Privacy Policy

Last updated: February 2026

1. Data Controller

Spectrum Dynamics CIC (Community Interest Company), registered in England and Wales, company number 14329981, registered address in Lancaster, United Kingdom, is the data controller responsible for your personal data.

Contact: privacy@spectrumdynamics.co.uk

2. Data We Collect

We collect the following categories of personal data:

  • Account information: name, email address, and hashed password (or magic link token)
  • Learning progress: course enrolments, lesson completions, quiz scores, and certificate records
  • Accessibility preferences: calm mode, dyslexia font, and spacing settings
  • Payment information: processed by Stripe. We do not store card numbers, CVVs, or full payment details on our servers. Stripe may store payment methods on your behalf under their own privacy policy.
  • Technical data: IP address, browser type, and device information collected automatically via server logs

3. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract (Article 6(1)(b)): to provide the learning platform services you have purchased or registered for
  • Legitimate interest (Article 6(1)(f)): to improve our platform, maintain security, and prevent fraud
  • Consent (Article 6(1)(a)): for optional analytics cookies and marketing communications, where applicable

4. How We Share Your Data

We share personal data only with the following categories of recipients:

  • Stripe: payment processing (see Stripe Privacy Policy)
  • Cloud hosting providers: for platform infrastructure and data storage
  • Certificate verification: limited data (name, course title, completion date) is displayed on public verification pages for certificates you have earned

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will erase your personal data within 30 days of the request, except where we are legally required to retain certain records (for example, financial transaction records for tax and accounting purposes).

6. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights:

  • Right of access (Article 15): request a copy of the personal data we hold about you
  • Right to rectification (Article 16): request correction of inaccurate or incomplete data
  • Right to erasure (Article 17): request deletion of your personal data
  • Right to data portability (Article 20): receive your data in a structured, commonly used, machine-readable format
  • Right to restriction (Article 18): request that we limit our processing of your data
  • Right to object (Article 21): object to processing based on legitimate interest

To exercise any of these rights, contact us at privacy@spectrumdynamics.co.uk. We will respond within one month.

7. Cookies

We use essential cookies for platform functionality and optional cookies with your consent. For full details, see our Cookie Policy.

8. Supervisory Authority

If you are not satisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of material changes via email. The “last updated” date at the top of this page indicates the most recent revision.