Privacy Policy

1. Introduction

Certified Adviser is a professional certification platform operated by AllCampus UK Limited, a company registered in England and Wales (company number [Company Number]).

This policy explains what personal information we collect when you use our service, how we use it, who we share it with, and the rights you have under UK data protection law (the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations). By creating an account or using the service you agree to the practices described here.

2. Data we collect

We collect the following categories of personal information:

• Account details: the full name and email address you provide at sign up.
• Payment information: processed by Stripe. We do not store full card details on our own systems.
• Course progress data: lessons completed, quiz responses, time on platform, and certificate issuance records.
• Technical data: IP address, browser type, device type, and basic usage logs needed to keep the platform secure and performant.
• Communications: messages you send to support and your responses to any surveys you choose to complete.

3. How we use your data

We use your personal information to:

• Create and manage your account and authenticate sign in attempts.
• Deliver course content, track progress, and issue digital certificates.
• Operate the public verification page so that third parties can confirm the validity of an issued credential.
• Send transactional messages such as sign in links, course updates, completion confirmations, and renewal reminders.
• Maintain the security, integrity, and performance of the platform.
• Comply with our legal, regulatory, and tax obligations.

4. Legal basis for processing

Under UK GDPR we rely on the following legal bases:

• Contract performance: processing necessary to provide the courses, accounts, and certificates you signed up for.
• Legitimate interests: improving the platform, preventing fraud, and analysing aggregate usage in a privacy preserving way.
• Legal obligation: keeping financial records as required by HMRC and responding to lawful requests from regulators.
• Consent: any optional marketing communications you choose to opt into. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

5. Data sharing

We share personal data only with the categories of processors listed below, each bound by a written data processing agreement and obliged to act on our instructions.

• Supabase, Inc.: database and authentication.
• Cloudflare, Inc.: hosting, content delivery, and security.
• Stripe Payments Europe Limited: payments and billing.
• Resend: transactional email delivery.
• A privacy focused analytics provider: aggregate, non identifying usage data only.

We do not sell personal data and we do not share it with advertisers. We will disclose information to law enforcement, courts, or regulators only where we are legally required to do so.

6. Data retention

We retain account data for as long as your account is active. After account closure we keep:

• Identity, billing, and certificate issuance records for seven years to meet HMRC tax retention requirements.
• Anonymised usage analytics for up to three years for service improvement.
• All other personal data is deleted within 30 days of account closure unless we are required to retain it by law.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure where there is no overriding legal reason to retain the data.
• Request restriction of processing in certain circumstances.
• Object to processing that relies on legitimate interests.
• Request portability of the data you provided to us in a structured, commonly used, machine readable format.
• Withdraw consent for any processing that relies on consent.

To exercise any right, email hello@certifiedadviser.co.uk. We will respond within one month. If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. International transfers

Some of our processors, notably Stripe and Cloudflare, operate infrastructure outside the United Kingdom (including in the United States). Where personal data is transferred outside the UK we rely on adequacy decisions issued by the UK government, on the UK extension to the EU Standard Contractual Clauses, or on the UK International Data Transfer Addendum, together with supplementary measures where appropriate.

9. Cookies and similar technologies

We use a small number of strictly necessary cookies for authentication and security. These cookies do not require consent under the Privacy and Electronic Communications Regulations.

We do not currently set advertising or third party tracking cookies. If we introduce any non essential cookies in the future we will publish a cookie banner and obtain your consent before any such cookies are set.

10. Children's data

The service is intended for adult professionals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, contact us at hello@certifiedadviser.co.uk and we will delete the records promptly.

11. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email and update the effective date at the top of this page. Continued use of the service after the change takes effect constitutes acceptance of the updated policy.

12. Contact

Data protection enquiries: hello@certifiedadviser.co.uk

Postal address:
AllCampus UK Limited
[Address placeholder]
United Kingdom