Privacy Policy

WispGold Ltd, Kemp House, 152-160 City Road, London EC1V 2NX, United Kingdom, is the data controller for the personal data described in this policy. You can reach our data protection contact at [email protected] or on +44 20 4525 5252.

• Enquiry and enrolment data — name, email address, phone number, country of residence, profession or role, the course you are interested in, your intended exam sitting and any message you send us.
• Account and learning data — login credentials, lesson progress, mock exam attempts and scores, tutor feedback and attendance at live sessions.
• Billing data — invoice details and payment confirmations. Full card numbers are handled by our payment provider and never stored by us.
• Marketing preferences — newsletter subscription status and campaign engagement.
• Technical and analytics data — IP-derived country, browser type, pages viewed, referring website and UTM campaign parameters.
• Reviews you choose to submit — your name (usually shortened), country, course and review text.

• To answer your enquiry and send a quote — legitimate interests, or performance of a contract where you have asked to enrol.
• To deliver the course you enrolled in — performance of a contract.
• To send newsletters and course updates — your consent, withdrawable at any time via the unsubscribe link in every email.
• To keep accounting and tax records — legal obligation.
• To improve our website and courses — legitimate interests, using aggregated analytics.

We never sell your personal data. We share it only with service providers who process it on our instructions: our CRM and email notification providers (used to route your enquiry to a student advisor), our hosting and analytics providers, and our payment provider. Each is bound by a written data-processing agreement. We may also disclose data where required by law or to establish or defend legal claims.

Some of our providers are located outside the UK. Where data leaves the UK we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with technical safeguards such as encryption in transit.

• Enquiries that do not lead to enrolment: 24 months from last contact.
• Student records and learning history: for the life of your account plus 7 years for tax and audit purposes.
• Marketing data: until you unsubscribe, then a minimal suppression record so we do not email you again.
• Website analytics: 14 months in aggregated form.

You have the right to access, correct, delete or receive a portable copy of your personal data, to object to or restrict processing, and to withdraw consent to marketing at any time. Email [email protected] and we will respond within one month. If you are not satisfied you can complain to the UK Information Commissioner's Office at ico.org.uk.

Access to student data is restricted to staff who need it, transmitted over HTTPS and protected by role-based access controls on our systems. No online service can promise absolute security, so we ask you to keep your login details private and to tell us immediately if you suspect misuse of your account.

Our courses are intended for candidates aged 16 and over. We do not knowingly collect data from children under 16 without verified parental consent.

Cookie details are set out in our Cookies Policy. We may update this policy; the version published on this page is the one in force, and material changes are announced by email to active students. See also our Terms & Conditions and Disclaimer.