UK GDPR

Privacy Notice — Training Portal

Data controller: Active WebDezign (AWD)

Purpose: Deliver mandatory data security and compliance training, track progress, issue certificates, and demonstrate workforce compliance.

Lawful basis

• Contract / legal obligation — employment and client contractual training requirements.
• Legitimate interest — maintaining an audit trail of training completion for governance and ICO accountability.

Personal data we process

• Identity and contact data: name, work email, phone, job role/designation
• Training metadata: slide progress, exam scores, certificates, session timestamps
• Technical data: IP address in admin audit logs (admin actions only)

Retention

Training activity logs are retained for up to 730 days unless a longer period is required for legal or contractual compliance. Profile data is retained while your account is active.

Your rights

• Access — export your data from your Profile page.
• Erasure — contact your administrator to request account deletion when no legal retention applies.
• Rectification — contact your administrator to update inaccurate profile details.
• Complaint — you may complain to the ICO (ico.org.uk).

Security

We apply access controls, encrypted sessions in production, audit logging, and rate limiting on authentication endpoints.

Last updated: September 2026. For data protection queries contact your AWD administrator.