Privacy Policy — 360 Visualise Learn
Last updated: [DATE]
360 Visualise Ltd, [registered address], company number 07184115, is the data controller for personal data processed on learn.360v.co.uk. We are registered with the Information Commissioner's Office under registration ZA228073.
What we collect
- Account data: name, email address, GDC number, password (stored as a secure hash by our authentication provider).
- Learning records: course enrolments, lesson progress, quiz and exam attempts and scores, feedback you submit, and certificates issued to you.
- Payment data: handled by Stripe. We do not store your card details; we receive confirmation of payment and a transaction reference.
- Technical data: essential cookies for sign-in and security, and basic server logs (IP address, timestamps) for security and troubleshooting. We do not use marketing or advertising cookies.
Why we process it (lawful bases)
- Contract: providing the course you purchased or redeemed — accounts, progress, assessments, certificates.
- Legal obligation: tax and accounting records for purchases.
- Legitimate interests: platform security, preventing assessment fraud, improving course quality using aggregated feedback, and maintaining a register of issued certificates so their authenticity can be verified — which also serves your interest, as CPD certificates may need verification years later.
- Consent: any optional marketing communications, which you can withdraw at any time.
Certificate verification
Each certificate carries a unique number. Anyone with that number can confirm at our verification page that a certificate is genuine; the page shows the certificate holder's name, course, CPD hours and completion date. It is not searchable by name and shows nothing without the certificate number.
Who processes data for us
We use reputable providers under data processing agreements: Supabase (database, authentication and file storage), Stripe (payments), Resend (email delivery), Vercel (hosting), and Mux (video delivery). Some providers may process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as the UK Addendum to Standard Contractual Clauses.
How long we keep it
- Account and learning records: while your account is active and for [2 years] after, then deleted or anonymised.
- Certificate register (name, certificate number, course, dates): retained long-term so certificates remain verifiable, in line with CPD record-keeping expectations.
- Purchase records: 6 years, as required for tax purposes.
Your rights
You can request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. Contact [support email]. Note that deleting your account does not remove the certificate register entry needed to keep issued certificates verifiable, or purchase records we must keep by law. You can complain to the ICO at ico.org.uk if you are unhappy with how we handle your data.
Contact
Data protection queries: info@360v.co.uk · 360 Visualise Ltd, Octagon House. Bradford Road. Keighley. BD20 5LY