AboutCrowds | aboutcrowds.com  ·  Version 2.0  ·  Effective 1 April 2026

Privacy Policy

This Privacy Policy explains how Crowd Risk Analysis Ltd ("CRA eLearning") collects, uses, stores, and protects your personal data when you enrol, access our courses, or interact on this site. It applies to the AboutCrowds platform at aboutcrowds.com and associated Moodle-based services.

1. Who We Are

Crowd Risk Analysis Ltd ('we', 'us', 'our') is the data controller for personal data collected via AboutCrowds. For all data protection enquiries contact us at:

• Email: support@gksed.com
• Post: Orchid House, 26 Morewood Drive, Burton-in-Kendal, Cumbria, UK, LA6 1NE

2. Data We Collect and Why

Account registration: Full name, email address, date of birth (where required for certification eligibility), and encrypted password.
Lawful basis: Contract — Article 6(1)(b) UK GDPR.

Course enrolment and activity: Course progress, completion status, assessment scores, certificate records, and Moodle access logs.
Lawful basis: Contract and Legitimate Interests — Article 6(1)(b) and (f) UK GDPR.

Payment information: Payments are processed via Stripe; we do not store card details. We retain transaction records (amount, date, course purchased) for accounting and legal compliance.
Lawful basis: Contract and Legal Obligation — Article 6(1)(b) and (c) UK GDPR.

Communications: Emails and contact form messages, and (where opted in) promotional emails about new courses or updates.
Lawful basis: Legitimate Interests or Consent — Article 6(1)(f) or (a) UK GDPR.

3. Cookies and Tracking

AboutCrowds uses only essential session cookies required for the Moodle platform to function. We do not use third-party analytics, advertising trackers, or social media pixels. Session cookies are temporary and deleted when you close your browser.

4. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• Stripe Inc. – payment processing (Stripe's privacy policy applies to payment data)
• Our hosting provider – secure storage of platform data
• Regulatory authorities – where required by law (e.g. HMRC, ICO)

We do not share your data with third parties for marketing purposes.

5. International Transfers

Where data is transferred outside the UK (for example, to Stripe or our hosting provider), we ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the ICO or an adequacy decision.

6. How Long We Keep Your Data

• Account data: retained for the duration of your account plus 3 years after closure
• Course records and certificates: retained for a minimum of 7 years
• Payment records: retained for a minimum of 7 years (HMRC requirement)
• Marketing communications: until you withdraw consent

See our Data Retention Policy for full details.

7. Your Rights Under UK GDPR

• Right of access – request a copy of the data we hold about you
• Right to rectification – ask us to correct inaccurate or incomplete data
• Right to erasure – request deletion of your data in certain circumstances
• Right to restrict processing – ask us to pause processing of your data
• Right to data portability – receive your data in a structured, machine-readable format
• Right to object – object to processing based on legitimate interests
• Rights related to automated decision-making – we do not use solely automated decision-making that produces legal or similarly significant effects

To exercise any of these rights, email support@gksed.com with the subject line 'Privacy Request'. We will respond within one calendar month.

8. Data Breaches

In the event of a personal data breach posing a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay where the risk is high.

9. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office:
Website: ico.org.uk  ·  Phone: 0303 123 1113

10. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via a notice on the platform.

Contact

Data protection enquiries: support@gksed.com
Post: Orchid House, 26 Morewood Drive, Burton-in-Kendal, Cumbria, UK, LA6 1NE