your privacy

Information we collect

We collect only the data necessary to deliver our course, process payments, respond to enquiries, and improve our website. We never purchase marketing lists or scrape publicly available profiles. The information we hold falls into two categories: data you provide directly and data collected automatically through our systems.

How we use your data

We process personal data on specific legal bases defined by UK data protection law. For each processing purpose listed below, we identify the lawful ground that applies. We do not use your data for automated decision-making or profiling that produces legal effects.

• • Contract performance: to create your account, grant course access, and deliver the training you purchased.
• • Payment processing: to transmit transaction details to our payment service provider and issue receipts.
• • Customer support: to respond to your enquiries, troubleshoot technical issues, and process refund requests.
• • Service improvement: to analyse aggregated usage data and identify which course modules need refinement.
• • Legal compliance: to maintain records required by HMRC and respond to lawful requests from regulators.
• • Legitimate interests: to send you essential service updates, such as changes to course content or this policy.
• • Consent-based marketing: to send you occasional emails about course updates, but only when you have opted in.

Who we share data with

We disclose personal data only to the following categories of recipients and only for the purposes described in this policy. Each recipient is bound by a data processing agreement that restricts their use of your information to our instructions.

Your data protection rights

Under UK data protection law, you have several rights regarding your personal data. We respond to all legitimate requests within one month. Complex or numerous requests may take an additional two months, in which case we will inform you of the extension within the first month.

• • You may request a copy of the personal data we hold about you, free of charge.
• • You may ask us to correct any inaccurate or incomplete data without undue delay.
• • You may request erasure of your data where there is no compelling reason for us to retain it.
• • You may receive your data in a structured, machine-readable format and transfer it to another controller.
• • You may object to processing based on legitimate interests, including any related profiling activities.
• • You may restrict processing while we verify accuracy, lawfulness, or the grounds for your objection.

How we protect your data

We implement technical and organisational measures designed to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Our security posture is reviewed quarterly and updated when new threats emerge or when our infrastructure changes.

How long we keep data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. When the retention period expires, we securely delete or anonymise the information. The specific periods vary by data category as described below.

• • Account and course progress data: retained for three years after your last login.
• • Quiz scores and assessment data: retained for three years after course completion.
• • Customer support messages: retained for two years after your last correspondence.
• • Payment and transaction records: retained for six years to comply with HMRC requirements.
• • Marketing consent records: retained indefinitely unless you withdraw your consent.

We may retain anonymised statistical data indefinitely for research purposes. If legal proceedings or regulatory investigations require us to preserve specific records, we will extend the retention period accordingly and notify you where permitted.

International data transfers

Our servers are located in the United Kingdom. Some of our service providers may process data in other countries. When we transfer personal data outside the UK, we ensure an equivalent level of protection is in place through one of the following safeguards.

• • Adequacy regulations: we transfer data only to countries deemed adequate by the UK government.
• • Standard contractual clauses: we use UK-approved model clauses in our data processing agreements.
• • Binding corporate rules: we verify that multinational providers have approved internal data protection policies.
• • Derogations: in limited cases we may rely on your explicit consent for a specific transfer.

Cookies and tracking

Our website uses cookies and similar technologies to distinguish you from other users, remember your preferences, and analyse site traffic. For detailed information about the cookies we deploy and how you can manage them, please read our Cookie Policy.

You can block or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent you from accessing course materials or submitting contact forms. Our Cookie Policy includes step-by-step instructions for managing cookies in the most common browsers.

Changes to this policy

We review this privacy policy every six months and update it whenever our data processing activities change. When we make material changes, we notify you through one or more of the following channels.

• • A prominent banner on our website displayed for at least fourteen days after the update.
• • An email sent to the address associated with your account, summarising the key changes.
• • A notice posted in the course forum, visible to all enrolled members.
• • An update to the effective date at the top of this page, with a link to the previous version.

We encourage you to check this page periodically. Your continued use of our website and course after the effective date of any revised policy constitutes your acceptance of the changes. If you disagree with an update, you may request deletion of your account and data.