Data retention summary

This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.

Site

Category

Administrative & Compliance Data

This category covers data required for administrative, legal, and regulatory purposes. It includes consent records, acknowledgements, audit logs, policy acceptance records, and other information necessary to demonstrate compliance with data protection, governance, and quality assurance requirements.


Purpose

Platform Operation & Security

This purpose covers the processing of technical and system data required to operate, secure, maintain, and monitor the learning platform, including performance monitoring, troubleshooting, and security logging.

Retention period
2 years
Lawful bases
Legitimate interests (GDPR Art. 6.1(f)) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

Users

Category

Educational Records

This category includes data relating to a learner’s academic participation on the platform. It covers course enrolments, learning progress, completion records, attendance, certificates, and qualification outcomes generated through participation in training programmes.


Purpose

Learning Delivery & Course Administration

This purpose covers the processing of personal data necessary to deliver learning content, manage course enrolments, administer training programmes, track learner progress, and support participation in educational activities.

Retention period
6 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Course categories

Category

Educational Records

This category includes data relating to a learner’s academic participation on the platform. It covers course enrolments, learning progress, completion records, attendance, certificates, and qualification outcomes generated through participation in training programmes.


Purpose

Learning Delivery & Course Administration

This purpose covers the processing of personal data necessary to deliver learning content, manage course enrolments, administer training programmes, track learner progress, and support participation in educational activities.

Retention period
6 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Courses

Category

Educational Records

This category includes data relating to a learner’s academic participation on the platform. It covers course enrolments, learning progress, completion records, attendance, certificates, and qualification outcomes generated through participation in training programmes.


Purpose

Learning Delivery & Course Administration

This purpose covers the processing of personal data necessary to deliver learning content, manage course enrolments, administer training programmes, track learner progress, and support participation in educational activities.

Retention period
6 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Activity modules

Category

Assessment & Feedback Data

This category contains data generated through learner assessment activities. It includes assignment submissions, quiz attempts, grades, feedback comments, evaluation notes, and assessor records used to measure learning outcomes and academic performance.


Purpose

Assessment & Certification

This purpose covers the processing of personal data required to assess learner performance, record assessment outcomes, provide feedback, and issue certificates or formal confirmation of course completion.

Retention period
6 years
Lawful bases
Contract (GDPR Art. 6.1(b)) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Blocks

Category

Technical & System Data

This category includes technical information generated through the operation of the platform. It covers IP addresses, device and browser information, system logs, error logs, and other technical data required for security monitoring, performance management, and system administration.


Purpose

Platform Operation & Security

This purpose covers the processing of technical and system data required to operate, secure, maintain, and monitor the learning platform, including performance monitoring, troubleshooting, and security logging.

Retention period
2 years
Lawful bases
Legitimate interests (GDPR Art. 6.1(f)) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child