Who is responsible for your information
The controller of your personal information is E-LEARNING MASTERY GATEWAY LTD (“we”, “us”), a company registered in England and Wales. Our full company details are in section 1 of the Terms of Sale. You can write to us at hello@e-learningmasterygateway.co.uk.
We handle personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect, why, and for how long
The table covers everything we collect. If a row does not apply to you, because you never used the chat for example, we hold nothing under it.
| Information | What it includes | Why, and our lawful basis | How long we keep it |
|---|---|---|---|
| Checkout details | First name, last name, email address, company (if you enter one), country, address, postcode, town or city, and region (if you enter one). | To take your payment, send your access details, and provide your order page and support. Lawful basis: performing our contract with you. | With your order record, below. |
| Order record | The courses you ordered, the total, whether payment was completed, your order reference and the time of the order. Not your card details. | To run your order page, deliver your access, deal with cancellations and keep accounting records. Lawful bases: contract, and legal obligation for our financial records. | Six years from the order, because the law requires us to keep records of sales. |
| Chat conversations | Your messages, any files you attach, your email address if you give one, the page you were on when you wrote, and a random identifier that ties the conversation to your device. | To answer your questions and reply if you leave the page. Lawful bases: legitimate interests in answering people who ask us for help, or contract where you are already a customer. | 365 days after the last message in the conversation, then it is deleted automatically. |
| Emails to us | Your email address, your message and our replies. | To deal with what you have asked. Lawful bases: legitimate interests, or contract. | Up to 24 months after the last message, unless it relates to an order, in which case the order record period applies. |
| Visit log | For each request to the website: the time, your IP address, the country it appears to come from, the page requested, the page you came from, and your browser and device type. | To keep the website secure, to spot fraud and abuse, and to find faults. Lawful basis: legitimate interests in protecting the website and our customers. It is not used for marketing or to profile you. | 90 days, then it is deleted automatically. |
| Cart and checkout session | Which courses are in your cart and how far you have got through checkout, tied to your browser by a session cookie. | So the cart and checkout work. Lawful basis: legitimate interests in running the shop you are using, and it is strictly necessary. | Until the session ends. |
| Remembered details | The checkout details above, stored in a cookie on your own device. | So you do not have to retype them next time. Only if you tick “remember my details” at checkout. Lawful basis: your consent. | 180 days on your device. Submitting checkout with the box unticked removes it, and you can clear it in your browser at any time. |
Card details are different. You type them into the secure payment page of our payment service provider, which handles them itself. We receive only whether the payment succeeded.
You are not required to give us any of this, but we cannot sell you a course or reply to you without the details that go with each step.
What we do not do
- We do not run advertising, and we do not use analytics or tracking scripts on this website.
- We do not sell your personal information or share it for others to market to you.
- We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not profile you.
Transfers outside the UK
Some of the organisations above, or the servers they use, are outside the United Kingdom, including in the European Economic Area and the United States. When your information goes abroad, we make sure it is protected: the transfer is either to a country, or to a certified organisation in a country, that the UK has recognised as providing adequate protection, or it is made under safeguards approved by the ICO, such as the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses.
Keeping it safe
The website uses an encrypted connection (HTTPS). Order records, chat conversations and the visit log are kept in a place on the server that cannot be opened from the web, and only the people who need them to run the shop can read them. No system is perfectly secure, so if something goes wrong that puts your rights at risk, we will tell you and, where required, the Information Commissioner’s Office.
When we delete it
The periods in the table are the longest we keep each kind of information. When one ends, we delete the information or remove anything that could identify you. If you ask us to delete something sooner, we will, unless the law requires us to keep it.
Your rights
Under UK data protection law you may ask us to:
- tell you whether we hold information about you, and give you a copy;
- correct information that is wrong or incomplete;
- delete your information, where we have no good reason to keep it;
- restrict how we use it while you question its accuracy or our use of it;
- give you the information you provided in a portable format, where we hold it by consent or contract;
- stop using it for our legitimate interests, which includes the visit log.
Where we rely on your consent, which is only for the “remember my details” cookie, you can withdraw it at any time by clearing the cookie in your browser or by submitting checkout with the box unticked. Doing so does not affect anything we did before.
To use any of these rights, email hello@e-learningmasterygateway.co.uk. We may ask you to confirm who you are first. We reply within one month, and there is no charge unless a request is clearly unfounded or excessive.
Complaining to the regulator
We would like the chance to put things right first, so please contact us. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
Children
Orders must be placed by someone aged 18 or over, and we do not knowingly collect information from children. If you think a child has sent us personal information, tell us and we will delete it.
Changes to this policy
If we change how we use personal information, we will update this page and its date. If a change matters to you, such as a new kind of recipient, we will say so clearly here.