Privacy Notice
Last Updated: 23 August 2026
Your Privacy Matters To Us
The Compliance Classroom is committed to protecting personal information and handling it responsibly and transparently.
This Privacy Notice explains how personal information is used when you visit our website, contact us, purchase training, create an account or access training through The Compliance Classroom.
Who We Are
The Compliance Classroom provides online compliance training designed specifically for UK education settings and their staff.
For enquiries about privacy or the use of personal information, please contact:
The Compliance Classroom
Email: [email protected]
Information We May Process
We aim to collect only the personal information necessary to provide and administer our services.
For learner accounts this will normally include:
- first name;
- surname;
- work or education setting email address;
- organisation;
- courses assigned;
- course progress;
- assessment results;
- course completion information; and
- certificates issued.
We do not require learners to provide information such as their date of birth, home address, personal telephone number or other information that is not necessary to deliver the training.
Additional information may be processed where an individual purchases training directly, including information required to process an order, payment or customer account.
Where you contact us directly or through our website contact form, we may process information such as:
- your name;
- organisation, where provided;
- email address;
- the content of your enquiry; and
- any other information you choose to include in your message.
We use this information to receive, manage and respond to your enquiry.
Our website contact form is not intended to collect unnecessary or sensitive personal information. Please do not include sensitive or special category personal information unless it is necessary for your enquiry.
When you use our website, we may also process limited technical information such as your IP address, browser or device information, website activity and cookie preferences where necessary to operate, secure and understand the use of our website.
The information deliberately entered into our contact form is stored with the form submission. We do not intentionally record the user’s IP address or device information as part of the contact form submission itself.
Where optional analytics technologies are used, information is only collected or accessed in accordance with the cookie choices you make through our cookie controls.
School And Organisation Licences
Where an education setting, employer or other organisation purchases training for its staff, that organisation will normally determine which members of staff should undertake the training and provide or enter the information necessary to create learner accounts.
In these circumstances, the organisation will generally act as the data controller for the staff information it provides to us and The Compliance Classroom will process that information on its behalf for the purpose of delivering and administering the training service.
The organisation is responsible for identifying its appropriate lawful basis for providing staff information and assigning training.
Further information about how we process learner information on behalf of organisations is available in our Data Processing Agreement.
How Learner Information Is Used
Personal information may be used to:
- create and manage learner accounts;
- provide access to purchased training;
- enrol learners onto appropriate courses;
- record course progress and completion;
- administer assessments;
- generate training certificates;
- provide authorised organisation administrators with training and completion information for learners within their organisation;
- provide technical and customer support;
- maintain the security and integrity of the training platform; and
- meet applicable legal and regulatory obligations.
We do not sell learner personal information.
Contact Forms And Enquiries
When you contact The Compliance Classroom through our website contact form, by email or through another direct communication method, we will use the information you provide to receive, investigate and respond to your enquiry and, where appropriate, take steps requested by you before entering into a contract.
Information submitted through our website contact form may be stored within our website administration system as well as being sent to our business email account. This helps us manage enquiries and provides a record if an email is delayed or fails to reach the intended inbox.
Our contact form requires users to acknowledge that they have read this Privacy Notice and understand how their information will be used to respond to their enquiry.
This acknowledgement is not consent to receive marketing communications.
Submitting an enquiry does not automatically add you to a marketing mailing list.
Website Analytics And Cookies
We use cookies and similar technologies to operate and secure The Compliance Classroom, maintain user sessions, support account and shopping functionality and understand how our website is used.
We use Google Analytics to help us understand how visitors interact with our website and to improve our services. Analytics technologies requiring consent are not enabled for analytics purposes unless you choose to accept the relevant optional cookies.
If you reject optional cookies, analytics storage remains disabled. You can change or withdraw your cookie choices at any time using the cookie settings available on our website.
Further information about the technologies we use and how you can manage your choices is available in our Cookie Policy.
Marketing Communications
We may send you occasional information about The Compliance Classroom, including updates about our training, new courses, services and relevant compliance news, where you have chosen to receive these communications.
Where we rely on your consent for electronic marketing, the marketing choice is separate from purchasing training, submitting an enquiry, creating an account or accepting our contractual terms.
Where a marketing option is presented at checkout or elsewhere on our website, it is optional and should not be pre-selected.
Choosing not to receive marketing communications will not affect your ability to purchase or access training or receive essential service communications relating to your account, orders, licences or training.
Where you have chosen to receive marketing communications, you can withdraw your consent at any time by using the unsubscribe option provided in our marketing communications or by contacting us at [email protected].
We may retain a record of your marketing preferences, including where consent has been given or withdrawn, so that we can respect your choices and demonstrate how those preferences have been managed.
Service And Licence Communications
We may contact customers and authorised administrators where reasonably necessary to provide and administer our services.
These communications may include information relating to:
- orders and payments;
- account creation or security;
- learner access;
- training administration;
- technical or customer support;
- licence expiry or renewal administration;
- significant changes affecting an active service; and
- other information reasonably necessary to provide the service.
These service communications are separate from optional marketing communications and may be sent where necessary to administer our contractual relationship or provide the service requested.
Our Lawful Bases For Processing
The lawful basis we rely on depends on why we are processing personal information.
We may process personal information where:
- it is necessary to perform a contract or take steps connected with a contract, for example when an individual purchases training directly from us or asks us to take steps before entering into a contract;
- it is necessary for our legitimate interests, including operating, securing and improving our services, responding to enquiries, providing customer support and administering our business, where those interests are not overridden by individuals’ rights and interests;
- we have a legal obligation to process or retain information; or
- consent is required and has been provided, including for certain optional cookies and analytics technologies and electronic marketing communications.
Where we process learner information on behalf of an education setting, employer or other organisation, that organisation is responsible for determining the appropriate lawful basis for its processing of staff information.
Organisation Administrators
Organisations purchasing team or organisational licences may nominate an authorised training administrator.
The administrator may be able to view information relating to learners within their own organisation, including learner names, course enrolment, progress, assessment and completion information.
Administrators should only create accounts for individuals they are authorised to enrol and should only access training information for legitimate organisational purposes.
Administrators are responsible for keeping their administrator login credentials secure and should not share them with unauthorised individuals.
Further information is available in our School Administrator Privacy Notice.
Service Providers
We use carefully selected third-party service providers to operate The Compliance Classroom and deliver our services. These may include providers supporting:
- website hosting and infrastructure;
- website and learning management functionality;
- payment processing;
- email and communications;
- website security;
- customer and technical support;
- website forms and related functionality; and
- website analytics, including Google Analytics where the appropriate consent has been provided.
Where service providers process personal information on our behalf, we take appropriate steps to ensure suitable contractual and data protection arrangements are in place.
Details of relevant service providers that process personal information on our behalf are available in our Sub-Processor List.
International Data Transfers
Some of the technology and service providers we use may process information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.
Further information about relevant service providers and processing locations is available in our Sub-Processor List.
How Long We Keep Information
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected, including providing training records, responding to enquiries and meeting contractual, legal and legitimate business requirements.
When an organisational licence ends, learner information will be handled in accordance with our contractual arrangements with that organisation and applicable data protection requirements.
Contact-form and enquiry information will be retained only for as long as reasonably necessary to respond to the enquiry, manage any resulting relationship and meet legitimate business, contractual or legal requirements.
Where marketing consent is withdrawn, we may retain limited information necessary to record and respect that preference.
Further information about how long we retain learner, customer, enquiry and training information is available in our Data Retention Policy.
Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure or destruction.
Access to administrative functions and learner information is restricted according to user roles and permissions.
Access to contact-form submissions and other administrative information is restricted to authorised users who require access for legitimate business purposes.
Your Data Protection Rights
Depending on the circumstances and lawful basis for processing, individuals may have rights relating to their personal information, including rights of access, correction, erasure, restriction, objection and data portability.
Where we process learner information on behalf of an education setting, employer or other organisation, requests relating to learner information may need to be referred to that organisation as the data controller.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To raise a privacy query or exercise a data protection right, please contact us using the details above.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you have concerns about how your personal information has been handled. We would welcome the opportunity to address your concerns first.
Changes To This Privacy Notice
We may update this Privacy Notice where our services, technology, data-processing activities or legal obligations change.
The latest version will always be published on our website.