1. What we hold

Your name and email address, the courses you are enrolled on, your progress and assessment results, and the certificates you have earned. If your employer bought your course, they can see your progress and your certificate status on those courses.

2. Payment data

We do not store card details. Payments are handled entirely by Stripe.

3. Course providers

Where a course was written by a third-party provider, that provider is paid a share of the sale. They are shown how many people took the course. For courses delivered on Echo3, we do not share learner names or email addresses with the provider. If the course runs on the provider’s own system, we send them the purchaser’s name and email and each learner’s full name, postal address, mobile number, date of birth and email so they can arrange training and certificate delivery. These details are collected at checkout and the sharing is explained before payment.

4. How long

Training records are compliance records, so we keep them. If you ask us to erase your data we remove your name and email address and keep the training record itself, because an employer may be legally required to evidence it.

5. The verification page

Certificates carry a code that anyone can check. The check shows the holder name, the course and the dates, and nothing else.