Privacy notice
Last updated: PLACEHOLDER. Review annually.
Who we are
PLACEHOLDER — Skillskool is a trading name of Vocation Ltd, a company registered in Scotland (SC845472) with its registered office at [ADDRESS]. We are the data controller for the information described here. Contact us at [email protected].
What we collect
- Your name and email address, when you create an account or contact us.
- Records of which lessons you have watched and completed.
- Work you submit for assessment, and the assessor’s decisions and feedback.
- Any adjustments you have asked for, and enough detail to arrange them.
- Payment records. Card details are handled by our payment processor and never reach us.
Why we hold it
To give you access to the courses, to assess your work, to enter you for a qualification with the awarding body, to take payment, and to answer you when you get in touch. Where you are studying through an employer, we also report your completion status to them.
Our lawful bases
- Contract — providing the course you have signed up for.
- Legal obligation — keeping assessment and financial records for the periods required.
- Legitimate interests — running the service securely and answering enquiries.
- Consent — anything optional, such as marketing email. You can withdraw it at any time.
Who we share it with
- The awarding body, when we enter you for a qualification.
- The regulator and external verifiers, when they audit our assessment decisions.
- Your employer, if they are paying for your seat — completion status only, not your submitted work.
- Our suppliers, listed below, who process data on our behalf under contract.
We do not sell your data and we do not share it for advertising.
Our suppliers
PLACEHOLDER — keep this list accurate. It is the part an auditor will check.
- Website and DNS hosting
- Video hosting and delivery
- Member accounts and authentication
- Payment processing
Some of these are based outside the UK. Where that is the case, transfers are covered by the UK international data transfer agreement or an adequacy decision.
How long we keep it
Assessment records are kept for the period the awarding body requires. Financial records are kept for six years. Account and marketing data is deleted PLACEHOLDER after your account closes. Enquiry emails are deleted after twelve months if they don’t lead anywhere.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to processing, or ask us to restrict it. Email [email protected] and we’ll respond within a month.
Some of it we cannot delete on request — assessment evidence underpinning a qualification you have been awarded has to be retained. We’ll tell you plainly if that applies.
If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
PLACEHOLDER — state exactly what you set once the auth and analytics tools are in place. If you only ever set a session cookie needed to keep someone signed in, say so and explain that no consent banner is required for it. If you add analytics or anything that tracks, you need a consent banner and this section needs rewriting.