We are a UK-based digital badge and learner journey platform, and we take data privacy and security seriously. We follow the General Data Protection Regulation (GDPR) and UK GDPR, ensuring users' personal data is handled lawfully, transparently, and securely.
UK-based data hosting
All user data is securely hosted within the United Kingdom, ensuring compliance with GDPR data residency requirements.
Data encryption
Personal data is encrypted at rest and in transit, ensuring confidentiality and protection against unauthorised access.
User rights and access
Users can manage their data at any time. They can:
Request a copy of their personal data, including badges
Permanently delete their account and associated data
Fix any incorrect or outdated information
You can use these tools from your account settings.
Privacy controls you can use
You can adjust how your data is shared and stored from your account settings:
Hide your profile from search engines: toggle this option in Settings → Data & Privacy to prevent your public profile being indexed.
Download your data: in Settings → Data & Privacy, this instantly downloads a ZIP copy of your personal data and badges straight to your browser.
Delete your account: account deletion is available in Settings → Data & Privacy and includes a 14-day grace period in case you change your mind.
Manage communication preferences: in Settings → Email & Communications, choose whether to receive system emails, subscription emails, our newsletter, and marketing messages.
Manage cookie preferences: the cookie banner appears on your first visit and covers four categories: Essential (always on, covering your sign-in session and your cookie choice itself), Support, Analytics and Marketing. You can accept all, decline all, or choose category by category. To change your mind later, select Manage cookie preferences in Settings → Data & Privacy, or use the same button at the foot of our Cookie Policy. Your choice is stored in the browser you made it in, so you will be asked again on a different browser or device, and if we change our cookie policy.
Cookies and live chat
Our live chat is provided by Intercom. Intercom is not loaded until you accept Support cookies: no Intercom script runs, and no Intercom cookie is set, before you do. If you open live chat without having accepted Support cookies, the cookie banner opens so you can. Turn Support off later and the chat shuts down straight away, in the same session.
When you do use live chat, we share with Intercom the account details it needs to help you: your name, email address, account and organisation identifiers, and your role. Signed-out visitors share no account information.
Analytics and Marketing cookies are only set once you accept those categories. Google Analytics runs in consent mode, so until you accept Analytics it stores nothing on your device and sets no analytics or advertising cookie.
Security features
Single Sign-On (SSO) and Multi-Factor Authentication (MFA) are supported
Role-based access control (RBAC) means only authorised users can access sensitive information
Staff training
All our staff are trained in GDPR compliance and data protection best practices. Staff earn badges like "UK GDPR Trained" to show their knowledge and commitment.
Transparency and accountability
We publish a clear Privacy Policy and Terms & Conditions
We log data access and keep audit trails to ensure accountability
Age-appropriate use and data minimisation
The platform is designed for users aged 13 and over. To create an account, only minimal personal data is required: name and email address.
If a learner is under 13 or requires SEND (Special Educational Needs and Disabilities) support, please contact your provider or community admin to discuss appropriate access arrangements.
Need help?
If you have questions or need support, contact us at [email protected].