Who we are (Controller)
This platform is operated by H-26 LTD (company number 15737822) trading as H26 Training Services.
Controller contact: contact@h26.co.uk
What personal data we collect
- Identity and contact data — name, email address, and (if provided) organisation and role.
- Account data — username, authentication method, preferences, and account status.
- Learning data — course enrolments, progress, completions, certificates, quiz/assessment activity (where used).
- Communications — support requests and messages you send to us.
- Technical/log data — IP address, browser/device info, timestamps, and logs used for security and troubleshooting.
How we use your data
- To provide access to the platform, courses, and learning features.
- To create and administer accounts, enrolments, learning records and certificates.
- To respond to support requests and operational communications.
- To secure the platform, prevent misuse, and investigate incidents.
- To maintain, monitor, and improve performance and reliability.
Lawful bases for processing
We process personal data under one or more lawful bases under UK GDPR depending on context:
- Contract — where processing is necessary to provide services (for individuals or organisational customers).
- Legitimate interests — to operate and secure the platform and improve services (balanced against your rights).
- Legal obligation — where required by law.
- Consent — where you actively choose to provide it (e.g., optional communications).
Who we share data with
We do not sell personal data. We may share data with suppliers who provide essential services, such as:
- Hosting/infrastructure providers
- Email delivery providers for service notifications and support
- Security/monitoring providers where used to protect accounts and systems
Suppliers are expected to protect personal data and only use it as required to deliver services.
International transfers
If any suppliers process data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR (such as adequacy regulations or contractual safeguards).
Data retention
We keep personal data only as long as necessary for the purposes set out above. In practice, learning records may be retained for as long as your account remains active and for a reasonable period afterwards to support certificate re-issue or compliance evidence where appropriate.
Security
We use appropriate technical and organisational measures to protect personal data. Access is restricted to authorised personnel and suppliers who need it for service delivery and support.
Your rights
You may have rights including access, rectification, erasure, restriction, objection, and data portability (where applicable). Where processing is based on consent, you can withdraw consent at any time.
Complaints
If you have concerns, contact us at contact@h26.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Changes to this policy
We may update this policy from time to time. The “Last updated” date shows the most recent revision.