This Privacy Policy explains how Candle Quilt IT collects, uses, discloses, and retains personal data in connection with its website and online courses on IT security and digital literacy.
Data collection and cookies
This section outlines the categories of personal data collected, where that information comes from, the cookies used across the site, and the controls available to users.
We may collect identifiers, contact details, account credentials, course enrolment records, payment-related information where applicable, device and browser data, usage logs, and communications sent to us. We also process information you choose to provide in forms, surveys, or support requests.
We receive data from you when you register, enrol, submit forms, or contact us. We also collect data automatically from your device and browser, including log data, cookies, and similar technologies. In limited cases, we may receive information from service providers that help us operate the website.
Our site may use essential cookies needed for security and core functions, preference cookies that remember settings, and analytics cookies that help us understand site performance and course usage. Cookies may be session-based or persistent, depending on their purpose.
You can usually control cookies through your browser settings and, where available, through on-site preference tools. Blocking some cookies may affect site functions, such as sign-in, course access, or saved preferences. We do not rely on cookie settings to override legal or operational requirements.
We use personal data to provide and manage accounts, deliver courses, process enrolments, communicate with users, maintain security, monitor site performance, improve content, handle support requests, and meet legal or compliance obligations. We may also use data to prevent misuse and to keep records of transactions and interactions.
We may share personal data with hosting, analytics, security, payment, communications, and other operational providers that support the website and course delivery. These parties are expected to use the data only for the services they provide to us and to apply appropriate confidentiality and security measures.
We may disclose personal data where necessary to comply with legal obligations, respond to lawful requests, enforce our terms, protect our rights, or address security and fraud concerns. We may also share information when needed to establish, exercise, or defend legal claims.
Subject to legal limits, you may request access to your personal data, correction of inaccurate information, deletion of certain data, or restriction of some processing. You may also object to processing in limited situations and withdraw consent where processing is based on consent.
To protect privacy and security, we may ask for details needed to confirm your identity and understand your request. If a request cannot be fully satisfied, we will explain the reason where required by law.
We retain personal data for the period needed to provide services, maintain records, resolve disputes, meet security needs, and comply with legal obligations. When data is no longer required, we delete it, anonymise it, or restrict it as appropriate to the circumstances.
If we make material changes, we will post the updated policy on this page and may provide additional notice where appropriate. The revised version takes effect when published unless a later effective date is stated.
