Small print
Privacy
Last updated 29 October 2026
This notice explains what personal data we collect when you visit this website, buy a course or write to us, why we use it, how long we keep it and what your rights are under the UK GDPR and the Data Protection Act 2018.
1. Who is responsible for your data
The controller is MOD Education Services Ltd (company number 16504541, registered in England and Wales), 39 Dawson Drive, Swanley BR8 7PN, United Kingdom. For anything about your data, write to hello@mod-education-services.co.uk.
2. What we collect and why
When you buy a course
On our own checkout form we collect your first and last name, e-mail address and billing address (country, address, postcode, town, optionally county or region), and, if you give them, a company name and company registration number. We use these to make the contract with you, to send your access to the recordings and to keep proper accounts. We pass them to our payment service provider so that it can process your payment; the card or wallet details themselves are entered on the provider’s secure page and never reach us.
Order records
For every order we keep a record of what you bought, the amount, the payment status, the date and the details above. UK accounting rules require us to keep these records for 6 years after the end of the financial year they relate to.
Chat
If you use the chat, we keep your messages, any files you send in it and, if you choose to give it, your e-mail address so we can reply. These are stored on our own server and deleted 12 months after the last message in the conversation.
Visit log
For security and fraud prevention, our server keeps a short log of visits: the time, your IP address, the country it belongs to, the page, the referring page and your browser’s identification. It is kept for 90 days and then deleted. We use it to spot abuse and attacks, not to build profiles or for advertising.
“Remember me”
Only if you tick the box at checkout, your checkout details are saved in a cookie on your own device so the form is filled in next time. See the cookies page.
3. Lawful bases
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Taking your order, payment and sending access | Contract — Art. 6(1)(b) |
| Keeping order and accounting records | Legal obligation — Art. 6(1)(c) |
| Answering chat messages and e-mails | Legitimate interests (helping people who ask us) — Art. 6(1)(f), or steps before a contract — Art. 6(1)(b) |
| Visit log for security and fraud prevention | Legitimate interests (keeping the site and payments safe) — Art. 6(1)(f) |
| “Remember me” cookie | Consent — Art. 6(1)(a); you can withdraw it at any time |
We do not sell your data, use it for advertising, or make decisions about you by automated means. We do not send marketing e-mails.
4. Who receives your data
We share personal data only with service providers who need it to do their job for us, by category:
| Recipient | What and why |
|---|---|
| Payment service provider | Your checkout details and the order amount, to process and record the payment and prevent fraud. |
| Hosting provider | Stores the website, the order records, the chat and the visit log on its servers. |
| IP location service | Receives the IP address from the visit log to tell us which country it belongs to. |
| Content delivery networks | Serve the photographs on this site (a stock photo network), the payment-method icons and the web fonts (Google Fonts). Your browser loads these directly, so they see your IP address and browser details when the page opens. |
We may also disclose data where the law requires it, for example to HM Revenue & Customs or the police.
5. International transfers
Some of these providers process data outside the United Kingdom, for example in the European Economic Area or the United States. Where they do, the transfer relies on UK adequacy regulations (such as those for the EEA and the UK Extension to the EU–US Data Privacy Framework) or on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses. You can ask us for details.
6. Your rights
Under the UK GDPR you have the right to:
access the personal data we hold about you · have it corrected · have it erased where we no longer need it · restrict or object to its use, including use based on our legitimate interests · receive the data you gave us in a portable form · withdraw consent at any time, without affecting what was done before.
To use any of these rights, e-mail hello@mod-education-services.co.uk. We reply within one month. Some records, such as order and accounting records, we have to keep for the period the law sets even if you ask us to delete them.
7. Complaints
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority: ico.org.uk, telephone 0303 123 1113.
8. Changes
If we change how we use personal data, we will update this page and the date at the top.