1.Who is responsible for your data
LEARNING & TEACHING HUB LIMITED is the controller of the personal data described here. It is the company you buy from, and the full company details are in section 1 of our Terms. For anything about your data, write to hello@learningandteachinghub.co.uk.
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This site is for adults: it is not directed at anyone under 18 and we do not knowingly collect data from children.
2.What we collect and why
We collect only what we need for each purpose below. The lawful basis is the reason UK GDPR allows us to use the data.
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Order data: name, email, organisation (if you give one), address, postcode, town or city, country, the courses you bought and the payment outcome | To take your order, send your access details and give you your order page | Contract | Order records are kept for 6 years because accounting and tax law requires it |
| The same order records | To keep the accounts and meet tax obligations | Legal obligation | 6 years |
| Chat: your messages, any files you send, your optional email and the page you were on | To answer you | Legitimate interest in answering the questions you ask us | 12 months after the last message in the conversation |
| Visit log: time, IP address, country, page, referrer and browser | Security, spotting abuse and preventing fraud | Legitimate interest in keeping the site and our customers safe | 90 days |
| “Remember me” cookie holding your checkout details | To fill in the checkout form for you next time | Consent, which you give by ticking the box and can withdraw by deleting the cookie | 180 days, or until you delete it |
| Emails you send us | To deal with what you ask | Legitimate interest in answering you; contract if it is about an order | Normally up to 12 months, or 6 years if it forms part of an order record |
We do not use advertising or analytics trackers on this site, we do not build profiles of visitors, and we do not sell personal data.
How checkout works
The checkout form on this site is our form. We collect what you type in it and pass it to our payment provider, so that the secure payment page only has to ask for your card or wallet details. We never see or store your full card number.
3.Who else receives your data
We share personal data only with the following kinds of organisation, and only as far as needed.
- Our payment provider. It acts as the merchant of record for the sale. It receives your order and checkout details and your payment details, takes the payment, and deals with the tax on the sale. For its own legal and fraud-prevention duties it is also a controller of that data, and its privacy information is shown on its payment page.
- Our hosting provider. It stores the site, the order records, the chat and the visit log on our behalf and may only act on our instructions.
- Email services. They carry the access details and replies we send you.
- An IP-location lookup service. It is used only in our private visit log, where an IP address is turned into a country. It receives that IP address and nothing else.
- Image, font and icon content networks. When a page loads, your browser fetches photographs, fonts and payment-method icons directly from these networks, so they see your IP address and browser details. We do not send them anything else. See Cookies for the list of types.
- Authorities and advisers. We disclose data if the law requires it, or to our accountants and legal advisers under a duty of confidence.
Transfers outside the UK
Some of these organisations store or process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations, by the ICO’s International Data Transfer Agreement or the UK Addendum to standard contractual clauses, or by another safeguard that UK GDPR allows.
4.Your rights
You have the right to:
- ask for a copy of the personal data we hold about you (access);
- have inaccurate data corrected (rectification);
- ask us to erase your data, where we have no overriding reason to keep it (erasure);
- ask us to restrict how we use your data while a question about it is settled (restriction);
- receive the data you gave us in a common, machine-readable format, where we use it under a contract or consent (portability);
- object to our use of your data that is based on legitimate interests;
- withdraw consent at any time, for example by deleting the “remember me” cookie. This does not affect what we did before.
To use any of these rights, email hello@learningandteachinghub.co.uk. We may ask you to confirm who you are, and we will reply within one month. There is no charge. Some records, such as order records we must keep for tax purposes, cannot be erased until the legal period has ended.
We make no decisions about you by automated means that have legal or similarly significant effects.
If you are unhappy with how we have used your data, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113.
5.Keeping data safe, and changes
The site is served over an encrypted connection, access to the chat and visit log is limited to staff, files sent through the chat are stored outside the public part of the site, and card details are handled only by our payment provider. When a retention period above ends, the data is deleted.
We will update this notice when what we do changes, and the date at the top will show when. Cookies are described separately on the Cookies page.