Privacy Policy

1. Who We Are

DiverseCT Limited is a company registered in England and Wales (Company number 09652787), trading as DiverseCT. We provide equality, diversity and inclusion consultancy, training, and eLearning services to individuals and organisations across the UK.

When we refer to "we", "us", or "DiverseCT" in this policy, we mean DiverseCT Limited. When we refer to "you", we mean anyone who uses our website, purchases our services, or contacts us. We are the data controller for the personal information we collect about you. Contact us at enquiries@diverse-ct.co.uk.

2. What Information We Collect

• We collect your name and email address when you create an account.
• When you purchase a course, we collect your name, email address, and payment information, which is processed securely by Stripe. We do not store your card details.
• When you submit an enquiry, we collect your name, job title, organisation, email address, and any information you include in your message.
• When you use our eLearning platform, we collect your course progress, completion status, and assessment results.
• When you visit our website, we collect technical information including your IP address and pages visited via cookies and analytics tools.

3. How We Use Your Information

We use your information to create and manage your account, process your purchases and deliver your courses, send you receipts and confirmations, provide access to your purchased content, respond to your enquiries, manage your organisation's account if you are an organisation administrator, improve our website and services, and meet our legal and regulatory obligations.

4. Legal Basis for Processing

We process your data under UK GDPR on the following bases: contract (to fulfil your purchase), legitimate interests (to improve our services and prevent fraud), legal obligation (for tax and accounting purposes), and consent (for marketing emails, which you can withdraw at any time).

5. Who We Share Your Information With

We do not sell your personal data. We share it only where necessary with: Stripe (payment processing), Supabase (database hosting), Resend (email delivery), IOMAD/Moodle (learning management system), and Lovable (website platform). All providers are contractually required to keep your data secure.

6. How Long We Keep Your Data

• Account information: for as long as your account is active, plus 7 years after your last transaction.
• Purchase records: 7 years as required by HMRC.
• Course completion records: 3 years after completion.
• Enquiry records: 2 years.

When we no longer need your data, we delete it securely.

8. Your Rights

Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any right, contact us at enquiries@diverse-ct.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk. We will respond to requests within 30 days.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure password storage, and access controls to protect your data.

10. Children

Our services are not directed at children under 18. We do not knowingly collect personal data from children. Contact us immediately at enquiries@diverse-ct.co.uk if you believe we have done so.

11. Changes to This Policy

We may update this policy from time to time. We will update the date at the top of this page when we do.

12. Contact Us

Email: enquiries@diverse-ct.co.uk | Website: www.diverse-ct.co.uk | DiverseCT Limited, Company number 09652787. ICO registration number: ZC253176. shortly.