Privacy Policy

What Data We Collect

We collect personal data that you provide directly when you enrol on a programme, contact us, or create an account. This typically includes your name, email address, and organisation. If you enrol on a paid programme, our payment processor will collect payment details on our behalf — we do not store card numbers or banking information on our servers.

We also collect limited technical data automatically, including IP address, browser type, and pages visited, to ensure the platform functions correctly and to understand how our content is used.

How We Use Your Data

We use the data we collect for the following purposes:

• Delivering course content, labs, and assessments
• Issuing certifications and digital badges
• Communicating with you about your enrolment, progress, and account
• Sending occasional updates about new programmes or changes to existing ones (you can opt out at any time)
• Improving our platform and training materials
• Complying with legal obligations

Third Parties

We share personal data with a limited number of trusted third parties, only as necessary to deliver our services:

• Accredible— used to issue digital badges and certificates for our CEAP and CETA certifications. Your name and email are shared when a credential is issued.
• Payment processor — handles payment transactions securely. We do not have access to your full card details.
• Analytics— we use privacy-respecting analytics to understand site usage. No personal data is sold or shared with advertisers.

Cookies

We use essential cookies to keep you signed in and to ensure the platform works correctly. We may also use analytics cookies to understand how our site is used. We do not use advertising or tracking cookies. You can control cookie preferences through your browser settings.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Certification records are retained indefinitely to allow verification of credentials. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain it.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to rectification of inaccurate data
• The right to erasure (“right to be forgotten”)
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent at any time

To exercise any of these rights, please contact us at the address below. We will respond within one calendar month.

Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@londonschool.email.