Privacy Policy

1. Introduction

This Privacy Policy explains how Qudrane collects, uses, stores and protects your personal data when you use the Qudrane platform (www.qudrane.com) and purchase or access our courses. It should be read alongside our Terms and Conditions.

We collect only what we need to give you access to your courses, take payment, and support you. We do not sell your personal data to third parties.

2. Who We Are

Qudrane is operated as a trading name and acts as the data controller for the personal data described in this policy. If you have any question about how we handle your data, contact us at support@qudrane.com.

3. What Data We Collect

We collect the following categories of personal data:

• Account data: your name and email address, and a securely hashed password. We never see or store your password in plain text.
• Purchase data: the courses you buy, the date of purchase, and your order reference. Card details are handled entirely by Stripe and are never stored by us.
• Course progress data: the modules you have completed, your knowledge check and mock exam answers, and your progress through each course.
• Correspondence: messages you send us through the contact form or by email.
• Marketing preferences: whether you have opted in to receive marketing emails.
• Technical data: basic information needed to keep you signed in and to keep the platform secure and available.

Where you purchase a course through an authorised third party marketplace such as Reed.co.uk, that marketplace passes us the details we need to set up your account and deliver your course.

4. Why We Use Your Data, and Our Lawful Basis

Under the UK General Data Protection Regulation (UK GDPR) we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract: to create your account, give you access to the courses you have purchased, record your progress, issue your certificate of completion, and handle refunds.
• Legitimate interests: to keep the platform secure, prevent fraud and misuse, respond to your enquiries, and improve our courses. We balance these interests against your rights.
• Consent: to send you marketing emails about new courses, updates and promotions, where you have opted in. You can withdraw consent at any time.
• Legal obligation: to keep records required for tax, accounting and consumer law purposes.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract and only for the purposes we specify:

• Supabase for account authentication, database hosting and course content storage
• Stripe for payment processing. Stripe handles your card details directly under its own privacy policy and we never receive them
• Vercel for website hosting and delivery
• Resend for sending transactional and marketing emails
• Authorised marketplaces such as Reed.co.uk, where you purchased your course through them

We may also disclose personal data where we are required to do so by law, or to establish, exercise or defend legal claims.

Please note that awarding bodies such as CISI and APM are separate organisations. When you book an examination with them you do so directly, and their handling of your data is governed by their own privacy policies, not ours.

6. International Transfers

Some of our service providers process data outside the United Kingdom. Where personal data is transferred outside the UK, we take steps to ensure it is protected to a standard equivalent to that required under UK data protection law, such as by relying on adequacy regulations or standard contractual clauses.

7. How Long We Keep Your Data

We keep your account and course progress data for as long as your account remains open, so that you can access your records and certificate. Course access itself expires 365 days after purchase, as set out in our Terms and Conditions.

We keep records of purchases and refunds for as long as we are required to for tax and accounting purposes. Marketing preferences are kept until you withdraw consent. Correspondence is kept only as long as needed to deal with the matter and to keep a record of it.

If you ask us to delete your account, we will delete or anonymise your personal data unless we are required to retain some of it by law.

8. How We Protect Your Data

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls restricting who can view your data, and secure password hashing. Payment card details never touch our systems.

No system can be completely secure. If you believe your account has been compromised, contact us immediately at support@qudrane.com.

9. Your Rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Ask us to correct data that is inaccurate or incomplete
• Ask us to delete your data, where there is no continuing reason for us to hold it
• Object to, or ask us to restrict, our processing of your data
• Ask us to transfer your data to you or another provider, where technically feasible
• Withdraw your consent to marketing at any time

To exercise any of these rights, contact us at support@qudrane.com. We will respond within one month.

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address your concerns first.

10. Marketing Communications

If you opt in during registration, or when downloading a free resource, we may send you emails about new courses, updates and promotions. Every marketing email contains an unsubscribe link, and you can opt out at any time by clicking it or by emailing us. Unsubscribing from marketing does not stop essential emails about your account, purchases or course access.

11. Cookies

We use only the cookies strictly necessary to run the platform. We do not use advertising or tracking cookies. See our Cookies Policy for details.

12. Children

The Qudrane platform is intended for adults. You must be at least 18 years of age to create an account, and we do not knowingly collect personal data from anyone under 18.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by displaying a notice on the platform. The date at the top of this page shows when it was last revised.

14. Contact Us

For any question about this policy or your personal data:

Email: support@qudrane.com

Website: www.qudrane.com