Privacy Policy

1. Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Create an account on our platform
• Enroll in a course or learning programme
• Subscribe to our newsletter
• Contact us through our contact form
• Participate in surveys, assessments, or certification exams
• Communicate with instructors or support staff

This information may include:

• Full name and professional title
• Email address and phone number
• Billing information (processed securely by our payment providers)
• Professional details and qualifications
• Course progress and assessment results

Automatically Collected Information

When you access our website, we automatically collect certain technical information, including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Course progress and completion data
• Cookies and similar tracking technologies

2. How We Use Your Information

Under UK GDPR, we process your personal data on the following legal bases:

Contract Performance

• To provide and maintain our educational services
• To process course enrollments and payments
• To track your learning progress and issue certificates
• To provide access to course materials

Legitimate Interests

• To improve our platform and user experience
• To analyse website usage and performance
• To send relevant course recommendations
• To prevent fraud and maintain security

Legal Obligations

• To comply with UK tax and accounting requirements
• To respond to lawful requests from authorities
• To maintain records as required by law

Consent

• To send marketing communications (where you have opted in)
• To process special category data (where applicable)

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

With Instructors

Course instructors can view enrolled students' names and learning progress to provide effective teaching and support.

Service Providers

We engage trusted third-party service providers who assist in operating our platform, including:

• Payment processors (e.g., Stripe, PayPal)
• Cloud hosting and storage providers
• Email communication services
• Analytics and performance monitoring tools

Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or to protect our legal rights.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

4. Data Security

We implement appropriate technical and organisational security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure server infrastructure with regular updates
• Role-based access controls and authentication
• Regular security assessments and penetration testing
• Staff training on data protection obligations
• Incident response procedures

5. Data Retention

We retain your personal information only for as long as necessary:

• Account data: Retained while your account is active, plus 6 years for legal compliance
• Course progress: Retained while your account is active
• Payment records: Retained for 6 years for UK tax purposes
• Marketing data: Retained until you withdraw consent

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience:

Essential Cookies

• Authentication and session management
• Security and fraud prevention

Analytical Cookies

• Website traffic analysis
• Usage pattern monitoring
• Performance optimisation

Preference Cookies

• Remember your settings and preferences
• Personalised content delivery

You can control cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect platform functionality.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

Request a copy of your personal data (commonly known as a "subject access request").

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Restrict Processing

Request restriction of processing in certain circumstances.

Right to Data Portability

Receive your data in a structured, commonly used, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

Withdraw previously given consent at any time.

To exercise any of these rights, contact us at info@aiga.ac. We will respond within 30 days as required by UK GDPR.

8. International Data Transfers

Your information may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Data processing agreements with all third parties

9. Third-Party Services

Our platform may contain links to third-party websites and services. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal information from children under 13. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO):

• Website: https://ico.org.uk
• Helpline: 0303 123 1113

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Data Controller: AI Governance Academy
• Email: info@aiga.ac
• Address: 128 City Road, London, EC1V 2NX, United Kingdom
• Phone: +44 20 4577 2645