Privacy Policy

At ELEARNINGATE, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our learning management system platform.

We're committed to transparency and compliance with UK GDPR and the Data Protection Act 2018. If you have any questions about how we handle your data, please contact us at service@elearningate.com.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, use our platform, or contact us, we collect information you provide directly:

• Account Information: Name, email address, job title, company name, phone number
• Profile Information: Profile photo, bio, department, location
• Learning Data: Course progress, quiz answers, certificates earned, completion dates
• Content Uploads: Courses, materials, documents, videos you upload to the platform
• Communications: Messages sent to support, feedback, survey responses
• Payment Information: Billing address, payment method details (processed securely by our payment provider)

1.2 Information Collected Automatically

When you use our platform, we automatically collect certain information:

• Usage Data: Pages viewed, features used, time spent on platform, actions taken
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, system activity
• Cookies: Session cookies, preference cookies, analytics cookies (see Cookie Policy below)

1.3 Information from Third Parties

We may receive information from third-party services you connect to our platform (such as Single Sign-On providers like Azure AD or Google Workspace).

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Improving Services

• Deliver and maintain the ELEARNINGATE platform
• Process course registrations and track learning progress
• Generate reports and analytics for administrators
• Provide customer support and respond to inquiries
• Improve platform features and user experience
• Troubleshoot technical issues and maintain security

2.2 Communications

• Send essential platform notifications (course assignments, completion reminders)
• Provide customer support responses
• Send platform updates and new feature announcements (with opt-out)
• Share relevant educational content and training tips (with opt-out)

2.3 Legal and Security

• Comply with legal obligations and regulatory requirements
• Enforce our Terms & Conditions
• Protect against fraud, abuse, and security threats
• Respond to legal requests from authorities

2.4 Analytics and Research

• Analyse platform usage patterns and trends
• Conduct research to improve learning outcomes
• Generate aggregated, anonymised statistics

3. Legal Basis for Processing (GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services under our agreement with you
• Legitimate Interests: Improving our platform, preventing fraud, maintaining security
• Legal Obligation: Complying with laws, regulations, and legal processes
• Consent: Where you've given explicit consent (e.g., marketing communications)

4. How We Share Your Information

We do not sell your personal information. We share your data only in the following circumstances:

4.1 Within Your Organisation

Your organisation's administrators can view learner data within their account, including course progress, completion status, and quiz results.

4.2 Service Providers

We work with trusted third-party service providers who help us operate the platform:

• Cloud Infrastructure: Hosting and data storage providers
• Payment Processing: Secure payment gateways (they handle payment data directly)
• Email Services: Transactional email delivery
• Analytics Tools: Platform usage analytics and monitoring
• Customer Support: Help desk and support ticket management

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

4.4 Business Transfers

If ELEARNINGATE is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfil the purposes outlined in this policy:

• Active Accounts: Data retained for the duration of your subscription
• Cancelled Accounts: Data retained for 30 days with full access for export, then deactivated
• Deactivated Accounts: Data deleted after 90 days unless legal obligations require longer retention
• Learning Records: May be retained longer to comply with training record requirements
• Backup Systems: Data in backups automatically deleted according to retention schedules

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication options
• Infrastructure Security: Secure cloud hosting with regular security audits
• Monitoring: 24/7 security monitoring and intrusion detection
• Backups: Daily automated backups stored securely
• Staff Training: All team members trained in data protection practices
• Incident Response: Documented procedures for security incidents

While we implement robust security measures, no system is 100% secure. We encourage you to use strong passwords and keep your credentials confidential.

7. Your Privacy Rights

Under UK GDPR and data protection law, you have the following rights:

7.1 Right to Access

You can request a copy of the personal data we hold about you. We'll provide this within 30 days of your request.

7.2 Right to Rectification

You can update or correct inaccurate personal information through your account settings or by contacting us.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data, subject to certain legal exceptions (e.g., if we need to retain data for legal compliance).

7.4 Right to Restrict Processing

You can ask us to limit how we use your data in certain circumstances.

7.5 Right to Data Portability

You can request your data in a structured, machine-readable format to transfer to another service.

7.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

7.7 Right to Withdraw Consent

Where we process data based on consent, you can withdraw it at any time.

7.8 Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our platform:

8.1 Essential Cookies

Required for the platform to function properly (authentication, security, session management). These cannot be disabled.

8.2 Functional Cookies

Remember your preferences and settings (language, display options, customisations).

8.3 Analytics Cookies

Help us understand how users interact with our platform to improve it. We use privacy-focused analytics tools that anonymise data.

8.4 Managing Cookies

You can control cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality.

9. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the UK ICO
• Adequacy decisions for countries with equivalent data protection
• Appropriate technical and organisational security measures

10. Children's Privacy

The ELEARNINGATE platform is intended for business use. We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

11. Customer Responsibilities (Data Controller)

When you use ELEARNINGATE to manage learner training:

• You act as the data controller for your learners' data
• ELEARNINGATE acts as the data processor
• You are responsible for obtaining appropriate consents from learners
• You must have a lawful basis for processing learner data
• You should provide learners with information about how their data is used

We provide tools to help you comply with your data protection obligations, including data export, deletion, and access controls.

12. Data Processing Agreement (DPA)

For customers processing personal data through our platform, we offer a Data Processing Agreement that outlines our responsibilities as a data processor. Professional and Enterprise customers can request a signed DPA by contacting service@elearningate.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will:

• Post the updated policy on this page with a new "Last updated" date
• Notify you via email for material changes
• Give you at least 30 days' notice before changes take effect

We encourage you to review this policy periodically to stay informed about how we protect your data.

14. Third-Party Links and Services

Our platform may contain links to third-party websites or integrate with external services. This Privacy Policy does not cover those third parties. We recommend reviewing their privacy policies before sharing your information with them.