1. Introduction

Springstone Ltd, trading as CORR Learning, located at 15 Thornhill Park, Rue De La Fontaine, St Peter, Jersey, JE3 7ZJ, ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, and protect the information you provide when using our services.

2. Contact Information

For any questions regarding this policy or your personal data, please contact:

Name: Loftur Loftsson
Email: lofturloftsson@corrlearning.com

3. Services Provided

We offer:

Online training via a Learning Management System (LMS)
SCORM-compliant course delivery
Face-to-face training sessions, both online and in-person

4. Data Collection

We collect the following personal data:

Name
Email address
Training progress and completion data

5. Data Collection Methods

Employer Submission: Employers provide us with your name and email address to set up training accounts.
LMS Tracking: Our LMS records your training progress and completion status.

6. Purpose of Data Processing

We process your personal data to:

Set up and manage user accounts
Track and report on training progress
Send training reminders
Provide technical support

7. Data Sharing

We share your data with:

Learnupon Ltd: Our LMS provider, for hosting and managing training content.
Google Workspace: For email communications and data storage.

8. Data Storage and Transfer

All data is stored within Jersey, the UK, and the EU. We do not transfer your personal data outside these regions.

9. Data Subject Rights

You have the right to:

Access: View the personal data we hold about you.
Rectification: Correct any inaccuracies in your data.
Erasure: Request the deletion of your data.

How to Exercise Your Rights:

Self-Service: You can update your information directly within the LMS.
Contact Us: Email lofturloftsson@corrlearning.com to request data deletion or other rights.
Employer Requests: Your employer may also request changes on your behalf.

10. Data Retention

We retain personal data for a period of 3 years after the completion of training or termination of the contract, whichever is later. This duration allows for reporting and compliance purposes. Data is securely deleted thereafter, including from backups, in accordance with our data retention policy.

11. Cookies and Tracking

Our LMS provider, Learnupon Ltd, uses cookies to enhance user experience and track training progress. For more information, please refer to Learnupon's Privacy Policy.

12. Security Measures

We implement the following technical and organizational measures to protect your personal data:

Encryption: Data is encrypted during transmission and at rest.
Access Controls: Role-based access ensures only authorized personnel can access personal data.
Regular Backups: Data is backed up regularly to prevent loss.
Endpoint Protection: Company devices are secured with antivirus software and encryption.
Third-Party Compliance: We use trusted providers with industry-standard security certifications, such as ISO 27001.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be communicated through our website or directly to you.