Privacy Policy
1. Who we are
BSTraining International (“BSTraining”, “we”, “us”) operates the online training platform at bstraining.uk. We are the Data Controller for the personal data you provide when using our platform.
Contact: [email protected]
2. What personal data we collect
We collect the following categories of personal data:
- Account information — your name and email address, provided when you register.
- Coursework submissions — written assignments and files you upload as part of a course.
- Assessment results — quiz scores, grades, and feedback recorded by instructors.
- Certificates — your name and completion date, which appear on any certificate we issue.
- Usage data — pages visited, lessons completed, and timestamps. Collected automatically when you use the platform.
We do not collect payment card details directly. Any payment processing is handled by our payment provider and is governed by their privacy policy.
3. Why we collect it — legal basis
Delivering the service (contract)
When you register for an account, you enter into a contract with us to use BSTraining. We process your name, email, coursework, and assessment data because this is necessary to fulfil that contract — for example, to enrol you in courses, mark your work, and issue certificates.
Legitimate interests
We analyse usage data in aggregate to improve the platform, fix bugs, and ensure security. We believe this is in our mutual interest and does not override your rights.
Legal obligation
We retain certain records to comply with applicable law (see Section 5 on retention periods).
4. Who we share your data with
We do not sell or rent your personal data to third parties. We share data only where necessary to operate the platform:
- Cloudflare — our file storage and content delivery provider, acting as a data processor on our behalf. Files you upload, such as coursework submitted for assessment, are stored in Cloudflare R2 under a Data Processing Agreement.
- Our database hosting provider — acting as a data processor on our behalf, under a Data Processing Agreement. Account details, enrolments and assessment records are stored there.
If we are required to disclose data by law, court order, or regulatory authority, we will do so and will notify you where we are legally permitted to.
5. How long we keep your data
- Account data (name, email) — retained for 2 years after your last login. After that period your account is deleted unless you have active enrolments.
- Assessment and coursework data — retained for 7 years from the date of completion, to support verification of qualifications and meet any applicable regulatory requirements.
- Certificates — retained indefinitely so that employers can verify your achievement via our certificate verification tool.
- Usage logs — anonymised after 90 days and deleted after 12 months.
You can request deletion of your account at any time (see Section 6). Where we are legally required to keep certain records, we will explain why.
6. Your rights under UK GDPR
You have the following rights over your personal data. To exercise any of them, contact us at [email protected]. We will respond within one calendar month.
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data where there is no compelling reason for us to keep it.
- Portability — receive your data in a machine-readable format so you can transfer it elsewhere.
- Restriction — ask us to pause processing your data, for example while a complaint is investigated.
- Objection — object to processing based on legitimate interests. We will stop unless we can demonstrate compelling grounds that override your interests.
7. Cookies and tracking
We use only essential session cookies required for you to log in and navigate the platform securely. We do not use advertising cookies or share your browsing activity with ad networks.
8. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure, and we encourage you to use a strong, unique password for your account.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. For significant changes, we will notify you by email or via a notice on the platform.
10. Right to complain
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the chance to address your concern first — please contact us at [email protected].