Privacy Policy

1. Introduction

Standards Academy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to all personal data processed by Standards Academy.

2. Data Controller

Standards Academy is the data controller responsible for your personal data. If you have questions about this policy or our data practices, please contact us at info@standards.academy.

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, phone number, job title, organization, and country when you create an account or enroll in courses
• Payment Information: Billing address and payment details (processed securely by our payment provider)
• Communication Data: Information you provide when contacting us or responding to surveys
• Course Data: Training preferences, certification interests, and course completion records

3.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, and navigation patterns
• Cookies: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To provide courses and services you have enrolled in
• Legitimate Interests: To improve our services, prevent fraud, and communicate relevant updates
• Consent: For marketing communications and non-essential cookies (you may withdraw consent at any time)
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use your information to:

• Process course enrollments and deliver training services
• Communicate about your courses, account, and our services
• Process payments and maintain financial records
• Facilitate certification processes with PECB
• Improve our website, courses, and customer experience
• Send marketing communications (with your consent)
• Comply with legal obligations and protect our rights

6. Information Sharing

We may share your information with:

• Certification Bodies: PECB for certification and examination purposes
• Service Providers: Payment processors, email service providers, and hosting services that help us operate our business
• Professional Advisors: Lawyers, accountants, and auditors as necessary
• Legal Requirements: When required by law or to protect our rights and safety

We do not sell your personal information to third parties.

7. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by relevant authorities.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Account and enrollment data: For the duration of your relationship with us plus 7 years
• Financial records: As required by applicable tax and accounting laws
• Certification records: Indefinitely to support verification requests
• Marketing preferences: Until you withdraw consent

9. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at info@standards.academy.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

13. Complaints

If you have concerns about our data practices, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact Us

For questions about this Privacy Policy or our data practices:

Email: info@standards.academy