C² Human Factors

Privacy policy

C² Human Factors Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data lawfully, fairly, transparently, and securely.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, purchase our courses, or interact with our services.

1. Who We Are
Company name: C² Human Factors Ltd
Website: https://www.c2humanfactors.com
Email: [email protected]

We are the data controller for the personal data we process.

2. Data Protection and GDPR Compliance
C² Human Factors Ltd is registered with the UK Information Commissioner’s Office (ICO) as a data controller and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are committed to processing personal data lawfully, fairly, and transparently, and to protecting the rights of individuals whose data we hold.

Our ICO registration number is ZB983585.

3. What Personal Data We Collect
We may collect and process the following personal data:

a) Information you provide directly
Name
Email address
Billing address
Account details
Course enrolment, progress, and completion data
Communications with us (emails, messages, feedback)
b) Payment information
Payments are processed securely by third-party providers (see Section 7).
We do not store or process full payment card details.

c) Automatically collected data
IP address
Device and browser information
Usage data (pages visited, interactions, course engagement)
Cookies and similar technologies

4. How We Use Your Personal Data
We use your personal data to:

Provide access to our Services and courses
Manage enrolments, progress, and certificates
Process payments and issue receipts
Communicate with you about your account or Services
Send marketing communications where you have given consent
Improve our website, content, and learner experience
Comply with legal, regulatory, and accounting obligations

5. Lawful Bases for Processing
We process personal data under the following lawful bases:

Contract – to deliver the Services you have purchased
Consent – for marketing communications
Legal obligation – for tax, accounting, and regulatory compliance
Legitimate interests – to improve our Services and ensure platform security

6. Online Learning Platform (LearnWorlds)
Our courses are hosted on LearnWorlds, which acts as a data processor on our behalf.

LearnWorlds may process:

Account and login information
Course activity, progress, and completion data
Technical and usage data
LearnWorlds processes personal data in accordance with UK GDPR and applicable data protection laws.

7. Payment Processing (Stripe)
We use Stripe to process payments for our Services.

When you make a purchase:

Your payment details (such as card number, expiry date, and security code) are collected and processed securely by Stripe
We do not store or have access to your full payment card details
Stripe acts as a data processor and processes personal data in accordance with its own Privacy Policy and applicable data protection laws, including UK GDPR.

Stripe may process personal data outside the UK or European Economic Area. Where this occurs, appropriate safeguards are in place to protect your data.

You can view Stripe’s Privacy Policy here:
https://stripe.com/gb/privacy

8. Marketing Communications
If you opt in, we may send you:

Course updates
Educational content
Offers or promotions
You can unsubscribe at any time by:

Clicking the unsubscribe link in our emails, or
Contacting us at [email protected]
We do not sell your personal data to third parties.

9. Cookies
Our website uses cookies and similar technologies to:

Ensure proper website functionality
Analyse website usage
Improve user experience
You can manage or disable cookies through your browser settings. Some features of the website may not function correctly without cookies.

10. Data Sharing
We share personal data only where necessary and only with trusted third parties, including:

Learning platform providers (LearnWorlds)
Payment processors (Stripe)
Email and analytics service providers
All third parties are required to process personal data securely and in compliance with data protection law.

11. Data Retention
We retain personal data only for as long as necessary to:

Deliver our Services
Meet legal and accounting requirements
Resolve disputes
When personal data is no longer required, it is securely deleted or anonymised.

12. Your Rights
Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate or incomplete data
Request erasure of your data
Restrict or object to processing
Request data portability
Withdraw consent at any time
To exercise your rights, contact us at [email protected].

13. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no online system can be guaranteed to be completely secure.

14. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

https://www.ico.org.uk

15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The most recent version will always be published on our website.