Last updated: 15 October 2026
CPD Academy UK (“we”, “us”) runs cpdacademy.uk and the student portal at learn.cpdacademy.uk. This policy explains what personal data we collect, why, and your rights under the UK GDPR and the Data Protection Act 2018.
1. Data we collect
- Account and enrolment data: your name, email address and the courses you enrol in.
- Learning data: lesson progress, quiz results and the certificates issued to you.
- Payment data: payments are processed by our payment provider (Stripe). We receive confirmation of payment but never see or store your full card details.
- Messages: anything you send us through our contact or partner forms.
- Technical data: IP address, browser and device information, and cookie data (see Cookies below).
2. Why we use your data
| Purpose | Lawful basis |
|---|---|
| Creating your account, delivering courses and issuing certificates | Contract |
| Taking payments and keeping financial records | Contract and legal obligation |
| Letting employers verify a certificate you share | Legitimate interests |
| Answering your enquiries | Legitimate interests |
| Course updates and marketing emails | Consent (you can unsubscribe at any time) |
| Analytics and marketing cookies | Consent |
3. Certificates and verification
Each certificate has a unique verification link. Anyone with that link can see your name, the course title and the date it was issued. Only share the link where you are happy for this to be visible.
4. Who we share data with
We use trusted service providers to run the academy, including our learning and CRM platform, our payment provider (Stripe) and email delivery services. They process data only on our instructions. Some providers may store data outside the UK; where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement. We never sell your personal data.
5. University and partner coupons
If you enrol with a coupon from a university or partner organisation, we may share your enrolment and completion status with that organisation so it can confirm your participation.
6. How long we keep data
We keep your account and certificate records for as long as your account is active, so that certificates stay verifiable. Payment records are kept for six years for tax purposes. You can ask us to delete your account at any time.
7. Cookies
We use essential cookies to keep the site and your login working. With your consent we also use analytics and marketing cookies to understand how the site is used and to measure our advertising. You can choose “Essential only” on our cookie banner, and change your choice at any time using Cookie settings.
8. Your rights
You have the right to access, correct or delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To use any of these rights, contact us. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
9. Changes
We may update this policy from time to time. The date at the top shows when it was last changed.
10. Contact
Questions about this policy? Use our contact page.