Data, Privacy & Rights Requests

• Access — a copy of the personal data we hold about you.
• Rectification — correction of inaccurate or incomplete data.
• Erasure — deletion of your data, subject to records we must keep.
• Restriction — pause processing while a dispute is resolved.
• Portability — your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — stop marketing emails at any time.
• Copyright notice — report material you believe infringes your rights.

• We acknowledge within 5 business days.
• We respond substantively within one month, extendable by two months for complex requests, with notice.
• We may ask for proof of identity before releasing or deleting personal data.
• Requests are free unless manifestly unfounded or excessive.
• Erasure does not remove records we must retain, such as certificate verification records or statutory accounting records. We will tell you what is retained and why.
• Where a sponsoring organisation is the controller of your learning data, we will forward your request to them and assist them in responding.

If you are unhappy with how we handled your request, you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.