Privacy Policy

1. Overview & Our Commitment

Global Link Education Ltd ("we", "our", "us") is fully committed to protecting your privacy and handling your personal data with the utmost care, transparency, and respect. This Privacy Policy explains precisely what personal information we collect, how we use it, who we share it with, and what your rights are under applicable data protection law.

This policy applies to all personal data collected through our website, learning platform, email communications, and any other interactions you have with Global Link Education Ltd.

2. Who We Are

The "data controller" responsible for your personal data is:

3. What Personal Data We Collect

We collect and process the following categories of personal data:

Category	Data Collected	Purpose
Identity Data	Full name, date of birth (where provided)	Account registration, certificate issuance
Contact Data	Email address, phone number	Communication, support, enrollment confirmation
Financial Data	Transaction ID, billing postcode (no card numbers stored)	Payment verification and fraud prevention
Technical Data	IP address, browser type, device ID, login timestamps	Platform security, analytics, troubleshooting
Usage Data	Course progress, quiz scores, module completion	Tracking learning progress and certificate eligibility
Communications Data	Emails and messages sent to our support team	Customer service and record-keeping

We do not collect or store any Special Category Data (such as health information, biometric data, racial or ethnic origin, or political opinions) through our platform.

4. How We Use Your Personal Data

We use your personal data strictly for the following purposes:

• Service Delivery: To create and manage your student account, provide access to purchased courses, and track your learning progress.
• Payment Processing: To process and verify your course enrollment payments securely through our third-party payment processor.
• Certificate Issuance: To generate and issue your personalized Certificate of Completion upon successfully finishing a course.
• Customer Support: To respond to your inquiries, resolve technical issues, and process refund or cancellation requests.
• Legal Compliance: To comply with applicable UK legal, regulatory, and tax obligations.
• Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and abuse of our platform.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve our course content, user experience, and platform performance.
• Policy Notifications: To notify you of any material changes to our Terms and Conditions or this Privacy Policy.

We will not use your personal data for automated decision-making or profiling in any way that produces legal or similarly significant effects on you.

5. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases to process your personal data:

• Contract Performance (Article 6(1)(b)): Processing necessary to fulfill your course enrollment agreement and deliver the services you have paid for.
• Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate interests, such as platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Legal Obligation (Article 6(1)(c)): Processing required to comply with applicable UK laws, tax regulations, and reporting requirements.
• Consent (Article 6(1)(a)): Where we rely on your consent (e.g., for optional marketing communications), you may withdraw it at any time without affecting prior processing.

6. Data Sharing & Third-Party Sub-Processors

We share personal data with the following categories of trusted third parties, strictly where necessary to deliver our services:

Third-Party Category	Purpose	Data Shared
Payment Processors	Secure transaction processing (e.g., Stripe Inc.)	Transaction amounts, billing postcode, email
Email Service Providers	Delivering transactional emails (confirmations, receipts)	Name, email address
Cloud Hosting Providers	Secure storage and delivery of our platform and content	Account and course data (encrypted)
Analytics Tools	Aggregated, anonymized platform usage analysis	Anonymized technical and usage data only

All third-party processors are bound by appropriate data processing agreements and are contractually required to handle your data in compliance with UK GDPR. We never share your personal data with third-party advertising networks or marketers.

We may also disclose your data to law enforcement agencies, courts, or regulatory bodies if required to do so by applicable law or legal process.

7. International Data Transfers

Some of our third-party service providers may process your data outside the United Kingdom. Where such transfers occur, we ensure they are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), or the provider is located in a country deemed to have an adequate level of data protection under UK law.

8. Data Retention Periods

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account and course data: Retained for the duration of your active account and for 7 years after account closure, in compliance with UK tax and financial record-keeping obligations.
• Payment transaction records: Retained for 7 years in accordance with UK financial regulations.
• Customer support communications: Retained for 3 years from the date of the last interaction.
• Website technical logs: Retained for a maximum of 12 months for security and troubleshooting purposes.

After the relevant retention period, your data is securely and permanently deleted or anonymized.

9. Security of Your Personal Data

We implement a comprehensive range of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption across all pages of our website and platform (HTTPS).
• Strict internal access controls limiting data access to authorized staff members only.
• Regular security assessments and platform vulnerability testing.
• PCI DSS Level 1 compliant payment processing — we never store card numbers.
• Secure, encrypted cloud-based data storage with redundant backups.

While we take all reasonable precautions, no method of data transmission over the internet is 100% secure. In the unlikely event of a data breach that poses a high risk to your rights, we will notify you and the UK ICO within the timeframes required by law.

10. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze platform usage. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the website to function correctly (e.g., session management, login state). These cannot be disabled.
• Performance Cookies: Collect anonymized data about how visitors use our site (e.g., pages visited, time spent) to help us improve the user experience.
• Functional Cookies: Remember your preferences (e.g., language settings) to provide a more personalized experience.

You can configure your browser settings to refuse cookies. Please note that disabling cookies may affect the functionality of certain features of our platform. We do not use advertising or third-party tracking cookies.

11. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights with respect to your personal data held by Global Link Education Ltd:

To exercise any of these rights, please contact us in writing at info@globallinkeducationltd.com. We will respond to all legitimate requests within one calendar month.

12. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 16 without verifiable parental consent. If we become aware that we have collected data from a person under 16 without appropriate consent, we will delete that data as promptly as possible. If you believe your child's data has been submitted without consent, please contact us immediately.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal obligations, or applicable data protection law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer: