Bright Path Futures Learning

Bright Path Futures (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal information we handle. This policy explains how we use personal data when delivering our online courses and services.

We are a Community Interest Company providing online training and related services in the UK. We act either as:

·       A Data Controller when we collect personal data directly from learners, or

·       A Data Processor when we deliver training on behalf of an employer or other purchaser (e.g. a charity purchasing a course for volunteers) who provides us with learner details.

We are registered with the Information Commissioner’s Office (ICO) as required under the Data Protection Act 2018.

Depending on the service we may collect:

·       Name

·       Email address

·       Employer or funding organisation (if applicable)

·       Course records (progress, completion, certificates)

·       Payment details (processed securely by our payment provider – we do not store card details)

We do not collect sensitive (“special category”) data unless required for accessibility purposes, and only with your explicit consent. If you provide sensitive personal data (e.g. health or accessibility needs) we will only process this with your explicit consent and for the sole purpose of supporting your learning experience.

We use personal data to:

·       Create and manage learner accounts.

·       Deliver online courses and provide support.

·       Issue certificates of completion.

·       Communicate about courses, updates, and relevant services (with your consent where required).

·       Report anonymised statistics to the employer or funding organisation who purchased training for the course user.

We are especially mindful of the needs of vulnerable learners and ensure that any sensitive data is collected and processed with explicit consent and respect for privacy.

We do not sell or share personal data with third parties for marketing purposes.

We rely on:

·       Contract – to deliver the course or service you or your funding organisation has requested.

·       Legitimate interests – to maintain course records, improve services, and ensure platform security.

·       Consent – for optional communications, such as newsletters. For sensitive data we rely on your explicit consent. For all other data we process on the basis of contract, legitimate interests or legal obligation.

Where an employer or third party purchases a course for its staff, volunteers or other individuals:

·       We act as a Processor of the course-user data on behalf of the purchaser.

·       We may share course completion and attendance reports with the purchaser.

·       The purchaser remains responsible for providing course-users with privacy information.

We take appropriate measures to keep your information secure, including:

·       Secure servers and encrypted connections

·       Access controls so only authorised staff can see data.

·       Regular software updates and security monitoring.

How long we keep data.

·       Course records are normally kept for 2 years after completion (to allow certificate verification).

·       Financial records are kept for 6 years (as required by law).

We may delete accounts sooner if requested, unless required for legal or contractual reasons.

Under the UK GDPR you have the right to:

·       Access your personal data.

·       Correct inaccurate data.

·       Request deletion (“right to be forgotten”).

·       Restrict or object to processing in some circumstances.

·       Request transfer of your data to another provider (data portability).

Requests can be made by contacting us (see Section 10). We will respond within one month.

If a data breach occurs that poses a risk to your rights and freedoms we will notify the ICO within 72 hours and inform affected individuals where required.

If you have questions about this policy or your data please contact: admin@brightpathfutures.com

You also have the right to lodge a complaint with the Information Commissioner’s Office at https://ico.org.uk