Privacy Policy

The Eastbourne Sussex School of Business & Economics ("ESBE", "we", "us") operates this learning platform. This policy explains what personal data we collect from students and applicants, why we collect it, how long we keep it, and the rights you have over it.

1. Data we collect

• Account and identity data — name, email address, date of birth, national ID number, phone number, university, faculty, and study level, provided when you register.
• Identity documents — copies of your national ID and university ID uploaded for identity verification, as required for admission and assessment integrity.
• Learning records — course enrolments, lecture progress, time spent on learning materials, quiz and assessment attempts with scores and answers, project submissions, and certificates issued to you.
• Technical and security data — login times and IP addresses, recorded in our security audit log.

2. Why we process it

• To provide your courses, track your progress, and issue certificates (performance of our agreement with you).
• To verify your identity and protect the integrity of assessments (legitimate interest and, where applicable, legal obligation).
• To maintain accurate academic records for accreditation and quality-assurance purposes (legitimate interest).
• To secure the platform and prevent misuse (legitimate interest).

3. Who can see your data

Your data is accessible only to authorised ESBE staff for the purposes above. Certificate verification (/verify) shows only your name, course title, and issue date to someone who already holds your certificate number. We do not sell personal data. Accreditation bodies may review academic records during audits under confidentiality obligations.

4. How long we keep it

• Academic records (enrolments, assessment results, certificates) — retained while your account exists and for as long as required to evidence your award.
• Identity documents — retained for the duration of your studies and deleted with your account.
• Security audit logs — retained as an immutable record for accreditation and security purposes.

5. Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data, and you may object to or ask us to restrict processing. To exercise any right, contact us through the support page or the contact details on your enrolment documents. You also have the right to complain to the Information Commissioner's Office (ICO).

6. Security

Passwords are stored hashed, access is role-based, sensitive administrative actions are recorded in an audit trail, and data is backed up regularly.

7. Changes

We will post any changes to this policy on this page and update the date above.