1. Introduction
Learn for Care is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.
This Privacy Policy explains how Learn for Care ("Learn for Care", "we", "us" or "our") collects, uses, stores and shares personal information when you:
- visit our website at learnforcare.co.uk;
- create or use a Learn for Care account;
- purchase or access a course or training bundle;
- complete online training or assessments;
- receive or verify a certificate;
- use an individual, company, employer or manager account;
- contact our customer support team;
- make a business or bulk-training enquiry;
- communicate with us by telephone, email or through our website; or
- otherwise use our services.
We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 ("PECR"), as amended.
This Privacy Policy should be read together with our Terms and Conditions and Cookie Policy.
2. Who We Are
Learn for Care Ltd ("Learn for Care", "we", "us" or "our") is a company registered in England and Wales under company number 15486535.
We provide online learning and professional development courses, including health and social care, childcare, education and related training.
For the purposes of applicable UK data protection law, Learn for Care Ltd is the data controller responsible for personal information collected through our website and services, except where we act solely on the documented instructions of another organisation.
Registered Office and Contact Address
Learn for Care Ltd
Bartle House
9 Oxford Court
Manchester
M2 3WQ
United Kingdom
Email: support@learnforcare.co.uk
Telephone: +44 (0)20 3005 1290
Where an employer, care provider, local authority, educational organisation or another organisation purchases or administers training for its workforce, that organisation may also be responsible for certain personal information relating to its learners.
3. Personal Information We Collect
The information we collect depends on how you interact with Learn for Care.
3.1 Identity and contact information
This may include:
- full name;
- email address;
- telephone number;
- postal or billing address;
- employer or organisation name;
- job title or position, where applicable; and
- other contact details that you provide to us.
3.2 Account information
When you create an account, we may collect:
- username;
- email address;
- account type;
- account preferences;
- login information;
- encrypted or securely stored authentication credentials;
- password reset information;
- account creation and last login information; and
- records relating to account access and security.
You are responsible for keeping your login details confidential.
3.3 Course and learning information
When you use Learn for Care for training, we may process information including:
- courses or bundles purchased;
- courses assigned to you;
- course enrolment dates;
- learning progress;
- modules completed;
- assessment attempts;
- answers submitted;
- assessment scores;
- pass or completion status;
- course completion dates;
- certificates issued;
- certificate numbers;
- certificate verification information; and
- training history associated with your Learn for Care account.
We maintain these records so that learners and, where applicable, authorised employers or managers can manage training and demonstrate course completion.
3.4 Company and employer account information
Where training is purchased through a company or organisational account, we may collect:
- company or organisation name;
- registered or business address;
- billing address;
- contact person's details;
- manager or administrator details;
- purchase order information;
- invoice details;
- learner names and email addresses;
- courses assigned to learners;
- learner progress and completion information; and
- certificates and training records.
Information may be provided directly by the learner or by their employer, manager or another authorised representative.
3.5 Purchase, billing and transaction information
Where you purchase a course or service, we may process:
- products or courses purchased;
- order number;
- transaction date;
- transaction amount;
- billing information;
- payment status;
- invoice information;
- refund or adjustment information, where applicable;
- purchase order details; and
- identifiers supplied by our payment provider.
Payments may be processed through third-party payment providers. Where a payment provider collects your card details directly, Learn for Care does not need to receive or store your complete payment card information.
The relevant payment provider may process your information under its own privacy policy.
3.6 Communications and customer service information
If you contact us, we may collect:
- your name and contact information;
- the contents of emails or messages;
- telephone enquiry information;
- support requests;
- complaints;
- feedback;
- correspondence concerning your account, course, payment or certificate; and
- information you provide when resolving an enquiry.
3.7 Website and technical information
When you visit our website or use our online platform, information may be collected automatically, including:
- IP address;
- browser type and version;
- device type;
- operating system;
- approximate location derived from technical information;
- pages viewed;
- date and time of visits;
- referral source;
- website interactions;
- login information;
- session information;
- error and diagnostic information;
- security logs; and
- cookie and similar technology information.
More information about our use of cookies is available in our Cookie Policy.
3.8 Marketing preferences
Where applicable, we may record:
- whether you have agreed to receive marketing;
- your marketing preferences;
- when and how consent was provided;
- when you unsubscribed or objected to marketing; and
- suppression information required to ensure that we respect your preferences.
3.9 Information you voluntarily provide
You may provide additional information when you communicate with us, submit a form, provide feedback or otherwise interact with Learn for Care.
Please avoid providing health information or other sensitive personal information unless it is necessary for us to deal with your request.
4. How We Collect Your Personal Information
We may collect personal information:
Directly from you
For example, when you:
- register an account;
- purchase a course;
- complete a checkout form;
- take an assessment;
- contact us;
- complete a website form;
- subscribe to communications; or
- otherwise provide information to us.
From your employer or another organisation
For example, your employer, manager, training coordinator, local authority, care organisation or another organisation may create an account for you or provide your name and email address so that training can be assigned.
Automatically
Certain technical information is collected when you browse our website or use our learning platform through cookies, server logs and similar technologies.
From service providers
We may receive information such as transaction confirmation, payment status, security information or technical information from organisations that help us provide our services.
5. Why We Use Your Information and Our Lawful Bases
UK data protection law requires us to have a lawful basis for processing personal information.
The basis we rely on depends on why we are using the information.
Providing your account and training services
We process information to:
- create and maintain your account;
- provide access to purchased or assigned courses;
- record your learning progress;
- administer assessments;
- issue certificates;
- maintain training records; and
- provide the services you or your organisation have requested.
Lawful basis: Performance of a contract or taking steps at your request before entering into a contract.
Where your employer has purchased the training, we may also rely on our legitimate interests in providing and administering the contracted training service.
Processing purchases and payments
We use information to:
- process orders;
- confirm payments;
- produce invoices and receipts;
- maintain transaction records; and
- deal with refunds, disputes or payment enquiries.
Lawful basis: Performance of a contract and compliance with our legal obligations relating to accounting, tax and financial record keeping.
Providing customer support
We use information to answer enquiries, resolve technical issues, deal with complaints and assist with accounts, courses, purchases and certificates.
Lawful basis: Performance of a contract and our legitimate interests in operating our services and providing customer support.
Employer and company training administration
Where an organisation purchases training for learners, we may process information to:
- create learner accounts;
- allocate courses;
- allow authorised managers to administer training;
- monitor training progress;
- maintain training records;
- provide completion information; and
- make certificates available to authorised users.
Lawful basis: Performance of our contract with the organisation and our legitimate interests in providing and administering business training services.
Certificate generation and verification
We process information to issue certificates and maintain records allowing certificates to be authenticated.
Our website may enable a person with the required verification details, such as a learner's full name and certificate number, to check whether a certificate is valid.
Lawful basis: Performance of a contract and our legitimate interests in protecting the integrity and authenticity of Learn for Care certificates.
Security and fraud prevention
We may use personal information to:
- protect user accounts;
- prevent unauthorised access;
- investigate suspected fraud or misuse;
- maintain website and platform security;
- identify technical vulnerabilities; and
- establish, exercise or defend legal claims.
Lawful basis: Our legitimate interests in protecting Learn for Care, our systems and our users and, where relevant, compliance with legal obligations.
Website operation and improvement
We may analyse how our website and learning platform are used in order to:
- maintain performance;
- diagnose technical problems;
- improve functionality;
- understand how our services are used; and
- develop our courses and online services.
Lawful basis: Our legitimate interests where the processing is necessary and proportionate.
Where optional cookies or similar technologies are involved, we obtain consent where required.
Legal and regulatory compliance
We may use or retain personal information where necessary to:
- comply with applicable laws;
- respond to lawful requests from public authorities;
- maintain financial and business records;
- respond to regulatory enquiries; or
- establish, exercise or defend legal rights.
Lawful basis: Compliance with a legal obligation and, where appropriate, our legitimate interests.
Marketing
We may contact you about Learn for Care courses, bundles, services or offers where permitted by law.
For individuals, we will obtain consent where required by PECR, unless an applicable legal exception permits us to contact an existing customer about similar products or services.
You can opt out of marketing communications at any time by using the unsubscribe option provided in an email or contacting us at support@learnforcare.co.uk .
Stopping marketing communications will not stop essential service communications relating to your account, purchases, courses, certificates or other services.
6. Legitimate Interests
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and balance them against your rights and reasonable expectations.
Our legitimate interests may include:
- operating and improving Learn for Care;
- delivering and administering training;
- supporting learners and business customers;
- maintaining accurate training and certification records;
- verifying certificates;
- preventing fraud and misuse;
- maintaining information and system security;
- handling enquiries and complaints;
- managing our business;
- maintaining appropriate business records; and
- establishing, exercising or defending legal rights.
You may have the right to object where we rely on legitimate interests. See section 14.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function properly, including cookies used for areas such as:
- account login;
- authentication;
- website security;
- shopping baskets;
- session management; and
- remembering essential user choices.
We may also use optional cookies for purposes such as analytics, functionality or marketing.
Where consent is legally required, optional cookies should not be placed on your device until you have provided your consent.
You can change or withdraw your cookie preferences through the cookie controls available on our website, where provided.
Further information, including the types and purposes of cookies used, is available in our Cookie Policy.
8. Marketing Communications
We may offer you the option to receive information by email about Learn for Care courses, training bundles, services, offers and relevant updates.
Where consent is required, we will only send these marketing communications where you have actively chosen to receive them, for example by selecting an unticked marketing consent box when creating an account or making a purchase.
Providing marketing consent is optional and is not a condition of creating an account, purchasing a course or accessing our services.
Where permitted by applicable law, we may also contact existing customers about our own similar products or services where the requirements of the applicable "soft opt-in" are satisfied.
You can withdraw your consent or opt out of marketing at any time by:
- selecting the unsubscribe link included in our marketing emails; or
- contacting us at support@learnforcare.co.uk .
Withdrawing consent or opting out of marketing will not affect essential service communications relating to your account, purchases, assigned courses, assessments, certificates, invoices or customer support.
We may retain limited information on a suppression list after you unsubscribe so that we can ensure your marketing preference continues to be respected.
9. Employer, Company and Manager Accounts
Learn for Care allows organisations to purchase training and assign courses to employees, workers or other learners.
Where an organisation provides us with a learner's personal information, it is responsible for ensuring that it has an appropriate lawful basis to provide that information to us and, where required, that the learner has been given appropriate privacy information.
Depending on the particular arrangement and processing activity:
- Learn for Care may act as a data controller for information needed to operate learner accounts, provide courses, administer assessments, maintain training records and issue certificates;
- the employer or organisation may act as a separate data controller for its workforce and training records; or
- Learn for Care may act as a data processor for particular information where we process it solely on the organisation's documented instructions.
Authorised company or manager account holders may be able to see information relating to learners under their organisation, such as:
- assigned courses;
- course progress;
- completion status;
- assessment or training status; and
- certificates.
Learners should contact their employer or organisation if they have questions about how that organisation separately uses their training information.
10. Who We Share Personal Information With
We do not sell your personal information.
We may share personal information where necessary with trusted third parties that help us operate Learn for Care, including:
- website hosting and cloud infrastructure providers;
- learning management and technology service providers;
- payment processing providers;
- email and communications providers;
- IT support and cybersecurity providers;
- analytics providers, where permitted;
- accounting and professional advisers;
- customer support providers;
- organisations involved in providing contracted services to us;
- your employer, manager or training administrator where they arranged or manage your training; and
- regulators, law enforcement bodies, courts or public authorities where required by law.
Service providers that process personal information on our behalf are required to process that information in accordance with our instructions and appropriate data protection requirements.
We may also disclose information where reasonably necessary in connection with a business restructuring, merger, acquisition or sale, subject to appropriate confidentiality and data protection safeguards.
11. Certificate Verification
Learn for Care provides a certificate verification facility to help employers and other authorised parties confirm the authenticity of certificates issued through our platform.
A person seeking verification may be required to provide information such as the learner's full name and certificate number.
Where the correct verification information is supplied, limited information necessary to confirm the validity of the certificate may be displayed.
Learners should therefore treat their certificate number and certificate documentation appropriately and only share them with people or organisations where verification is required.
We maintain certification records for legitimate training, record-keeping, fraud-prevention and verification purposes.
12. International Transfers
Some organisations that provide technology, cloud, communication, analytics or other services to us may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable UK data protection requirements.
Depending on the destination and circumstances, safeguards may include:
- UK adequacy regulations;
- the UK International Data Transfer Agreement;
- the UK Addendum to approved contractual clauses;
- other approved contractual safeguards; or
- another lawful transfer mechanism available under UK data protection law.
Where required, we also assess whether appropriate protection is available for personal information following a transfer.
You can contact us if you would like further information about safeguards applying to relevant international transfers.
13. How Long We Keep Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, contractual and reporting requirements.
Retention periods vary according to the type of information and the reason we hold it.
For example:
- Account information may be retained while your account is active and for an appropriate period afterwards.
- Course and learning records may be retained after course completion so that we can maintain an appropriate training history and deal with subsequent enquiries.
- Certificate and course completion records may be retained for a longer period where necessary to support certificate verification and maintain the integrity of training records.
- Transaction, invoice and accounting records may normally be retained for up to six years or for another period required by applicable accounting, tax or legal requirements.
- Support and complaint records are retained for an appropriate period depending on the nature of the enquiry and any legal or contractual requirements.
- Marketing information is retained while relevant to our marketing activities. Where you opt out, limited suppression information may be retained to ensure that your preference continues to be respected.
- Technical and security logs are retained for periods appropriate to security, fraud prevention and system management.
When determining an appropriate retention period, we consider:
- the amount and nature of the information;
- why we collected it;
- whether we still need it;
- contractual requirements;
- legal and regulatory obligations;
- certificate and training verification requirements;
- the risk associated with retaining the information; and
- whether the relevant purpose can be achieved in another way.
When information is no longer required, we will delete, anonymise or securely dispose of it as appropriate.
14. Your Data Protection Rights
Depending on the circumstances and the lawful basis on which we process your information, UK data protection law gives you a number of rights.
Right of access
You can ask us whether we process your personal information and request a copy of the personal information we hold about you.
Right to rectification
You can ask us to correct inaccurate personal information or complete information that is incomplete.
Right to erasure
In certain circumstances, you can ask us to delete your personal information.
This right is not absolute. For example, we may need to retain information to comply with legal obligations, maintain appropriate transaction records, establish or defend legal claims, or maintain legitimate certificate and training records.
Right to restriction
You may have the right to ask us to restrict how your personal information is used in certain circumstances.
Right to data portability
Where applicable, you may have the right to receive personal information that you provided to us in a structured, commonly used and machine-readable format and ask for it to be transferred to another organisation.
Right to object
You have the right to object to certain processing of your personal information where we rely on legitimate interests.
We will consider your objection and stop processing unless we have compelling legitimate grounds to continue or the processing is needed to establish, exercise or defend legal claims.
Right to object to direct marketing
You have the right to object to the use of your personal information for direct marketing at any time.
If you object to direct marketing, we will stop using your information for that purpose.
Right to withdraw consent
Where we rely on consent, you can withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
Rights relating to automated decision-making
You may have rights relating to decisions made solely by automated means that produce legal or similarly significant effects.
Our learning platform may automatically mark certain course assessments or calculate results based on answers submitted. This is part of delivering the training service and does not ordinarily amount to automated decision-making producing legal or similarly significant effects under UK data protection law.
15. How to Exercise Your Rights
To exercise a data protection right, contact us at:
Email: support@learnforcare.co.uk
Please make it clear that your request relates to your personal information.
We may ask you for information reasonably necessary to verify your identity and protect personal information from unauthorised disclosure.
We normally respond to valid data protection requests within one month, subject to any extension permitted by law for complex or multiple requests.
You will not normally have to pay a fee to exercise your rights. However, the law permits a reasonable fee or other action in limited circumstances, such as certain manifestly unfounded or excessive requests.
16. Information Security
We take appropriate technical and organisational measures designed to protect personal information from:
- unauthorised access;
- accidental loss;
- misuse;
- alteration;
- disclosure; or
- destruction.
Our security arrangements may include, as appropriate:
- access controls;
- authentication measures;
- secure hosting;
- encryption in transit and/or at rest where appropriate;
- system monitoring;
- backups;
- vulnerability management;
- restrictions on staff access; and
- security procedures for service providers.
Access to personal information is limited to people and organisations that need it for legitimate business purposes.
Although we take reasonable measures to protect information, no internet-based service or electronic storage system can be guaranteed to be completely secure.
If you believe that your Learn for Care account or personal information has been compromised, please contact us promptly.
17. Special Category and Sensitive Information
Learn for Care does not ordinarily require learners to provide health information or other special category personal information merely to purchase or complete an online course.
Please do not provide sensitive information through general enquiry forms or support communications unless it is necessary.
If we need to process special category personal information, we will only do so where we have an appropriate lawful basis and an additional condition for processing as required by data protection law.
18. Links to Third-Party Websites
Our website may contain links to third-party websites, resources or services.
Those third parties may collect and process personal information independently from Learn for Care and will have their own privacy policies.
We are not responsible for the privacy practices of third-party websites. We recommend reviewing the relevant privacy information before providing personal information to another organisation.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our services;
- changes to how we process personal information;
- new technologies or service providers;
- changes in legal or regulatory requirements; or
- improvements to our privacy practices.
The latest version will be published on this page and the "Last updated" date will be amended.
Where a change materially affects how we use personal information, we will take appropriate steps to bring the change to the attention of affected users where required.
20. Complaints
If you have concerns about how Learn for Care has handled your personal information, we encourage you to contact us first so that we can investigate your concern.
Email: support@learnforcare.co.uk
Telephone: +44 (0)20 3005 1290
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Information about making a complaint is available from the ICO at ico.org.uk .
You are not required to contact us before raising a concern with the ICO.
21. Contact Us
If you have any questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact:
Learn for Care
Bartle House
9 Oxford Court
Manchester
M2 3WQ
United Kingdom
Email: support@learnforcare.co.uk
Telephone: +44 (0)20 3005 1290