Privacy policy for the Purple Panda Consulting training platform

1. Data controller

Purple Panda Consulting Ltd is the organisation responsible for information processed through this training platform and its related services.

Company number: 14496358.

2. Purpose of the platform

The platform is designed to help organisations create and deliver branded training programmes, manage learner access, and review learning progress.

It supports programme setup, linked learning assets, guided onboarding, and learner completion flows.

3. Data minimisation

The service is intended to focus on organisational and operational information rather than personal information.

Only a limited amount of personal data is needed to operate accounts and deliver the platform safely.

• Email address
• Company or organisation name
• Role or sector details where needed for account setup

4. Information we collect

The platform may process the following categories of information:

• Account information used to create and maintain access
• Programme setup data such as branding, module definitions, linked assets, and training structure
• Learner interaction data such as progress, completion, quiz responses, and session status
• Limited technical information such as IP address, timestamps, and basic browser or device data for security and operations

5. How information is collected

• When a user signs in using a secure login link
• When an admin configures branding or training programmes
• When a learner progresses through the training journey
• When the platform generates reports, status updates, or operational records

6. Authentication and email

Authentication is handled through email-based magic links rather than passwords.

The platform only sends essential service email, including secure access links and platform-related messages.

7. Legal basis for processing

• Legitimate interests: to operate, secure, and improve the platform
• Contractual necessity: where processing is needed to provide the service requested by the user or client organisation

8. Retention, hosting, and security

Account, programme, and learner data are retained while they are needed to operate the platform and may be deleted on request where appropriate.

The platform may be hosted on third-party infrastructure providers acting only to support delivery and maintenance.

Reasonable technical and organisational measures are used, including HTTPS, controlled access, and secure authentication. No internet service can be guaranteed completely secure.

9. Cookies

The website does not aim to rely on analytics or marketing cookies. Only minimal technical functionality needed to operate the service may be used.

10. Your rights

• Request access to information held about you
• Request correction of inaccurate information
• Request deletion where appropriate
• Request restriction of processing in certain cases
• Object to processing where applicable

11. Children, changes, and contact

The platform is not intended for individuals under 16.

This policy may be updated from time to time. The latest version will be published on the website.

For privacy questions or requests, contact Purple Panda Consulting through the platform contact route or support address.