This policy explains what personal data Care2Learn collects, why we collect it, how we look after it, and the rights you have. We are committed to handling personal data responsibly and in line with UK data protection law.
1. Who we are
Care2Learn is a service provided by CARE2LEARN LIMITED, a company registered in England and Wales (company number 12435039), whose registered office is at Wren House, 68 London Road, St Albans, Hertfordshire, United Kingdom, AL1 1NG. For data protection purposes we are registered with the Information Commissioner's Office (ICO) under reference [ICO REGISTRATION NUMBER]. You can reach us about privacy matters at hello@care2learn.co.uk.
2. Our role: controller and processor
We handle personal data in two different roles, and this matters for your rights:
- When you are a care provider using Care2Learn to train your staff, you are the data controller for your staff's training records and we act as your processor — we process that data on your instructions. Requests from your staff about their records are usually best directed to their employer (you), though we will help where appropriate.
- We are the controller for the personal data we handle to run our own business — for example, account and billing contacts, enquiries, marketing, and information about how our website is used.
3. The personal data we collect
Account and contact data
When you register or get in touch: name, work email, organisation name, job role, and the content of messages you send us.
Learner records
To deliver training on behalf of care providers, the platform holds: learner names, email addresses or usernames, job roles, the courses assigned to them, their progress, assessment results, and completion certificates.
Care Passport data
Where the Care Passport (passport.care2learn.co.uk) is used, we hold worker-owned verified training credentials linked to an individual, so that a carer can evidence their record.
Technical and usage data
Basic information such as sign-in activity and general usage needed to keep the service secure and working. Payment is handled by our payment provider; we do not store full card details.
4. How we use personal data, and our lawful bases
- To provide the service (create accounts, deliver and track training, issue certificates) — on the basis of our contract with you, or, for learner data, on the instructions of the care provider.
- To run and improve our business (support, security, service improvements) — on the basis of our legitimate interests in operating a reliable service, balanced against your rights.
- To send service messages you need to receive, and, where you have opted in, marketing about Care2Learn — marketing is on the basis of your consent, which you can withdraw at any time.
- To meet legal and regulatory obligations — on the basis of our legal obligations.
5. Cookies and similar technologies
We keep this to a minimum. We use essential storage in your browser to keep you signed in and to make the service work. We do not use it to track you across other websites. If we add any non-essential analytics in future, we will update this policy and seek consent where required.
6. Who we share data with
We do not sell personal data. We share it only with trusted providers who help us run the service, under contracts that require them to protect it. These include:
- our hosting and infrastructure provider (Render);
- our email and communications provider (Resend);
- our payment provider (Stripe); and
- professional advisers, or authorities, where we are legally required to disclose information.
7. Where data is stored and international transfers
We aim to store personal data within the UK or European Economic Area. If any provider processes data outside the UK, we make sure appropriate safeguards are in place (such as UK-approved standard contractual clauses or an International Data Transfer Agreement) so your data stays protected.
8. How long we keep it
We keep personal data only for as long as needed for the purposes above. Learner records are kept for as long as the care provider's account is active and in line with their instructions. When an account closes, we make data available for export for a reasonable period, then delete or anonymise it unless we are required to keep it (for example, for tax or legal reasons).
9. How we protect it
We use appropriate technical and organisational measures to keep personal data secure, including access controls and encryption in transit. No system is completely secure, but we work to protect your information and to respond quickly if anything goes wrong.
10. Your rights
Under UK data protection law you have the right to: access your personal data; ask us to correct it; ask us to delete it; restrict or object to how we use it; ask for a copy in a portable format; and withdraw consent where we rely on it. To exercise these rights, contact us at hello@care2learn.co.uk.
11. Children
Care2Learn is a professional training service for adults working in care. It is not directed at children and we do not knowingly collect children's personal data.
12. Changes to this policy
We may update this policy from time to time. When we make significant changes, we will update the date at the top and, where appropriate, let you know.
13. Complaints
If you have a concern about how we handle your personal data, please contact us first so we can put it right. You also have the right to complain to the ICO, the UK's data protection regulator, at ico.org.uk.
14. Contact us
For any privacy question, email hello@care2learn.co.uk or write to us at Wren House, 68 London Road, St Albans, Hertfordshire, United Kingdom, AL1 1NG.