Privacy Policy

The data controller is Cumbria Rural Academy CIC (06830456 (Community Interest Company)), Bigland, Backbarrow, Ulverston, Cumbria, LA12 8PB. Privacy queries should be sent to zara@harnesschange.co.uk.

Privacy queries: zara@harnesschange.co.uk.

• Account information — first and last name, email address, password (stored hashed), account creation date.
• Purchase and payment information — order reference, amount, currency, payment status and the reference given to us by our payment processor. We do not receive or store your full card details; these are handled directly by Stripe.
• Course progress and assessment results — modules completed, assessment attempts, scores and dates.
• Certificate and completion records — certificate number, name as printed, completion date and score.
• Communications — messages you send us and our replies.
• Technical and device information — IP address, browser and device type, and log data. We do not use analytics cookies.

• Providing the course, your account, assessment and certificate — contract.
• Taking payment and keeping financial records — contract and legal obligation.
• Security, fraud prevention and service improvement — legitimate interests.
• Optional analytics and any marketing cookies or emails — consent.

• Payment processing — Stripe
• Website and course hosting — Lovable
• Database and authentication — Lovable Cloud
• Email delivery — No separate email provider; we use your account email for transactional notifications only.
• Analytics — Not currently used.

We share personal data only with the processors listed above, with professional advisers where necessary, and where we are required to do so by law. We do not sell personal data.

Some processors may store data outside the UK. Where they do, appropriate safeguards such as UK adequacy regulations or the International Data Transfer Addendum apply.

• Account and progress records — 6 years after your last activity.
• Certificate and completion records (needed for verification) — kept indefinitely.
• Payment and accounting records — 6 years.
• Support correspondence — 3 years.

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise a right, email zara@harnesschange.co.uk.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would appreciate the chance to put things right first.

Our use of cookies, and how to change your consent, is explained in our Cookie Policy.

Cumbria Rural Academy CIC, Bigland, Backbarrow, Ulverston, Cumbria, LA12 8PB, zara@harnesschange.co.uk.