1. Who we are
The data controller for this platform is Even Better Training Ltd, trading as Even Better Training, based in United Kingdom. Contact: hello@evenbettertraining.co.uk. Support: support@evenbettertraining.co.uk.
Confirm the live controller / processor relationship with your solicitor before launch. Website company particulars are listed on our Company information page.
If we appoint a Data Protection Officer or register with the ICO as a fee payer, those details will be added here. ICO registration number: to be confirmed.
2. Personal data we collect
- Identity and contact data — name, email address, organisation (if provided), phone (if provided).
- Account data — login identifiers, role (learner, trainer, admin, employer user), preferences.
- Learning data — enrolments, progress, quiz attempts, completion status, certificate records.
- Employer / corporate data — organisation name, invited employee accounts, assignment and completion reports (for Employer Portal users).
- Payment data — billing details and transaction references processed by Stripe (we do not store full card numbers).
- Support messages — emails or form submissions you send us.
- Technical data — IP address, device/browser type, security logs, cookie preference records, and similar diagnostics needed to run the service securely.
We do not intentionally collect special category data. Course content may discuss care or safeguarding topics, but learners should not upload sensitive health or safeguarding case details into free-text fields unless we expressly request them for a defined purpose.
3. Why we use personal data (purposes & lawful bases)
- Provide accounts, courses, progress tracking, and certificates — contract (UK GDPR Art. 6(1)(b)).
- Process payments and subscriptions — contract / legal obligation for tax and accounting records.
- Secure the platform, prevent abuse, and debug faults — legitimate interests (Art. 6(1)(f)).
- Respond to support requests — contract or legitimate interests.
- Send service messages (password resets, enrolment notices) — contract / legitimate interests.
- Optional marketing emails — consent (Art. 6(1)(a)); you can withdraw anytime.
- Analytics cookies / similar technologies (if enabled) — consent under PECR; see Cookie policy.
- Employer reporting for purchased corporate seats — contract with the organisation customer.
4. Who we share data with
We use carefully selected processors to operate the platform, which may include:
- Hosting and application infrastructure (for example Vercel or equivalent).
- Database, authentication, and file storage (Supabase / PostgreSQL).
- Payment processing (Stripe).
- Email delivery (for example Resend) for transactional messages.
- Video delivery (for example Mux) for enrolled learning content, when enabled.
We may also share limited data with your employer organisation if you learn under a corporate licence, or if required by law (for example a court order). We do not sell personal data.
5. International transfers
Some providers may process data outside the UK. Where that happens we will use appropriate safeguards (such as the UK International Data Transfer Agreement / Addendum or adequacy regulations) as required by UK GDPR. Confirm live subprocessors and transfer tools before production launch.
6. Retention
- Account and learning records — kept while your account is active and for a reasonable period afterwards so you (or your employer) can evidence training history, unless earlier deletion is required or agreed.
- Payment and invoice records — typically retained for up to 6 years for UK tax/accounting purposes.
- Support emails — retained as needed to resolve queries and improve service, then deleted or anonymised.
- Security logs — retained for a limited period for integrity and abuse prevention.
7. Your rights
Under UK GDPR you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data in certain circumstances
- Restrict or object to certain processing
- Data portability for data you provided to us
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise rights, email support@evenbettertraining.co.uk. We may need to verify your identity. We aim to respond within one month.
8. Children
The platform is aimed at adult learners and workforce training (typically 18+). We do not knowingly offer accounts directly to children. If you believe a child has provided personal data, contact support@evenbettertraining.co.uk so we can delete it.
9. Cookies
See our Cookie policy for details of essential and optional cookies and how to change preferences.
10. Changes
We may update this notice. Material changes will be highlighted on this page (and, where appropriate, notified in-product or by email). The “Last updated” date shows the latest revision.
Seek legal review: This page is UK-oriented platform copy for Even Better Training Ltd. Have a qualified UK solicitor (and, for privacy, a data-protection adviser) review and approve all legal, cookie, checkout, and certificate wording before production launch or paid enrolments.