Privacy Policy
Last updated: 8 October 2026
This policy explains what personal information we collect when you use our training platform, why we collect it, who we share it with and what your rights are.
1. Who we are
We are the controller of your personal information, which means we decide how and why it is used.
Discover Training Ltd, trading as Mindskills Matter, company number 08375435.
Address: Wigan Hall, New Market Street, Wigan, WN1 1HH, United Kingdom.
Email: support@mindskills.com. Phone: 01942 356580 (Monday to Friday, 9am to 5pm).
We are registered with the Information Commissioner’s Office (ICO) under registration number ZA194258. For anything in this policy, contact us at support@mindskills.com.
2. The information we collect
- Account information: your name, email address and password. Your password is stored by our sign-in provider in a protected (hashed) form. We cannot see it.
- Profile information: an optional short bio and profile picture, if you add them.
- Learning information: the courses you are enrolled on, which lessons you have completed, your quiz answers and scores, course ratings you give, the date you complete a course and your certificate and verification code.
- Access codes: the course access codes you redeem.
- Purchase information: the course you bought, the amount, the date and the status of your order (paid, refunded and so on), and a record that you accepted our terms at checkout. Your card details are collected and handled by Stripe. We never see or store your full card number.
- Messages you send us: your name, email address and message when you use our contact form.
- Technical information: your IP address, browser and device type, and basic usage and performance data when you use the site. See our Cookie Policy.
We do not knowingly collect special category data (such as health information). Please do not include it in messages to us.
3. Why we use your information
We only use personal information when we have a lawful basis to do so under UK GDPR.
| What we do | Lawful basis |
|---|---|
| Create and run your account, give you access to courses, track your progress and mark quizzes | Contract (providing the service you asked for) |
| Take payment, issue refunds and keep financial and tax records | Contract, and legal obligation |
| Issue certificates and let people verify them | Contract, and our legitimate interest in protecting the value and integrity of our certificates |
| Share progress and results with the organisation that gave you access (see section 4) | Contract, and the legitimate interests of that organisation and ours in running the training |
| Reply to your enquiries and complaints | Legitimate interests (and steps you ask us to take before a contract) |
| Keep the site secure, prevent fraud and misuse, and fix problems | Legitimate interests |
| Understand how the site performs so we can improve it | Legitimate interests |
| Establish, exercise or defend legal claims | Legitimate interests, and legal obligation |
We do not currently send marketing emails. If we start, we will only do so with your consent and you will be able to opt out at any time.
4. Who we share your information with
We do not sell your personal information.
Organisations that provide your access
If you join a course using an access code supplied by your employer or another organisation, we may share your name, email address, course progress, completion date and quiz results with that organisation, for example in a training report. We tell you this here so you know before you redeem a code. If you bought your course yourself, we do not share your learning information with anyone else.
Our service providers
We use trusted companies to run the platform. They only handle your information on our instructions, except where stated.
- Supabase: database, sign-in and file storage. Our data is hosted in the UK (London).
- Stripe: card payments. Stripe also acts as an independent controller for fraud prevention and its own legal duties. See Stripe’s privacy policy.
- Vercel: website hosting, plus privacy-friendly performance and visitor statistics.
- Resend: delivery of emails, including messages from our contact form and order confirmations.
- YouTube (Google): some lessons play videos hosted on YouTube. When you play a video, Google may receive your IP address and device information. We use YouTube’s privacy-enhanced mode. See Google’s privacy policy.
Others
We may share information with professional advisers (for example accountants and insurers), and with regulators, courts or the police where the law requires or allows it. If we ever sell or restructure the business, information may pass to the new owner, who must keep to this policy.
5. Certificate verification
Each certificate has a verification code. Anyone who has that code can use our verification page to see the certificate holder’s name, the course title and the completion date, so that employers and others can check a certificate is genuine. We do not show your email address, scores or any other details. Keep your code private if you do not want others to check your certificate.
6. Transfers outside the UK
Our main database is in the UK. Some of our providers, such as Vercel, Stripe, Resend and Google, may process information in other countries, including the United States. Where they do, we rely on one of the safeguards allowed by UK law, such as a UK adequacy decision (including the UK–US data bridge for certified companies) or the ICO’s approved international data transfer terms. You can ask us for more information about these safeguards.
7. How long we keep your information
| Information | How long |
|---|---|
| Account and profile information | Until you delete your account |
| Learner records and certificates (enrolment, completion date, certificate code) | 6 years after the course is completed or the account is closed |
| Order and payment records | 6 years, to meet tax and accounting rules |
| Quiz answers and lesson progress | Until you delete your account |
| Contact form messages | 12 months |
| Backups | Kept by our database provider for a limited period, then overwritten |
If you delete your account, we remove your profile details, quiz answers, progress, ratings and contact messages and anonymise your sign-in record. We keep the records listed above that we are legally required or entitled to keep, without your name or email address.
8. Keeping your information secure
We use encrypted connections, access controls so that learners can only see their own records, and trusted providers that meet recognised security standards. No system is completely secure. If a breach puts your rights at risk, we will tell you and the ICO as the law requires.
9. Your rights
You have the right to:
- be told how we use your information (this policy);
- ask for a copy of your information;
- have inaccurate information corrected;
- ask us to delete your information, in some circumstances;
- ask us to restrict or stop using it, in some circumstances;
- receive your information in a portable format; and
- object to use based on legitimate interests.
You can download a copy of your information and delete your account yourself in Settings. For anything else, email support@mindskills.com. We will respond within one month. We may need to confirm your identity first. There is no charge unless a request is clearly unreasonable.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Automated marking
Quizzes are marked automatically. The result decides whether you can move on and whether you receive a certificate. If you think a result is wrong, contact us and a person will review it.
11. Children
Our courses are for people aged 18 or over. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make an important change, we will tell you on the site or by email.
Related policies