eLearning Privacy Notice

Risk Safety Services Limited

RISK SAFETY SERVICES eLEARNING
eLearning
Privacy Notice
Operated by Risk Safety Services Limited
Operator Risk Safety Services Limited (Company No. 08115646)
Registered office 125 Snargate Street, Dover, Kent, CT17 9DA
Service Risk Safety Services eLearning / LMS
Contact info@risksafetyservices.co.uk
Document control Version 1.0 | Last reviewed September 2026

1. About this Privacy Notice

This Privacy Notice explains how Risk Safety Services Limited collects and uses personal information in connection with its online learning website, learning management system (LMS), online courses, learner accounts, business customer accounts, training records and certificates.

The eLearning service allows individuals and organisations to purchase, allocate and complete online training. Depending on how the service is used, Risk Safety Services Limited may act as a data controller in its own right or as a data processor acting on the instructions of a business customer.

2. Who we are

Risk Safety Services Limited is a company registered in England and Wales under company number 08115646. Our registered office is 125 Snargate Street, Dover, Kent, CT17 9DA. Our data protection contact is John Heath and enquiries may be sent to info@risksafetyservices.co.uk.

3. Controller and processor roles

Where an individual buys a course directly from us, creates an account with us or otherwise deals directly with Risk Safety Services Limited, we will normally act as the data controller for the personal information we process for those purposes.

Where an employer or other organisation purchases training and provides learner details so that courses can be assigned, the organisation will normally be the controller for the employee or learner information it instructs us to process. Risk Safety Services Limited will normally act as processor for that processing, while remaining a controller for its own billing, account administration, security, legal compliance and business records.

4. Information we may process

name, work or personal email address, telephone number and other contact details;

employer, organisation, department, job title, site or location;

account username, role, permissions, account status and authentication information;

courses purchased, allocated, started and completed;

course progress, completion percentage, assessment answers, scores, pass/fail results and number of attempts where applicable;

training dates, certificate details, certificate number or verification/QR reference, expiry dates and refresher dates;

purchase, order, invoice and payment-related information (payment-card data is normally handled by the payment provider rather than stored by us);

support enquiries and communications;

IP address, device/browser information, login activity, audit information and security events;

marketing preferences where applicable; and

any other information a learner or business customer chooses to provide through the service.

5. How we obtain information

directly from learners when they register, purchase, complete courses or contact us;

from business customers or administrators who purchase or assign training to learners;

automatically from use of the website or LMS, such as login and technical information;

from payment, email or other service providers where necessary to complete a transaction or operate the service; and

from course activity generated as a learner progresses through training and assessments.

6. Why we use personal information

create and administer learner and business customer accounts;

process orders and provide purchased courses;

allocate training to named learners;

record course progress and assessment results;

issue, store and verify completion certificates;

allow authorised business administrators to monitor training assigned to their personnel;

send account, booking, completion, expiry, refresher and service notifications;

provide customer and technical support;

maintain security, prevent misuse and investigate incidents;

maintain appropriate audit and business records;

improve and administer the LMS; and

comply with legal, tax, accounting and regulatory obligations.

7. Lawful bases

Where we act as controller, our lawful basis will depend on the processing activity. It may include performance of a contract, compliance with a legal obligation, our legitimate interests in operating and securing the eLearning service, and consent where consent is appropriate. Where a business customer acts as controller, that customer is responsible for identifying its lawful basis for learner information it instructs us to process.

8. Employer and administrator access

Where training is purchased or managed by an employer or other organisation, authorised administrators may be able to see information about the learners they manage. This may include course allocation, progress, completion status, scores or pass/fail results where enabled, certificate details and training expiry/refresher dates. Learners should contact their employer or training administrator if they have questions about how that organisation uses their training information.

9. Certificates and verification

The LMS may issue certificates following successful completion of a course. Certificates may contain the learner name, course title, completion date, certificate number and expiry or refresher information where applicable. A certificate verification function may confirm limited certificate information to a person who has a valid certificate number or QR verification reference.

10. Sharing information and service providers

We do not sell personal information. We may use service providers for hosting, databases, file storage, email delivery, payment processing, video or course delivery, analytics, monitoring, support and other functions needed to operate the eLearning service. Appropriate data protection arrangements will be used where required.

11. International transfers

Where personal information is transferred outside the United Kingdom, we will ensure that the transfer is made in accordance with applicable UK data protection law and that an appropriate transfer mechanism or safeguard is used where required.

12. Retention

We keep personal information only for as long as reasonably necessary for the relevant purpose. Learner and certificate records may be retained for an appropriate period to evidence training completion and certificate validity. Business customers may determine retention periods for learner information where we act as their processor. Account, billing, audit and legal records may be retained for longer where necessary for contractual, tax, accounting, security or claims purposes.

13. Security

We use appropriate technical and organisational measures designed to protect personal information. Users and business administrators are also responsible for maintaining secure credentials and appropriate access permissions.

14. Individual rights

access personal information;

ask for inaccurate information to be corrected;

ask for erasure in applicable circumstances;

ask for processing to be restricted;

object to certain processing;

receive certain information in a portable format; and

raise concerns about certain automated decision-making where applicable.

Where learner information was supplied by an employer or other organisation acting as controller, the learner should normally contact that organisation first. We will assist the controller where required.

15. Cookies and similar technologies

The eLearning website and LMS may use cookies and similar technologies for login, security, shopping basket/checkout, user preferences, video/course functionality and analytics. Further information is provided in the eLearning Cookie Policy and through the applicable cookie settings controls.

16. Complaints

You can contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO) where applicable. Information is available at www.ico.org.uk.

17. Changes to this notice

We may update this notice to reflect changes to the eLearning service, our suppliers, the law or our processing activities. Material changes will be communicated where appropriate.

Contact

Questions about this document can be sent to:

John Heath

Risk Safety Services Limited

125 Snargate Street

Dover

Kent

CT17 9DA

Telephone: 01304 793058

Email: info@risksafetyservices.co.uk