Privacy Policy.

At eXcelerate Learning, we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store and protect your personal information when you use our website and services.

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.Who we are

eXcelerate Learning Ltd ("eXcelerate Learning", "we", "us", "our") is the data controller for the personal information we collect about you.

2.Information we collect

We collect the following types of information:

• Personal information — when you contact us, enquire about our services, book a call or engage us to deliver work, we may collect your name, email address, phone number, job title, organisation and any other information you provide.
• Course sign-ups: when you start a free course on our Learn page, we ask for your name, email address and organisation. We also record star ratings for courses and blog posts, and count blog post views. Ratings and view counts are anonymous and are not linked to your name or email.
• Usage data — when you visit our website we may collect your IP address, browser type, device type, referrer, pages visited, time on page and similar analytics information that helps us understand how the site is used.
• Cookies — we use a small number of cookies and similar technologies to make the site work and (with your consent) to measure how it's used. See our Cookie Policy for the full list and your choices.
• Correspondence — records of any emails or messages you exchange with us.

We do not knowingly collect information from children under 13 through this website.

3.How we use your information

We use your personal information to:

• Respond to enquiries and provide information about our services.
• Understand who is using our free courses. Signing up for a course does not add you to a mailing list, and we won't send you marketing because of it.
• Deliver the services you've engaged us for and communicate with you about ongoing projects.
• Process payments and transactions, and keep accurate financial records.
• Improve our website, services and customer support.
• Notify you about material changes to our services or this policy.
• Send occasional updates or resources, where you've asked to receive them.
• Comply with our legal and regulatory obligations.

4.Legal basis for processing

Under UK GDPR we must have a lawful basis for processing your personal data. The basis we rely on depends on why we're using the data:

• Contract — where processing is necessary to deliver the services we've agreed to provide you.
• Legitimate interests — where processing is necessary for our reasonable business interests (for example, responding to enquiries, securing our website, or improving our services) and doesn't override your rights.
• Consent — where you've given us clear, specific consent (for example, to set non-essential cookies or to receive marketing updates). You can withdraw consent at any time.
• Legal obligation — where we need to process data to meet a legal or regulatory requirement (for example, HMRC record-keeping).

5.Data storage and security

We implement industry-standard security measures to protect your personal information, including encryption in transit (HTTPS), secure-by-default cloud services, access controls and regular review of our processors.

Data is stored on reputable cloud platforms, primarily within the UK and European Economic Area (EEA). Where data is transferred outside the UK/EEA — for example, to analytics or scheduling providers based in the United States — we rely on safeguards approved under UK GDPR such as the UK Addendum to the EU Standard Contractual Clauses or the UK-US Data Bridge.

No method of transmission or storage is 100% secure. We take reasonable precautions but cannot guarantee absolute security.

6.Third-party sharing

We do not sell or trade your personal information. We share data only with trusted service providers who help us run our business, and only to the extent needed to deliver that service. These include, at time of writing:

• Email — our mail provider, used to send and receive correspondence.
• Scheduling — Calendly, if you book a call via the calendar link on this site.
• Website analytics — Google Analytics 4 (only if you consent to analytics cookies).
• Website database: Supabase, which stores course sign-ups, course and blog ratings, and anonymous blog view counts. Resend sends us a weekly email summary of this activity.
• Hosting — our website host, which may process minimal server logs for security and reliability.
• Payment processing and accounting — for clients we invoice.

All processors are contractually required to keep your information confidential, process it only for the purposes we specify, and meet UK GDPR standards.

We may also disclose personal information where required by law, court order, or to protect our legal rights.

7.Your rights

Under UK GDPR you have the following rights in relation to your personal data:

• Access — request a copy of the personal information we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — ask us to delete your personal information, where there's no good reason for us to continue holding it.
• Restriction — ask us to limit how we use your information.
• Objection — object to processing we carry out on the basis of legitimate interests.
• Portability — ask for the information you've provided us in a structured, machine-readable format.
• Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing that happened before withdrawal.

To exercise any of these rights, please email hello@exceleratelearning.co.uk. We will respond within one month.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe we've mishandled your data. You can contact the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We'd appreciate the chance to resolve any concerns directly first.

8.Data retention

We retain personal information only for as long as necessary for the purposes set out in this policy, or as required by law. Typical retention periods:

• Enquiry correspondence — up to 24 months after our last contact, unless the enquiry becomes a project.
• Course sign-ups: up to 24 months after you sign up.
• Client records — for the duration of the engagement plus 6 years afterwards, to meet HMRC and legal obligations.
• Website analytics — aggregated for up to 14 months.
• Marketing subscribers — until you unsubscribe or ask to be removed.

9.Automated decision-making

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

10.Links to other websites

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of these external sites, and we encourage you to review their privacy policies before sharing information with them.

11.Updates to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of the page reflects the most recent change. Where the change is material, we'll make reasonable efforts to let you know — for example, by notice on this page or by email if we hold your address.

12.Contact us

If you have any questions about this Privacy Policy, how your data is handled, or you'd like to exercise any of your rights, please contact us: