Academy / Training Privacy Notice
Controller: Norale Property Solutions Ltd (Company No. 15046928)
3rd Floor, 86–90 Paul Street, London EC2A 4NE
Contact: [email protected]
This notice explains how we process personal data when you create an account or use our Academy, training, or learning platform (“Academy”). It applies to learners, trainees, subscribers, and account holders.
This notice should be read alongside our main Website Privacy Policy.
What data we collect
When you use the Academy, we may collect:
Account & identity data
Name
Email address
Username
Account credentials (passwords are stored securely in encrypted/hashed form)
Learning & progress data
Course enrolments
Module progress and completion status
Assessment results and scores
Certificates issued and completion dates
Technical & usage data
Login timestamps
Device/browser information
IP address
SCORM or LMS activity data (time spent, interactions, completion status)
Payment data (where applicable)
Purchase records and invoices
Transaction references
Payment status
(Payment card details are processed securely by third-party payment providers and are not stored by us.)
Order & access data
• Products or courses purchased (including free resources)
• Order timestamps and access status
• Enrolment keys or access mechanisms issued
How we use your data (and legal basis)
Where you access free Academy resources or downloads, we process your data based on our legitimate interests in delivering the requested content and managing platform access.
We process Academy data to:
Purpose | Lawful basis |
|---|---|
Create and manage user accounts | Contract |
Deliver courses and learning content | Contract |
Track progress, assessments, and certifications | Contract |
Provide learner support and administration | Legitimate interests |
Process payments (if applicable) | Contract / Legal obligation |
Maintain platform security and integrity | Legitimate interests |
Meet legal, accounting, or regulatory obligations | Legal obligation |
If required data is not provided, we may be unable to grant access to the Academy or issue certificates.
Communications
We may send you service-related communications necessary to deliver the Academy, including enrolment confirmations, access instructions, course updates, and support messages.
Where permitted by law, we may also send marketing communications about Academy-related training or resources. You may opt out of marketing communications at any time.
LMS hosting & SCORM tracking
Our Academy may be hosted on third-party Learning Management System (LMS) platforms and may use SCORM or similar tracking standards to record course activity, progress, and completion.
These providers act as data processors under contract and only process data on our instructions.
Who we share data with
We may share Academy data with:
LMS and e-learning platform providers
Hosting, security, and IT service providers
Payment processors (where applicable)
Professional advisers or regulators where legally required
We do not sell Academy user data.
International transfers
Where LMS or hosting providers process data outside the UK or EEA, appropriate safeguards are in place (such as UK IDTA or standard contractual clauses).
How long we keep data
Account and learning records: for as long as your account remains active
Certificates and completion records: typically up to 6 years for verification and audit purposes
Payment records: 6 years for tax and accounting
Inactive accounts: may be anonymised or deleted after prolonged inactivity
Security
We use appropriate technical and organisational measures to protect Academy data, including access controls, secure hosting, and encryption where supported. While no system is completely risk-free, we implement appropriate technical and organisational safeguards designed to protect personal data against unauthorised access, loss or misuse.
Your rights
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion (where applicable)
Restrict or object to processing
Request data portability (where applicable)
Withdraw consent where processing relies on consent
To exercise your rights, contact: [email protected]
You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk
Changes to this notice
We may update this notice to reflect changes in the Academy, legal requirements, or platform providers. The latest version will always be available on our website.
Last updated: 28/12/2025