List of active policies

Full policy

UK Compliance Academy Limited (“we”, “us”) is committed to protecting your personal data and processing it lawfully, fairly and transparently under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

UK Compliance Academy Limited is registered in England and Wales, company number 17309952, registered office 128 City Road, London, EC1V 2NX, United Kingdom. We are registered with the Information Commissioner’s Office under registration number ZC232802. Contact us about anything in this policy at info@ukcomplianceacademy.co.uk.

We are the data controller where we decide why and how your personal data is used — for this website, for your membership and account, for keeping the platform secure, for payments, and for issuing and verifying certificates.

Most learners buy their own membership and hold it in their own name, and then our contract is with you directly. Where an organisation arranges and pays for training instead, the arrangement is with them — we explain below what that changes.

Where an employer invites you to join their organisation on our platform, assigns you courses and looks at your progress, that employer decides why it is doing so and is a data controller in its own right for that use. We are not acting on their instructions for your learning, so we are each responsible for our own part. If you want to know why your employer is monitoring your training, or how long they keep it, ask them.

What we collect and why

If you contact us

Your name, email address and message, so that we can reply. Lawful basis: our legitimate interests in answering you.

We do not send marketing emails to learners. If you ask us to let you know when something launches, we will keep your address for that and nothing else. If we ever start sending marketing, we will ask for your consent first, every message will carry an unsubscribe link, and you can tell us to stop at any time. The one time we contact anyone about our training because of you is when you ask us to contact the organisation you work for — see “When you finish a course” below.

After you complete a course, we email you once to ask how it went, with a link to leave a public review on Trustpilot. We do not pass your details to Trustpilot; anything you post there is covered by Trustpilot’s own terms. You can opt out using the link in that email. Lawful basis: our legitimate interests in improving our courses and letting future learners see what others thought of them.

If you create an account

Your name, email address, password (stored only as a secure hash), and the organisation you join if you use an invitation. Lawful basis: performance of our contract with you.

If your employer invited you

Where an employer invites you onto the platform, we get your email address from them before you have an account with us, so that the invitation can reach you. They may also tell us your name and which team you are in. We only use it to send the invitation and to connect you to their organisation once you accept. Lawful basis: our legitimate interests in operating the invitation, and your employer’s own basis for passing it to us.

If an organisation pays for your training

Most learners buy their own membership, and then our contract is with you. But an organisation can also arrange and pay for a course for its staff. In that case the contract is between us and them, not between us and you, so we do not rely on “performance of a contract with you” for that learning. We process your records to deliver the training the organisation asked us to deliver, and to give them the completion evidence they need. Lawful basis: our legitimate interests, and theirs, in delivering and evidencing workplace training. You can object — see your rights below.

When you agree to start straight away

At checkout you tick a box asking us to start your access immediately. We keep a record that you ticked it: the date and time, your IP address, and which version of the wording you were shown. We keep it because it is the evidence of what you agreed to if a refund is ever disputed — it protects you as much as us. We do not use it for anything else. Lawful basis: our legitimate interests in keeping a reliable record of what was agreed.

When you use a course

Which modules you open and complete, how far through you are, your assessment attempts and scores, the reflections you write at the end of a course, completion dates, and the certificates issued to you together with their verification codes. We need this to deliver the course, decide whether you have passed, and issue and verify certificates. Lawful basis: performance of our contract with you.

When you finish a course

Some courses end with a short feedback form. It asks how you rate the course, how well the website worked for you (with an optional box to report technical or accessibility problems), the type and name of the organisation you work for, your role, roughly how many drivers and passenger assistants work there, and whether we may contact your organisation about training for its team. Your answers are stored with your name, and only our own staff can see them — not your employer, and not anyone else. We use them to improve our courses and the website, to understand which organisations our learners work for, and — only if you say yes — to contact your organisation. Every question about your work can be answered “Prefer not to say”, and the organisation name is optional, so you never have to tell us who you work for to receive your certificate. Lawful basis: our legitimate interests in improving our courses and in offering training to organisations. You can object — see your rights below.

If you tell us we may contact your organisation, we will email it about training for its team. We will say that you suggested us only if you chose that answer. You can change your mind at any time by emailing us, and we will not mention you after that. Lawful basis for telling your organisation that you suggested us: your consent.

When you pay

Our payment provider, Stripe, collects and processes your card details directly. We never see or store your card number. We keep a record of what you bought, the amount, the date and Stripe’s payment reference. Lawful basis: performance of our contract, and legal obligation for accounting records.

Membership is a subscription that renews automatically, so Stripe also holds your card on file to take the next payment, and we store the reference numbers Stripe gives us for your customer and subscription records. We use them for three things and nothing else: to take the renewal, to email you before each renewal telling you the date and the amount, and to let you cancel or change your card from your account. You can cancel at any time, which stops any further payment. Lawful basis: performance of our contract with you.

Technical data

Standard server logs — IP address, browser type, pages requested — used to deliver and secure the service, plus a session cookie that keeps you logged in. Lawful basis: legitimate interests in a secure service.

This website does not use advertising or analytics trackers, and we do not sell your personal data or share it for marketing. The only exception is telling your organisation that you suggested us, and only if you ask us to.

If your employer enrolled you

Where you join an organisation on our platform, that organisation’s administrators can see your name, email address, the learning assigned to you, your completion status and your certificates. They cannot see your password or your individual assessment answers.

If you want to know why your employer requires this, or how long they keep it, ask them — it is their decision, not ours. You are welcome to contact us about how the information moves through our platform, and about your rights over it.

When someone verifies your certificate

Every certificate we issue carries a unique reference, and anyone holding that reference can check it on our website without an account. That is what makes a certificate worth having — an employer needs to be able to confirm it is genuine.

A successful check shows your name, the programme you completed, the date it was issued, and its validity or expiry status where that applies. It shows nothing else: not your email address, not your scores, not your answers, and not any other course you have taken.

The reference is deliberately hard to guess, so in practice only someone you have given the certificate to can look it up. We also limit how many checks can be made from one place in a short time, to stop anyone trying references at random. Lawful basis: legitimate interests in certificates that can be trusted.

If you have a good reason to want your certificate withdrawn from the verification service, email us and we will discuss it with you.

Marking and certificates are automatic

Your progress through a course is tracked automatically, your final assessment is marked automatically, and if you pass — and have submitted any reflection or feedback form the course asks for — your certificate is issued automatically. No person looks at your answers before that happens.

If you believe a result is wrong, email us. A person will look at it, and we will correct it and reissue the certificate if we agree.

How long we keep it

• Enquiries — up to 24 months after we deal with them, unless you ask us to delete them sooner.
• End-of-course feedback — 24 months from the day you submit it, and then it is deleted automatically. A reflection you write as part of a course is a learning record, kept as set out next.
• Account and learning records — for as long as your account is open, and then for 6 years. Training and certification records are evidence of compliance and are routinely requested by employers, auditors and regulators years after the event. While you are a member we keep these to perform our contract. After it ends we keep them under our legitimate interests in maintaining reliable training records, keeping certificates verifiable, and being able to bring or defend a legal claim.
• Payment records — 6 years, as required for accounting and tax.

Who we share it with

• Stripe — payment processing.
• Vercel Inc. — website hosting and security logs.
• Resend — sending service emails such as confirmations and reminders.
• Elestio — managed hosting for the learning platform and its database, running on Netcup infrastructure in Nuremberg, Germany.
• Your organisation’s administrators, if you joined through an employer, as described above.
• The organisation you work for — only if you tell us at the end of a course that we may contact it, and your name only if you say we may mention it.
• Anyone you give a certificate reference to, who can then confirm the certificate is genuine, as described above.
• No one else, unless the law requires it.

Your learning records are stored in Germany. Germany is outside the United Kingdom, but it is covered by UK adequacy regulations, which means the UK government recognises it as providing an equivalent level of protection.

Personal data may sometimes be processed outside the United Kingdom. Where that happens we make sure an appropriate transfer mechanism is in place — UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework where it applies, or appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Ask us if you would like to know which one applies to a particular transfer.

How we protect it

Access to learner data is restricted to staff who need it. Data is encrypted in transit, passwords are stored only as salted hashes, and the platform is backed up. If a breach happens that is likely to put your rights and freedoms at risk, we will report it to the ICO without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to put you at high risk, we will tell you too, without undue delay.

Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or hand it over in a portable format. You can also object to us using it.

Most of these rights are qualified, not absolute. Whether one applies depends on why we are using the data. For example, we may not be able to delete a training record we are keeping to defend a legal claim, and portability only covers data you gave us that we hold by consent or under a contract. If we cannot do what you ask, we will tell you why.

• Where we rely on your consent — such as telling you when you when something launches — you can withdraw it at any time by emailing us, and from any unsubscribe link if we ever start sending marketing. Withdrawing it does not affect anything we did before you withdrew it.
• Where we rely on legitimate interests, you can object. We will stop unless we have compelling grounds to continue.
• For direct marketing, your right to object is absolute. Tell us and we will stop, with no questions asked.

To exercise any right, email info@ukcomplianceacademy.co.uk. We normally respond within one month. Where a request is complex, or you have made several, the law lets us take up to two months longer — we will tell you within the first month if that happens, and why.

Closing your account

Closing your account is not the same as us erasing everything, and it would be misleading to suggest otherwise. We delete what we no longer need. We keep certain learning, payment and certification records for the periods set out above — because we have to for tax, because a certificate you have already given an employer must stay verifiable, and because we may need them to bring or defend a legal claim.

Where we keep something after your account closes, we keep only what is necessary for that purpose and nothing more. If you want your certificate withdrawn from the verification service as well, tell us and we will discuss it with you.

If you are unhappy with how we use your data

Tell us first — email info@ukcomplianceacademy.co.uk with the word “privacy” in the subject line. We will acknowledge your complaint within 30 days and respond without undue delay, telling you what we found and what we have done about it.

You do not have to come to us first, and nothing here stops you going straight to the Information Commissioner’s Office (ico.org.uk), which can investigate how we handle your personal data.

Cookies

This site sets no advertising or analytics cookies. The learning platform sets a session cookie that is strictly necessary to keep you logged in. See our cookie policy for the full detail.

Changes

We update this policy as our services change, and we change the date at the top whenever we do. Where a change affects your rights in a real way — a new purpose, a new recipient, or a longer retention period — we will tell you before it takes effect rather than leaving you to notice the new date.

Full policy

These terms govern your use of our website and our learning platform, both operated by UK Compliance Academy Limited, registered in England and Wales (company number 17309952), registered office 128 City Road, London, EC1V 2NX, United Kingdom. By using either, you accept these terms.

They apply to everyone — whether you are browsing, you bought a membership yourself, or your employer invited you to join. If you bought a membership, our terms of sale also apply and cover the purchase itself: price, renewal, cancellation and refunds.

About the site and the platform

Our website tells you about UK Compliance Academy and the courses we offer. Our learning platform is where you sign in, take those courses and collect the certificates you earn.

Using the site

• You may browse the site and share links to it for lawful purposes.
• You must not attempt to disrupt it, probe its security, or misuse any contact channel (for example, to send spam).
• You must not misrepresent an affiliation with UK Compliance Academy.

Your account

You need an account to take a course. Whether you paid for it yourself or your employer invited you, the account is yours alone.

• Give us accurate details, and keep them up to date. Certificates carry the name on your account, so please check it is right before you finish a course.
• Keep your password to yourself and do not let anyone else use your account.
• Tell us promptly if you think someone else has got into it.
• You are responsible for what happens under your login.

Sharing a login is the one thing we ask most firmly. A certificate is a record that you did the learning. If someone else takes a course or an assessment as you, that record is false, and it puts at risk the very thing it is supposed to prove.

Using the learning platform

You may use our courses for your own learning. You must not:

• copy, record, screenshot in bulk, download, republish or sell our course material;
• use it to train or teach other people, inside or outside your organisation;
• have someone else complete a course or an assessment for you, or complete one for someone else;
• try to get round the way courses are locked, ordered or assessed;
• upload anything unlawful, or anything that puts our service or other learners at risk.

If we suspend or close an account

We may suspend or close an account where we find a serious or repeated breach of these terms, or where an account is being used dishonestly.

Unless the law says otherwise, we will tell you first and give you a chance to explain. We will only act without warning where we have to — for example to protect other learners, or to comply with the law. Where you have paid for a membership, our terms of sale say what happens to it.

We may also withhold or withdraw a certificate if we have good reason to believe it was obtained dishonestly.

Verifying a certificate

Every certificate we issue carries a unique reference. Anyone holding that reference can check on our platform that the certificate is genuine and still within its validity period — that is what makes it worth having.

The check is free and needs no account. It shows the holder’s name, the programme, the date of issue and whether it is still current, and nothing else. Please do not use the service to try references at random; we limit how many checks can be made from one place, and we may block access where it is misused. Our privacy policy explains this in more detail.

Keeping the service available

We aim to keep the site and the platform running at all times, but we cannot promise they will never be unavailable. We may take them down briefly for maintenance, and we may change or update course content — for example when the law or official guidance changes.

Intellectual property

The UK Compliance Academy name, logo, site design, platform and course content are owned by us or our licensors. We give you permission to use the course content for your own learning, for as long as you have access to it. Everything else stays ours, and you may not reproduce it commercially without our written permission.

Trade marks belonging to other organisations, such as The CPD Certification Service, belong to them and are used under licence.

Accuracy and liability

We work to keep the information on this site accurate and current, but it is provided for general information only and does not constitute professional or legal advice. Our courses provide learning; they do not replace your employer’s policies, a professional assessment, or legal advice, and you remain responsible for decisions you take at work.

To the fullest extent permitted by law we exclude liability for loss arising from reliance on this website’s content. Nothing in these terms limits liability that cannot be limited under English law.

Links

Links to third-party sites are provided for convenience; we are not responsible for their content or privacy practices.

Changes to these terms

We may update these terms as our service changes. If a change affects your rights in a real way, we will tell you before it takes effect.

Governing law

These terms are governed by the law of England and Wales. You may bring proceedings in the courts of England and Wales, and if you live in Scotland or Northern Ireland, in your local courts.

Contact

Questions about these terms: info@ukcomplianceacademy.co.uk.

Full policy

Cookies are small files stored on your device by websites you visit. This page explains what this site stores — which is very little.

What this site uses

No advertising cookies. No analytics trackers. No third-party marketing cookies. The only thing we store on your device is a single browser preference that remembers you have dismissed our cookie notice, so we don’t show it on every visit:

On the learning platform

Our learning platform is live, and signing in to it sets a session cookie. It is strictly necessary — it is what keeps you logged in as you move between pages, and the platform cannot work without it, so it does not require your consent. It is deleted when you sign out or your session ends.

The platform also stores a small number of strictly necessary values that remember your choices while you use it, such as your language. It sets no advertising or analytics cookies.

Checking a certificate on our verification page sets no cookies at all. You do not need an account, and we do not track who ran the check.

If this changes

We may introduce optional analytics in future. If we do, we will ask for your consent first, you will be able to decline without losing any function, and we will update this policy before we start.

Managing cookies

You can clear or block storage at any time in your browser settings. Because we use no tracking cookies, doing so will not change how this site works for you. Blocking cookies on the learning platform is different: you will not be able to stay signed in, because the session cookie is what holds your login.

Contact

Questions: info@ukcomplianceacademy.co.uk.

Full policy

These terms apply when you buy access to a course or membership from UK Compliance Academy Limited, registered in England and Wales (company number 17309952), registered office 128 City Road, London, EC1V 2NX, United Kingdom (“we”, “us”). They form a contract between you and us. Your use of this website is separately governed by our terms of use.

Please read the section on cancellation and refunds carefully. Because our courses are digital content made available to you immediately, your right to cancel ends as soon as you open any course. You can cancel your subscription at any time to stop future payments.

What you are buying

An all-access membership gives one named individual access to all courses in our library, including any course we add while your membership is running. It is sold as a 12-month subscription that renews automatically until you cancel. Membership is personal to you and may not be shared, transferred or resold.

You can also buy a single course on its own. That gives one named individual access to that course only, with no time limit to complete it, and one certificate when they do. Once that certificate has been issued the course closes, and the certificate stays theirs to download; to take the course again, you buy it again. It is a one-off payment, not a subscription: nothing renews and you will not be charged again. Other courses are not included. A course you buy is personal to you and may not be shared, transferred or resold.

Where a course is described as CPD Certified, it has been independently assessed by The CPD Certification Service. Our courses are professional development programmes. They are not regulated qualifications and are not accredited by any awarding body or regulator.

Price and payment

• Membership costs £49.99 per year. The price shown at checkout is the total amount payable for the first year.
• We are not currently registered for VAT, so no VAT is charged or added. If that changes we will show VAT clearly before you pay.
• Payment is taken by our payment provider, Stripe. We do not receive or store your card details.
• A membership is a subscription that renews automatically. Unless you cancel, £49.99 will be taken from your payment method each year on the anniversary of the date you joined, and your access continues without interruption.
• A single course costs the price shown on its course page and at checkout, which is the total amount payable. It is one payment for one completion of the course and its certificate, and is never taken again automatically. To take the course again once your certificate has been issued, you buy it again, or join the membership.

Promotions and discount codes

Sometimes we offer a discount code or an introductory price. If you join on one, these terms still apply to you in full.

An introductory price applies to your first payment only, unless we say otherwise in writing. Your membership then renews at our normal price. We will tell you the renewal price in the reminder we send before the payment is taken, so you can cancel first if you would rather not continue.

Automatic renewal and how to cancel

This section applies to memberships. A single course does not renew, so there is nothing to cancel.

• We email you a reminder about 30 days before each renewal, and again about a week before, telling you the date the payment will be taken and the amount.
• You can cancel at any time. Sign in, open Manage subscription from My Learning, and choose cancel — or email us and we will do it for you. There is no cancellation fee and no minimum term.
• If you cancel, your access continues until the end of the period you have already paid for. It is not cut short, and no further payment is taken.
• If we change the renewal price, we will tell you at least 30 days before the change takes effect, so you have time to cancel if you would rather not continue.
• Certificates you have already earned remain valid as evidence of what you completed and when, whether or not you continue your subscription.

If a renewal payment fails

If your card is declined at renewal, we do not cut your access off that day. Stripe retries the payment over the following days and will email you so you can update your card. If the payment still cannot be taken after those attempts, the subscription ends and your access stops. You can re-subscribe at any time, and any certificate you have already earned remains valid.

Your account

You need an account to access a course. You must give accurate registration details, keep your password confidential, and not let anyone else use your account. Certificates are issued in the name on the account, so please make sure it is correct before you finish a course.

Cancellation and refunds

Once you open any course, your membership is not refundable. You are buying access to the whole library, so opening any one course is taking delivery of the thing you paid for. A course you buy on its own is, in the same way, not refundable once you open it. Please read this section before you pay.

Buying online normally gives you 14 days to change your mind. For digital content that right ends as soon as the content is made available to you, provided you asked for it and understood what you were giving up. At checkout you tick a box doing exactly that — it is never pre-ticked, and the payment button does not work until you tick it.

What that means in practice

• You have not opened any course in the library — you can cancel within 14 days of paying and we refund you in full, no reason needed.
• You have opened any course — the right to cancel has ended and no refund is due. Your membership is access to the entire library, not to one programme, so opening any part of it is taking delivery. You asked us to give you that access immediately, and we did.
• More than 14 days have passed — no refund, whether or not you opened anything.
• On a renewal payment — the same test applies from the date the renewal was taken: full refund within 14 days if you have not opened any course since, otherwise none.
• A single course — the same test applies to the course you bought: a full refund within 14 days of paying if you have not opened it, and no refund once you have. There is no renewal payment.

You can cancel your subscription at any time to stop the next payment — that is always available and costs nothing. What this section governs is money already paid.

Model cancellation form

You do not have to use this form — an email saying you want to cancel is enough — but we are required to make it available, so here it is. Copy it into an email to info@ukcomplianceacademy.co.uk.

To UK Compliance Academy Limited, 128 City Road, London, EC1V 2NX, United Kingdom, info@ukcomplianceacademy.co.uk:

I hereby give notice that I cancel my contract for the supply of the following service / digital content:

Ordered on / received on:  
Name of consumer:  
Address of consumer:  
Date:  

How to ask

To cancel, use Manage subscription in My Learning, or email info@ukcomplianceacademy.co.uk — one message is enough, and we will not put you through a retention process. For a refund, email us from your account address and tell us your name, the date you paid and your order reference. That is all we need to find your account — please never send us card details. We refund to your original payment method within 14 days of accepting the request.

None of this affects your legal rights if the content is faulty, not as described, or not supplied with reasonable care and skill. If something is wrong with the course, tell us and we will put it right, or refund you.

Certificates

A certificate is issued automatically when you complete a programme, including every module, the final assessment and any reflection or feedback form the course page asks you to submit. A feedback form never requires you to tell us who you work for. Each certificate carries a unique verification code and is valid for 12 months from the date of issue, after which we recommend you retake the programme to keep your record current. A course bought on its own closes once its certificate has been issued: you can still download the certificate from your account, and to retake the course you buy it again.

We may withhold or withdraw a certificate if we have reasonable grounds to believe it was obtained dishonestly, for example by someone else completing the assessment.

How you may use our material

We own, or are licensed to use, all course content — text, images, video, assessments and certificates. We give you a personal, non-transferable licence to use it for your own learning while your membership, or your access to a course you bought, lasts.

You must not copy, download in bulk, record, republish, share, sell or use our material to teach others, and you must not share your login. We may suspend or close an account, without refund, where we find serious or repeated breaches.

Buying for a team

We do not sell blocks of places or seats. Each learner buys and holds their own membership, or their own course, in their own name, and pays for it themselves. An employer can invite staff to join their organisation on the platform, group them, assign learning and see completion records — but the membership belongs to the individual, is paid for by them, and cannot be transferred to anyone else. If you join through an employer, they will be able to see your progress and your certificates.

Availability and changes

We aim to keep the platform available at all times but cannot guarantee uninterrupted access; we may occasionally suspend it for maintenance. We keep courses under review and may update content, for example when law or guidance changes. If we withdraw a course you have paid for and cannot offer a reasonable alternative, we will refund the unused part of your membership or, if you bought that course on its own and have not completed it, what you paid for it.

Our liability

Our courses provide learning and general information. They do not replace your employer’s policies, a professional assessment, or legal advice, and you remain responsible for decisions you take at work.

We do not exclude liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot be excluded under English law. Otherwise our total liability to you is limited to the amount you paid us, and we are not liable for loss of profit, business or opportunity.

If you have trouble getting in

If the platform will not let you in, or a course will not load, please tell us before you ask for a refund. Most problems are quick to fix, and we would rather sort it out than have you lose learning time.

If we cannot fix a genuine fault within a reasonable time, that is different. You are entitled to a repair, a replacement, or your money back, and we will say which applies and put it right.

Complaints

If something goes wrong, email info@ukcomplianceacademy.co.uk. We aim to acknowledge complaints within 5 working days and resolve them within 30 days.

If we cannot resolve it between us

We are not currently a member of an alternative dispute resolution (ADR) scheme, and we are not required to be. If we reach the end of our complaints procedure and you are still unhappy, we will write to you confirming that, and tell you the name and website of a certified ADR body you could approach and whether we are willing to take part. You are free to approach a certified ADR provider whether or not we agree to participate, and nothing here affects your right to take the matter to court.

Changes to these terms

We may update these terms as our service changes. The version that applies to your purchase is the one we showed you when you bought, except where the law requires otherwise. If we make a change that affects your rights in a real way, we will tell you at least 30 days beforehand and you can cancel before it takes effect.

Governing law

These terms are governed by the law of England and Wales. You may bring proceedings in the courts of England and Wales, and if you live in Scotland or Northern Ireland, in your local courts.