1Who we are

Crowd Risk Analysis Ltd ('we', 'us', 'our') is the data controller for personal data collected via gksed.com. For all data protection enquiries contact us at:

• Email: support@gksed.com
• Post: Orchid House, 26 Morewood Drive, Burton-in-Kendal, Cumbria, LA6 1NE

2What data we collect and why

2.1  Account registration

• Full name
• Email address
• Date of birth (where required to confirm certification eligibility)
• Password (stored encrypted; we cannot access your plain-text password)

Lawful basis: Contract (Article 6(1)(b) UK GDPR): necessary to create and manage your account.

2.2  Course enrolment and activity

• Course progress, completion status, and assessment scores
• Certificate records
• Login timestamps and access logs (retained by Moodle)

Lawful basis: Contract and Legitimate Interests (Article 6(1)(b) and (f) UK GDPR).

2.3  Payment information

• Payment is made by BACS or international bank transfer, or by purchase order. We do not accept card payments.
• We retain a record of your transaction (amount, date, course purchased) for accounting and legal compliance.

Lawful basis: Contract and Legal Obligation (Article 6(1)(b) and (c) UK GDPR).

2.4  Communications

• Messages sent to us via email or contact forms
• Where you have opted in: promotional emails about new courses, workshops, or updates

Lawful basis: Legitimate Interests or Consent (Article 6(1)(f) or (a) UK GDPR) depending on context.

3Cookies and tracking

gksed.com uses only essential session cookies required for the Moodle platform to function. We do not use third-party analytics, advertising trackers, or social media pixels.

• Session cookies: temporary, deleted when you close your browser
• Moodle functional cookies: required for login, course navigation, and progress tracking

You may disable cookies in your browser settings, though this may affect platform functionality.

4Who we share your data with

We do not sell your personal data. We may share it with:

• Our hosting provider: for secure storage of platform data
• Audiebant (GBR) Limited: as our data processor, for platform maintenance, customer support and development
• Crowd Risk Analysis Ltd staff: on a need-to-know basis for support and administration
• Regulatory authorities: where required by law (e.g. HMRC, ICO)

We do not share your data with third parties for marketing purposes.

5International transfers

Where data is transferred outside the UK (for example, to our hosting provider), we ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the ICO or reliance on an adequacy decision.

6How long we keep your data

• Account data: retained for the duration of your account plus 3 years after closure
• Course records and certificates: retained for 7 years
• Payment records: retained for 7 years in line with HMRC requirements
• Marketing communications: until you withdraw consent

7Your rights under UK GDPR

• Right of access: request a copy of the data we hold about you
• Right to rectification: ask us to correct inaccurate or incomplete data
• Right to erasure: request deletion of your data in certain circumstances
• Right to restrict processing: ask us to pause processing of your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Rights related to automated decision-making: we do not use solely automated decision-making that produces legal or similarly significant effects

To exercise any of these rights, contact us at support@gksed.com with the subject line 'Privacy Request'. We will respond within one calendar month.

8Data breaches

In the event of a personal data breach posing a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay where the risk is high.

9Complaints

You have the right to lodge a complaint with the Information Commissioner's Office:

• Website: ico.org.uk
• Phone: 0303 123 1113

10Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via a notice on the platform.