Privacy

Privacy notice

This notice explains what the training collects, why it is collected, and who can see it. It applies to employees taking the training, to administrators at a licensed organization, and to anyone who contacts us.

Last updated 2 November 2026

What we collect

Your account: email address, password (stored hashed by our authentication provider) and, if you provide it, your name.
Your training record: the work email you take the knowledge check under, your score, pass or fail, the chapters you missed, the certificate code and the date.
Purchase details: the email address and email domain used at checkout, the plan and number of seats. Card details are entered on and handled by the payment provider; we never see or store them.
Anything you send through the contact form: your name, email address and message.

Why we use it

To give you access to the study guide and knowledge check you have paid for.
To score your attempt, issue and verify your certificate.
To let an administrator at your organization see the completions for their own email domain, and export them for an audit or examination.
To send you your certificate by email and to reply when you contact us.

Who can see it

Your attempt is visible to you, and to administrators of your own organization’s domain. Records from other organizations are not shown to your administrator. Our staff can access records only to operate and support the service.

We share the minimum necessary with the providers that run it: the payment provider that processes your purchase, the email provider that delivers your certificate, and our hosting and database provider. We do not sell personal data.

Storage in your browser

Your reading progress is stored in your browser so the guide remembers which chapters you have reviewed. Guide completion is also recorded on your account so it follows you to another device.

Retention

Training records and issued certificates are kept while the certificate could still be verified, so that an employer can check one later. Contact messages are kept only as long as needed to handle the enquiry.

Your choices

You can ask for a copy of your record, ask for a correction, or ask for your account to be deleted. Where a record also serves your employer’s compliance obligation, the employer is the controller of that record and we will direct the request to them. Requests go through the contact page.