Privacy Policy

We collect information you provide directly to us, information we collect automatically, and information from third parties.

Information You Provide

• Account registration details: name, email address, password, and profile photo.
• Professional or educational information: job title, department, organisation name.
• Content you create or submit: course progress, assessment responses, and messages.
• Payment information (processed securely by our payment provider — we do not store card details).
• Communications with our support team.

Information Collected Automatically

• Device information: device type, operating system, unique device identifiers.
• Log data: IP address, browser type, pages visited, time and date of your visit.
• Usage data: features accessed, courses viewed, time spent in the app.
• Cookies and similar tracking technologies (see Section 5).

We use the information we collect to:

• Create and maintain your account and provide the Service.
• Personalise your learning experience and recommend relevant content.
• Process transactions and send related information (receipts, invoices).
• Send administrative messages, updates, and security alerts.
• Send marketing communications where you have consented.
• Monitor and analyse usage trends to improve the Service.
• Detect, investigate, and prevent fraudulent or illegal activities.
• Comply with legal obligations.

We do not sell your personal data. We may share your information in the following circumstances:

• With your employer or organisation if your account was created through an enterprise plan.
• With service providers who perform services on our behalf (hosting, analytics, email delivery, payment processing).
• If required by law, regulation, legal process, or governmental request.
• In connection with a merger, acquisition, or sale of assets (you will be notified of any change).
• With your consent or at your direction.

Your data is stored on secure servers. We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security audits to protect your personal information from unauthorised access, alteration, disclosure, or destruction.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. If you believe your account has been compromised, please contact us immediately at info@consultancyoutfit.co.uk.

Our Service may integrate with or use the following categories of third-party services:

• Analytics providers (e.g. Google Analytics) to help us understand usage patterns.
• Cloud infrastructure providers for hosting and storage.
• Payment processors to handle transactions securely.
• Communication platforms for in-app messaging and notifications.
• Authentication services for single sign-on (SSO).

These third parties have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of third-party services.

Our Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete such information.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a machine-readable copy of your data.
• Objection: Object to processing of your data for direct marketing purposes.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at info@consultancyoutfit.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required for legal, tax, or regulatory purposes.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Where required by law, we will also notify you via email or an in-app notification. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: