PCOAcademyPCO ACADEMYTfL Assessment Training
File S3 — PrivacyYour data

Privacy policy

This policy explains what personal data PCO Academy collects, why, who we share it with, and the rights you have over it.

Last updated 14 September 2026

Who is responsible for your data

PCO Academy is the data controller for the personal data described here. For any privacy question or request, email pcoacademylondon@gmail.com.

What we collect

  • Account details — your name, email address, and password (stored only as a secure hash), or the basic profile from Google if you sign in with Google.
  • Learning activity — the courses you enrol on and your progress and quiz results, so we can show your account and track your preparation.
  • Payment information — handled by our payment provider. We receive a record that a payment was made, but we do not store your full card number.
  • Messages — anything you send us through the contact form or by email.
  • Technical data — basic information your browser sends (such as approximate location and device type) and essential cookies needed to keep you signed in.

How we use your data, and our legal basis

  • To provide your account and courses — this is necessary to perform our contract with you.
  • To take payment and prevent fraud — contract and our legitimate interests.
  • To reply to your enquiries — our legitimate interest in helping you.
  • To send the “dispatch” newsletter, only if you subscribe — your consent, which you can withdraw at any time.
  • To keep the service secure and meet our legal obligations.

Cookies

We use a small number of essential cookies, mainly to keep you signed in. We do not use them to build an advertising profile of you. You can block cookies in your browser, but the signed-in area may then not work.

Who we share it with

We use trusted service providers who process data on our behalf, including:

  • our hosting and database providers, to run the site and store your account;
  • our email provider, to send verification codes and any newsletter you opt into;
  • our payment provider, to take payments securely;
  • Google, if you choose to sign in with your Google account.

We do not sell your personal data to anyone.

International transfers

Some of our providers store or process data outside the UK. Where that happens, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) to protect your data.

How long we keep it

We keep your account data for as long as you have an account, and for a reasonable period afterwards to meet legal, accounting and dispute-handling needs. You can ask us to delete your account at any time from your account settings.

Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to how we use it;
  • receive a copy of your data in a portable format;
  • withdraw consent where we relied on it.

To exercise any of these, email pcoacademylondon@gmail.com. If you are unhappy with how we handle your data, you can complain to the UK’s Information Commissioner’s Office at ico.org.uk.

Security

We take reasonable technical and organisational measures to protect your data — passwords are hashed, traffic is encrypted, and access is limited. No system is perfectly secure, but we work to keep your data safe.

Children

Our service is for adults preparing for a professional licence and is not directed at anyone under 18.

Changes to this policy

We may update this policy from time to time; the “last updated” date above shows the latest version.

Contact

For anything about your privacy, email pcoacademylondon@gmail.com or use our contact page.