Privacy Policy

At B Learning Centre, we are committed to safeguarding the privacy of all our customers. This policy outlines how we collect, use, and protect personal information in compliance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Information

B Learning Centre is the data controller for the personal information processed under this policy.

Contact Details:

• Company: B Learning Centre
• Address: 37th Floor, 1 Canada Square, London E14 5AA, United Kingdom
• Email: hello@blearningcentre.com

2. Lawful Basis for Processing Personal Information

We process personal data under the following lawful bases as defined by UK GDPR:

Contract (Article 6(1)(b)): When processing is necessary to perform a contract with you, including training services and associated communications.

Legitimate Interests (Article 6(1)(f)): To maintain contact for relevant updates, training materials, and service-related information, where our legitimate interests are not overridden by your rights and freedoms.

Consent (Article 6(1)(a)): For marketing communications and optional services, where explicit consent has been obtained.

Legal Obligation (Article 6(1)(c)): To comply with legal and regulatory requirements.

Vital Interests (Article 6(1)(d)): In rare circumstances where processing is necessary to protect someone’s life.

Public Task (Article 6(1)(e)): Where processing is necessary for the performance of a task carried out in the public interest.

3. Our Privacy Principles

To ensure the protection of your personal information, we adhere to the following UK GDPR principles:

• We collect only the necessary personal data required to provide our services or fulfill legal obligations (data minimisation).
• Personal data is processed lawfully, fairly, and transparently.
• Data is collected for specified, explicit, and legitimate purposes.
• Personal data is accurate and kept up to date.
• We retain data only for as long as necessary (storage limitation).
• We ensure appropriate security measures are in place.
• We are accountable for demonstrating compliance with data protection principles.

4. Information We Collect

We may collect and process the following types of personal information:

General Personal Data

• Name, email address, phone number, and postal address
• Date of birth and nationality
• Information submitted when enrolling in our courses or contacting us
• Details of your interactions with our website (IP address, browser type, and duration of visit)
• Educational background and qualifications
• Employment history (where relevant to course selection)

Special Category Data (Where Applicable)

Under UK GDPR Article 9, we may process special category data only where we have a lawful basis and an additional condition:

• Health-related information if required for training services that involve duty-of-care considerations
• Criminal conviction information where legally required, such as for safeguarding when working with minors or vulnerable individuals (processed under UK GDPR Article 10)

Learning Journey Data

• Exam results, assessments, and certifications
• Course progress and completion records
• Training materials access logs
• Feedback and evaluation responses

5. How We Use Personal Information

We process your data for the following purposes:

• To communicate with you regarding your application, enrolment, or inquiry
• To provide training services and administer learning programs
• To facilitate payment processing and financial agreements
• To comply with legal and regulatory obligations in the UK
• To provide updates and relevant marketing communications (only with your consent)
• To analyze trends and improve our services through anonymized data insights
• To prevent fraud and ensure the security of our services
• To respond to legal requests and prevent harm

6. Data Retention Policy

We retain personal information only for as long as necessary, based on:

• The duration of your relationship with us (enrolment period plus reasonable follow-up period)
• UK legal and regulatory requirements for data retention
• Financial and contractual obligations
• Legitimate business interests (such as defending legal claims)

Specific Retention Periods:

• Student records: 7 years after course completion
• Financial records: 7 years after the end of the financial year
• Marketing consent records: Until consent is withdrawn
• Website analytics: 26 months (Google Analytics default)

We review and update our Data Retention Policy regularly, ensuring personal information is deleted or anonymised when no longer needed.

7. Sharing Personal Information

We may share your personal information with:

• Accrediting bodies or educational partners to facilitate course certifications
• Payment service providers for tuition fee transactions
• Legal and regulatory authorities when required by UK law
• Third-party service providers assisting with IT, marketing, or student services (under strict data processing agreements)
• Professional advisers including lawyers, accountants, and insurers
• Government bodies where required by law

We do not sell or trade personal data. Any data shared with third parties will be handled under appropriate data processing agreements ensuring the same high standards of security and confidentiality.

8. International Data Transfers

We do not transfer personal data outside the UK unless:

• Adequacy Decision: The destination country has been deemed adequate by the UK government
• Appropriate Safeguards: Such as Standard Contractual Clauses or Binding Corporate Rules are in place
• Specific Situations: Including your explicit consent or necessity for contract performance
• Service Requirements: Such as international course accreditation, with appropriate safeguards

When transfers occur, we ensure adequate protection through approved mechanisms under UK GDPR.

9. Cookies & Website Analytics

Our website uses cookies to enhance user experience and analyse visitor trends.

Types of Cookies Used:

• Essential cookies: Necessary for website functionality
• Performance cookies: To analyse website usage (Google Analytics)
• Functional cookies: To remember your preferences
• Marketing cookies: For targeted advertising (only with consent)

You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may limit website functionality.

Google Analytics: We use Google Analytics with IP anonymization enabled. Google’s privacy policy can be found at: https://www.google.com/privacypolicy.html

10. Data Security Measures

We implement appropriate technical and organisational security measures including:

• Encryption of data in transit and at rest
• Access controls restricting data access to authorised personnel only
• Regular security assessments and penetration testing
• Staff training on data protection and security
• Incident response procedures for potential data breaches
• Secure backup and recovery systems

While we implement robust security measures, no system is completely secure. We encourage you to take precautions when submitting sensitive information online.

11. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access (Article 15): Request copies of your personal data

Right to Rectification (Article 16): Request correction of inaccurate or incomplete data

Right to Erasure (Article 17): Request deletion of your personal data in certain circumstances

Right to Restrict Processing (Article 18): Request limitation of processing in specific situations

Right to Data Portability (Article 20): Request transfer of your data in a structured format

Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing

Rights Related to Automated Decision Making (Article 22): Protection against solely automated decision-making

Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise your rights, contact us at hello@blearningcentre.com. We will respond within one month of receiving your request.

12. Complaints and Regulatory Authority

If you believe we have not handled your personal data in accordance with UK data protection law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

13. Automated Decision Making and Profiling

We do not engage in solely automated decision-making or systematic profiling that produces legal effects or significantly affects you. Any automated processing tools used are subject to human oversight and intervention.

14. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risk to individuals’ rights and freedoms, particularly when introducing new technologies or processing methods.

15. Breach Notification

In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, we will notify you without undue delay. We maintain incident response procedures and will notify the ICO within 72 hours of becoming aware of qualifying breaches.

16. Policy Updates

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated via:

• Website notification
• Email notification to registered users
• Direct communication for material changes affecting your rights

The date of the last update will be clearly displayed at the bottom of this policy.

17. Contact Information

For any privacy-related inquiries, to exercise your rights, or to contact our Data Protection Officer, please use:

Email: hello@blearningcentre.com
Post: Data Protection Team, B Learning Centre, 37th Floor, 1 Canada Square, London E14 5AA, United Kingdom
Phone: 020 4628 0500

We aim to respond to all privacy inquiries within 5 working days and will provide a full response within one month as required by UK GDPR.

This privacy policy was last updated on 01/09/2025 and is effective immediately.

B Learning Centre is committed to protecting your privacy and will continue to review and update our practices in line with evolving data protection requirements.