Who we are
Lift College ("Lift College", "we", "us") operates liftcollege.co.uk and provides online distance learning courses and qualifications. We are the data controller for the personal data described in this notice. You can contact us about anything in this notice at info@liftcollege.co.uk.
The data we collect
- Account and enrolment data: your name, email address, contact details, date of birth where a qualification requires it, and the courses you enrol on.
- Payment data: payments are processed by Stripe. We never see or store your full card number. We keep records of what you have paid, your subscription status and your billing history.
- Learning records: your progress, submitted work, tutor feedback and results. Where an awarding body certificates your qualification, we share the registration data that the awarding body requires.
- Support and contact data: messages you send us, callback requests, and notes from calls with our advisers.
- Usage data: pages visited, referral source and interactions with the site, collected through cookies and similar technologies described in our cookie policy.
Why we use it
- To deliver your course, mark your work and arrange certification (performance of a contract).
- To take payment and manage your subscription, including pauses and refunds (performance of a contract).
- To register you with the relevant awarding body (legal obligation and performance of a contract).
- To respond to enquiries and provide learner support (legitimate interests).
- To understand how the site is used and improve it (consent, via analytics cookies).
- To send service messages about your course or account. Marketing emails are only sent with your consent and every one includes an unsubscribe link.
Who we share it with
We share personal data only where needed to run the service, and never sell it. Our main processors and recipients are:
- Stripe, for payment processing.
- Awarding bodies (for example Open Awards, TQUK, CMI, Pearson Edexcel, AQA), to register and certificate your qualification.
- Hosting and infrastructure providers (Vercel, Supabase and Sanity), which store site content and account data on our behalf.
- Email delivery providers, to send service and account emails.
- Google, for analytics as described in our cookie policy.
Where a provider stores data outside the UK, we rely on UK adequacy regulations or the appropriate standard contractual safeguards.
How long we keep it
- Account and learning records: for the duration of your studies and for 6 years afterwards, so we can verify your qualification and meet awarding-body requirements.
- Payment records: 6 years, to meet accounting and tax obligations.
- Support correspondence: up to 2 years after the enquiry is closed.
- Analytics data: as set out in our cookie policy.
Your rights
Under UK GDPR you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have data erased where we no longer need it;
- restrict or object to certain processing;
- receive your data in a portable format; and
- withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email info@liftcollege.co.uk. We respond within one calendar month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
All traffic to the site is encrypted with TLS. Access to learner data is limited to staff who need it to support you, and our infrastructure providers hold recognised security certifications. No system is perfectly secure, so if we ever become aware of a breach that affects your rights we will tell you and the ICO as the law requires.
Changes to this notice
We update this notice when our practices change and show the date of the latest revision at the top of the page. Significant changes will be flagged to account holders by email.