Last updated: 20 January 2026
1. Who we are
Openforwards Ltd is the controller for course/customer/member data.
Contact: support@openforwards.com | +44 121 523 1108 | The Jewellery Business Centre, 95 Spencer Street, Birmingham, UK. B18 6DA.
2. What this notice covers
This notice applies when you:
- buy or enrol in an online course
- join a membership/subscription
- participate in a professional community space
- attend live online training, webinars, or workshops
- request CPD certificates or verification
3. Personal data we collect
Account and enrolment
- Name, email, billing address, login credentials (or SSO identifiers)
- Purchase history, subscription status, invoices/receipts
Learning and participation
- Course progress, quiz results [if used], attendance, CPD hours/certification logs
- Feedback, surveys, support messages
- Community profile information and posts/comments (depending on your settings)
Technical data
- Device and usage data for platform functionality and security
- Cookies and tracking (see Cookie Policy)
Special category data
We do not require health information for professional training. If you choose to share sensitive information in a community or training context, we treat it with care but encourage you not to share anything you wouldn’t want others (or moderators) to see.
4. How we use your data (purposes + lawful bases)
We use your data to:
- deliver courses/membership and provide support (contract)
- take payment and manage billing (contract/legal obligation)
- issue CPD certificates and verify attendance (contract/legitimate interests)
- manage community safety and moderation (legitimate interests)
- improve content and platform performance (legitimate interests, and consent where cookies/tracking require it)
- send service emails (purchase confirmations, important updates) (contract)
- send marketing (newsletters/offers) (consent or legitimate interests, depending on context)
5. Digital content, cancellations and refunds (signposting)
Your Terms of Sale and Cancellation/Refund Policy explain cancellation rights for online purchases, including the typical 14-day cooling-off period and the rules that apply when digital content is supplied during that period.
6. Who we share data with
We share data only as needed with providers such as:
- learning platform / LMS [Mighty Networks]
- community platform [Mighty Networks]
- payment processor [Stripe]
- video hosting / webinar tools [Zoom]
- email provider [GenieAI]
- analytics tools (consent-based where required)
7. International transfers
Some learning/community platforms may store data outside the UK. We ensure appropriate safeguards are in place.
8. How long we keep your data
Examples:
- Course and membership account data: for the duration of your account + 24 months after closure (support/records)
- CPD/certification logs: 6 years (professional verification)
- Financial records: 6 years
We apply clear retention criteria (contract, accounting, disputes, platform safety).
9. Your rights
You have rights including access, correction, erasure, restriction, objection, portability, and to withdraw consent (where used).
10. Complaints
Contact us first if you can. You also have the right to complain to the ICO.
11. Changes to this notice
We may update this notice. The latest version will be posted on this page.