GDPR Compliance Overview

Navigatr is a UK-based digital badge and learner journey platform that prioritises data privacy and security. As such, it adheres strictly to the General Data Protection Regulation (GDPR) and UK GDPR, ensuring users' personal data is handled lawfully, transparently, and securely.

Navigatr is committed to GDPR and good data practices, so learners, educators, and employers can trust us to handle data safely and transparently.

1. UK-Based Data Hosting

All user data is securely hosted within the United Kingdom, ensuring compliance with GDPR data residency requirements.

2. Data Encryption

Personal data is encrypted at rest and in transit, ensuring confidentiality and protection against unauthorised access.

3. User Rights and Access

Users can manage their data at any time. They can:

• Request a copy of their personal data, including badges
• Permanently delete their account and associated data
• Fix any incorrect or outdated information

These tools are available on the Navigatr platform when logged in.

4. Security Features

• Single Sign-On (SSO) and Multi-Factor Authentication (MFA) are supported
• Role-based access control (RBAC) means only authorised users can access sensitive information

5. Staff Training

All Navigatr staff are trained in GDPR compliance and data protection best practices. Staff earn badges like "UK GDPR Trained" to show their knowledge and commitment.

6. Transparency and Accountability

• We publish a clear Privacy Policy and Terms & Conditions
• We log data access and keep audit trails to ensure accountability

7. Age-Appropriate Use and Data Minimisation

Navigatr is designed for users aged 13 and over. To create an account, only minimal personal data is required: name and email address.

For users under 13 or with SEND (Special Educational Needs and Disabilities), Navigatr enables the creation of "buddy accounts" for a designated adult (such as a teacher, guardian, or support worker) to manage their access and badges responsibly.

Need Help?

If you have questions or need support, contact us at gdpr@navigatr.org.