Privacy Policy

Introduction

Coursebricks Ltd ("we", "us") respects your privacy. This policy explains how we collect, use, store and protect personal data when you use our training management platform. We comply with the UK GDPR and EU GDPR.

Who we are

Company: Coursebricks Ltd
Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Contact: yousef@coursebricks.io

What data we collect

• Account data: name, email, company, role, password (hashed).
• Billing data: payment and invoicing information (via Stripe/Xero).
• Usage data: logs, IP, device and activity within the platform.
• Training data: trainees, schedules, attendance, certificates (processed on behalf of customers).

How we use your data

• To provide the platform and related features.
• To improve and monitor the service.
• To process payments and invoices.
• To communicate service updates and support messages.

Lawful bases for processing

• Contractual necessity for account and service delivery.
• Legitimate interests for security and service improvements.
• Consent for optional marketing messages.
• Legal obligations (tax, accounting).

Data storage & transfers

Personal data is stored within the EU (Vercel EU, Neon EU, AWS S3 EU). We only transfer outside the EU/UK where adequate safeguards (e.g. SCCs) are in place.

Data retention

• Account & billing data: kept for the duration of the account and up to 6 years for legal/tax reasons.
• Training data: retained as instructed by the customer/controller.
• Usage logs: retained for 12 months by default.

Sharing of data

We do not sell personal data. We share with service providers such as hosting, payment processors and email services.

Your rights

You have rights under data protection law including access, rectification, erasure, restriction, portability and objection. To exercise your rights, contact us at yousef@coursebricks.io.

Security

We use encryption, access controls, backups and monitoring to protect personal data.

Cookies & tracking

We use cookies for authentication, performance and analytics. You can manage cookies through your browser.

Acting as Data Processor

When customers upload trainee or organisational data, we act as Data Processor. Customers remain the Data Controller and should consult this Privacy Policy together with the DPA.

Contact

For privacy questions contact: yousef@coursebricks.io