Privacy Policy

1. Introduction

Online Course 24 ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (onlinecourse24.com) and use our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller responsible for your personal data.

Data Controller:
Online Course 24
29B Shire Oak Rd, Headingley
Leeds LS6 2DD
United Kingdom
Email: [email protected]

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Create an account: Name, email address, password, and optional profile information
• Make a purchase: Billing information, payment card details (processed by secure third-party payment processors), and transaction history
• Contact us: Name, email address, phone number, and any information included in your message
• Complete surveys or forms: Any information you choose to provide in response to our questions
• Participate in courses: Course progress, quiz responses, assignments, and submitted work

2.2 Information Collected Automatically

When you access our website, we automatically collect certain information:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: Pages visited, time spent on pages, links clicked, referring website
• Location data: General geographic location based on IP address
• Cookies and similar technologies: As described in our Cookie Policy

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors: Transaction confirmation and payment status
• Analytics providers: Aggregated usage statistics and trends
• Social media platforms: If you choose to connect your social media accounts

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 To Provide Our Services

• Creating and managing your account
• Processing course enrollments and payments
• Delivering course content and materials
• Tracking course progress and issuing certificates
• Providing customer support

3.2 To Improve Our Services

• Analyzing usage patterns to enhance user experience
• Conducting research and development
• Testing new features and functionality
• Identifying and fixing technical issues

3.3 To Communicate With You

• Sending transactional emails (purchase confirmations, account notifications)
• Responding to your inquiries and support requests
• Sending educational content and course updates (with your consent)
• Notifying you of changes to our services or policies

3.4 For Marketing Purposes (With Your Consent)

• Sending promotional emails about new courses or features
• Displaying personalized advertisements
• Conducting surveys and requesting feedback

3.5 For Legal and Security Purposes

• Complying with legal obligations
• Protecting against fraud and abuse
• Enforcing our terms and conditions
• Protecting the rights and safety of our users

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

4.1 Contract Performance

Processing necessary to fulfill our contract with you when you purchase courses or use our services.

4.2 Legitimate Interests

Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting analytics, provided these interests are not outweighed by your rights.

4.3 Consent

Processing based on your explicit consent, such as for marketing communications or optional data collection. You may withdraw consent at any time.

4.4 Legal Obligation

Processing necessary to comply with legal requirements, such as tax and accounting obligations.

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

5.1 Service Providers

Third-party companies that provide services on our behalf:

• Payment processors: To process transactions securely
• Hosting providers: To store and deliver content
• Email service providers: To send communications
• Analytics providers: To understand website usage

These service providers are contractually bound to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information when required by law or in response to valid legal requests from authorities.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure storage of sensitive data
• Regular security assessments and updates
• Access controls and authentication requirements
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Account data: Retained while your account is active and for a reasonable period afterwards to allow reactivation
• Transaction records: Retained for at least 6 years for tax and accounting purposes
• Marketing data: Retained until you withdraw consent or object to processing
• Course progress: Retained while your account is active

After the retention period expires, we will securely delete or anonymize your data.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances, such as when it's no longer necessary for the purposes for which it was collected.

8.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain situations.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

8.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly. Contact details:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

8.9 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the UK authorities
• Transfers to countries with adequate data protection laws
• Other legally approved transfer mechanisms

11. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone: +44 077 0279 4694
• Address: 29B Shire Oak Rd, Headingley, Leeds LS6 2DD, United Kingdom