1. Introduction

Learner Key Ltd (Company Reg. SC 339387, registered at 23 Scotland Street, Glasgow G5 8NB, www.learnerkey.com) is committed to protecting the privacy and security of personal data. This policy outlines how we collect, use, store, and share personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Learner Key Ltd is the Data Controller responsible for your personal data. Our contact for data protection inquiries is support@learnerkey.com.

3. Principles of Data Processing

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency.
• Purpose limitation.
• Data minimisation.
• Accuracy.
• Storage limitation.
• Integrity and confidentiality.
• Accountability.

4. Types of Data Collected

We may collect, store, and use the following categories of personal data:

• Personal Identification Data: Full name, date of birth, nationality, email address, phone number, postal address.
• Academic and Professional Data: Highest qualification achieved, relevant work experience, English and Mathematics proficiency.
• Course-Specific Data: Course of interest, intended start date, visa assistance requirements, accommodation assistance requirements.
• Application Data: How you heard about us, declaration consents.
• Operational Data: Data related to your engagement with our website (via cookies, as per our Cookies Policy).

5. How Data is Collected

We collect personal data primarily through:

• Online application forms on our website.
• Direct communication (email, phone).
• Website interactions (e.g., through cookies).

6. Purposes of Processing

We use your data for the following purposes:

• To process your applications for courses.
• To manage your enrolment and provide educational services.
• To communicate with you regarding your application, course, and related services.
• To provide information, advice, and guidance related to your studies.
• To comply with legal and regulatory obligations (e.g., immigration checks for visa assistance).
• For internal record keeping and administrative purposes.
• To improve our services and website.

7. Lawful Basis for Processing

We process personal data based on the following lawful bases:

• Contract: To fulfil our contractual obligations with you (e.g., course enrolment).
• Legitimate Interests: To run our business, improve services, and for administrative purposes (e.g., sending relevant course information).
• Legal Obligation: To comply with legal requirements (e.g., immigration laws).
• Consent: Where required for specific processing activities (e.g., marketing communications).

8. Data Sharing

We may share your data with:

• Awarding Bodies: Such as Highfield Qualifications and Qualifi, for registration, certification, and quality assurance purposes.
• Partner Centres: If a course is delivered in partnership, for course delivery and administration.
• Third-Party Service Providers: Who assist us with IT, administrative, or marketing services, under strict confidentiality agreements.
• Universities: For progression purposes, as detailed in the course-specific information.
• Legal and Regulatory Authorities: Where required by law.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

11. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• The right to be informed.
• The right to access your data.
• The right to rectification.
• The right to erasure.
• The right to restrict processing.
• The right to data portability.
• The right to object to processing.
• Rights about automated decision-making and profiling.

To exercise any of these rights, please contact us at support@learnerkey.com.

12. Complaints

You have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

13. Changes to this Policy

We may update this policy periodically. The latest version will always be available on our website.