This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, when information may be shared with third parties, how long it may be retained and the rights available to you under UK data-protection law.

This policy applies when you visit our website, contact us, create an account, purchase a course, use our learning services, sit or arrange an examination, communicate with our team or otherwise interact with ECDL Digital.

1. Who We Are

For the purposes of applicable UK data-protection legislation, the organisation responsible for determining how and why your personal information is processed is referred to as the data controller.

For privacy enquiries, requests or concerns relating to ECDL Digital, please contact:

Email: info@ecdldigital.com

2. Information We May Collect

Depending on how you interact with ECDL Digital, we may collect and process information including:

Identity information – such as your name and account details.

Contact information – including your email address, telephone number and other contact information you provide.

Account information – including usernames, account status and learner profile information.

Transaction information – including purchases, order references, payment status, refunds and transaction history.

Course information – including courses purchased, enrolment dates, learning progress, study activity, completed modules, assessment results and account access.

Examination information – including examination bookings, vouchers, licence allocations, results and certification-related information where applicable.

Communications – including emails, enquiries, support conversations, live-chat communications and other correspondence with us.

Technical information – which may include IP address, browser type, device information, operating system and website security information.

Website usage information – including pages viewed, interactions with our website and information collected through permitted cookies or similar technologies.

Marketing information – including your marketing preferences and interactions with communications where applicable.

Fraud and security information – including information reasonably required to investigate suspicious transactions, account misuse, payment disputes, unauthorised access or other security concerns.

We aim only to collect information that is reasonably necessary for the purposes for which it is being processed.

3. How We Collect Your Information

We may collect information directly from you when you:

Purchase a course or package.

Register for an account.

Contact our support or sales team.

Complete an online form.

Use our live-chat service.

Access your learning platform.

Complete training or assessments.

Arrange examinations or certifications.

Request a refund, cancellation or course transfer.

Subscribe to marketing communications.

Participate in a promotion or offer.

We may also receive information automatically through our website and systems or, where appropriate, from service providers involved in delivering the services you have requested.

Where personal information is obtained from another source, we will provide the required privacy information in accordance with applicable law. ICO guidance requires privacy information to be provided when information is collected and establishes additional requirements where data comes from elsewhere.

4. How We Use Personal Information

We may process your personal information to:

Create and administer your learner account.

Process course purchases and payments.

Provide access to courses and digital learning materials.

Track course progress and maintain learner records.

Arrange examinations, licences, vouchers and certification.

Provide customer service and technical support.

Respond to enquiries and complaints.

Administer refunds, cancellations and course transfers.

Communicate important information concerning your account or purchase.

Maintain and improve our website and learning services.

Detect and prevent fraud, misuse and unauthorised account access.

Investigate payment disputes and chargebacks.

Maintain appropriate financial, transactional and contractual records.

Comply with legal, regulatory and accounting obligations.

Send marketing communications where legally permitted.

Establish, exercise or defend legal claims where necessary.

We will not use personal information for purposes that are incompatible with the reason it was collected unless permitted or required by law.

5. Our Lawful Bases for Processing

UK data-protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, ECDL Digital may rely upon:

Contract

We may process information where necessary to enter into or perform our contract with you.

For example, we need certain information to process your purchase, create your account, provide course access and arrange examinations.

Legal Obligation

We may process or retain information where necessary to comply with legal requirements, including appropriate financial, tax, regulatory and consumer records.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

This may include:

Protecting our systems and services.

Preventing fraud.

Maintaining transaction records.

Improving our services.

Managing customer relationships.

Investigating account misuse.

Establishing or defending legal claims.

Responding to payment disputes.

Consent

Where consent is required, such as for certain marketing or cookie activities, we will request it.

Where processing relies upon consent, you may withdraw that consent. The ICO states that people must be informed of this right and that withdrawing consent should be as easy as giving it.

6. Payments

Payments may be processed through third-party payment providers.

ECDL Digital may receive information such as:

Payment status.

Transaction reference.

Payment method.

Amount paid.

Refund information.

Billing information where necessary.

We do not need to retain complete card details ourselves where payments are securely handled by the relevant payment provider.

Those providers may process personal information under their own privacy notices and legal obligations.

7. Learning Platforms & Examination Providers

Some ECDL Digital products may involve third-party platforms, examination providers, testing systems or licence providers.

Where necessary to provide something you have purchased, relevant learner information may be supplied to those organisations.

We will seek to limit the information shared to what is reasonably necessary for the relevant purpose.

Third-party providers may also act as independent data controllers in respect of some processing and may therefore have their own privacy policies.

8. Sharing Personal Information

ECDL Digital does not sell your personal information.

We may disclose appropriate information to trusted organisations where reasonably necessary, including:

Payment processors.

Website and hosting providers.

Learning-management platforms.

Examination and certification providers.

Email and communications providers.

Customer-support and live-chat systems.

IT and cybersecurity providers.

Analytics providers.

Professional advisers such as accountants or lawyers.

Banks, card issuers and payment-dispute providers.

Government, regulatory or law-enforcement authorities where legally required.

Where another organisation processes personal information on our behalf, we take appropriate steps to ensure suitable contractual and data-protection safeguards are in place where required.

9. Payment Disputes, Fraud & Chargebacks

Where a transaction is disputed, ECDL Digital may process and disclose relevant information for the purpose of investigating and responding to the dispute.

This could include:

Order information.

Transaction records.

Terms accepted during checkout.

Course-access records.

Account activation information.

Login or study activity.

Examination or licence allocation.

Relevant customer communications.

Refund or cancellation requests.

Relevant information may be provided to payment processors, banks, card issuers or dispute-resolution providers where reasonably necessary to investigate or defend a transaction.

10. Marketing

Where legally permitted, ECDL Digital may contact you about relevant courses, offers or services.

Where consent is required, we will obtain it before sending such communications.

You can unsubscribe from marketing emails using the unsubscribe option contained in the message or by contacting:

info@ecdldigital.com

Opting out of marketing does not prevent us from sending necessary service communications concerning your account, purchase, course, examination or another existing contractual relationship.

11. Cookies

Our website may use cookies and similar technologies for website functionality, security, preferences, analytics and, where permitted, marketing.

Some technologies are necessary for our website or requested services to function, while others may require consent or provide an applicable right to object.

Please see our separate Cookies Policy for further information.

12. How We Protect Personal Information

ECDL Digital takes reasonable technical and organisational measures designed to protect personal information against:

Unauthorised access.

Accidental loss.

Inappropriate disclosure.

Alteration.

Destruction.

Misuse.

Access to personal information should be limited to people and service providers who reasonably require it for legitimate business purposes.

However, no internet-based service or electronic storage system can guarantee absolute security.

13. How Long We Keep Your Information

We do not intend to retain personal information indefinitely without a valid reason.

Retention periods depend upon factors including:

The type of information.

The purpose for which it was collected.

The duration of the customer relationship.

Course or examination requirements.

Financial and accounting obligations.

Fraud-prevention requirements.

Applicable limitation periods.

Whether information may reasonably be required to establish, exercise or defend a legal claim.

When personal information is no longer reasonably required, we will take appropriate steps to delete, anonymise or otherwise securely dispose of it, subject to applicable legal requirements.

The ICO requires privacy information to explain either the relevant retention periods or the criteria used to determine them.

14. International Data Transfers

Some technology or service providers used by ECDL Digital may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure the transfer complies with applicable UK data-protection requirements.

Where required, this may involve recognised adequacy arrangements or appropriate contractual safeguards.

15. Your Data Protection Rights

Depending upon the circumstances and applicable lawful basis, you may have rights including:

Right of access – to request a copy of personal information we hold about you.

Right to rectification – to request correction of inaccurate or incomplete information.

Right to erasure – to request deletion in circumstances where this right applies.

Right to restriction – to request that processing is restricted in certain circumstances.

Right to data portability – to receive certain information in a usable format where this right applies.

Right to object – to object to certain types of processing.

Right to withdraw consent – where processing is based upon your consent.

Rights concerning certain automated decision-making and profiling, where applicable.

These rights are not all absolute and whether a particular right applies can depend upon the circumstances and lawful basis involved.

16. Requesting Your Information

To exercise a data-protection right or ask a question about information held by ECDL Digital, contact:

info@ecdldigital.com

Please provide enough information for us to identify you and understand your request.

We may request reasonable proof of identity where necessary to ensure personal information is not disclosed to an unauthorised person.

The right of access allows individuals to obtain a copy of their personal information and supplementary information concerning its processing.

17. Requests for Deletion

You may request deletion of your personal information where the right to erasure applies.

However, the right to deletion is not absolute. We may retain information where there is a lawful reason or obligation to do so, including where records are legitimately required for legal claims or other applicable purposes.

This means, for example, that closing a learner account does not necessarily require every transaction or legally necessary business record connected with that account to be immediately erased.

18. Direct Marketing Objections

You have the right to object to your personal information being used for direct marketing.

If you object to direct marketing, we will stop using your personal information for that purpose as required by applicable law.

You can unsubscribe through an email or contact:

info@ecdldigital.com

19. Children

ECDL Digital’s services are primarily intended for learners purchasing professional and digital-skills training.

Where our services are used by younger learners, we will take account of applicable data-protection requirements concerning children’s personal information.

We encourage a parent, guardian, school or other responsible organisation to contact us if they have concerns regarding a young learner’s personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

Our services.

Technology.

Third-party providers.

Business operations.

Data-protection requirements.

The latest version will be made available on our website.

Where appropriate, we may also notify affected users of material changes.

21. Complaints

If you have concerns about how ECDL Digital has handled your personal information, please contact us first so that we can investigate:

info@ecdldigital.com

You also have the right to raise a complaint with the UK Information Commissioner’s Office (ICO) if you are dissatisfied with how your personal information has been handled. ICO guidance specifically requires privacy information to explain the individual’s right to complain to the supervisory authority.

Information Commissioner’s Office

22. Contact Us

For privacy enquiries or to exercise your data-protection rights:

ECDL Digital

Email: info@ecdldigital.com