Privacy Notice

Identity and contact data. Your name, your email address, and the dates on which you access the platform.

Learning records. The units you are enrolled on, the lessons you have completed, the time recorded against each, and your responses to the knowledge checks within each lesson.

Written work. The reflections you submit at the end of each unit. Section 2 deals with these separately.

Assessment records. Feedback recorded by your tutor, and any certificate issued to you, which comprises your name, the unit or course, the date and a certificate number.

We do not request your date of birth, home address, National Insurance number, or any information concerning your health.

Certain units address mental health and wellbeing. The reflection prompts ask what you have learned from the material, and are deliberately framed so that a personal disclosure is not required.

Reflections are stored on the platform and are read by your tutor and by Brightpeak staff administering the programme. They are not disclosed outside Brightpeak Group.

Where a reflection nonetheless contains information concerning your health, that information constitutes special category data under Article 9 of the UK GDPR. It is treated as confidential, is not used for any purpose other than assessing your work, and is retained no longer than necessary. You may request the deletion of any reflection at any time, without giving a reason.

Reflections are reviewed as part of normal course marking and are not monitored in real time. If you have an immediate concern about your wellbeing, please contact your tutor directly or a health professional.

We process the personal data described above in order to:

Deliver the programme on which you are enrolled, including recording your progress and the guided learning hours completed.

Enable tutor support and assessment of the work you submit.

Issue certificates on completion.

Our lawful basis is legitimate interests under Article 6(1)(f): the delivery of learning you have been enrolled on, in a manner you would reasonably expect. No payment is taken and no contract for these units exists between us. You may object to processing carried out on this basis; see section 7.

Internal. Your tutor and Brightpeak Group staff responsible for administering the programme.

Supabase provides the database, authentication and file storage, hosted in London.

Vercel hosts and serves this platform, in London.

Bunny.net delivers video content, stored in London. No personal data is stored with them; as with any content delivery network, their servers receive the IP address of the requesting device.

Resend transmits automated service emails, such as sign-in links.

Personal data is not sold, disclosed to advertisers, or used to train artificial intelligence models.

Personal data is stored in the United Kingdom (London), and the platform is served from London. Backups are taken daily and retained in the same region.

Video content is stored in London and contains no personal data.

Where a processor is established outside the UK, transfers are made under the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or an applicable adequacy decision.

Account and learning records are retained for the duration of your enrolment and for a further 12 months following your last sign-in.

Written reflections are retained on the same basis and may be deleted earlier on request.

Certificate records — your name, the unit, the date of issue and the certificate number — are retained indefinitely so that a certificate remains capable of verification. No other personal data is retained with them.

You have the right to request access to your personal data, its rectification or erasure, restriction of processing, and data portability. You also have the right to object to processing carried out on the basis of legitimate interests. We will respond within one calendar month.

Please note that your Wider Learning account is the same account used on brightpeakconnect.com, so a request for erasure will affect both.

Requests should be sent to hello@brightpeakconnect.com, or raised with your tutor.

You have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk. We would ask that you raise the matter with us first so that we may address it.

Access controls are enforced at database level as well as within the application, so that one learner cannot access another learner’s records. Passwords are stored using one-way hashing and are not visible to us. Uploaded files are held in private storage and released only through time-limited links.

Only cookies strictly necessary to maintain your session are used. No advertising or analytics cookies are set on this platform.

Workpays Limited, Floors 1 and 2, 4 Babington Lane, Derby, DE1 1SU. Email hello@brightpeakconnect.com. Our Data Protection Officer is Ingrid.

Return to Wider Learning