Controller
Skill Up Break Free Ltd, company number 16907293, trading as Skill Up Break Free™ (“we”, “us”, “our”).
Registered address: 61 Bridge Street, Kington, HR5 3DJ.
Privacy contact: info@skillupbreakfree.co.uk
Last updated: 28 August 2026
1) What this notice covers
How we collect, use, share, secure and retain personal data for our services, and your rights.
2) What we do
We provide online, self-paced educational courses and training in employability and personal-development skills, delivered through our website. Courses are accessed and completed independently — there are currently no live sessions, coaching calls, or group meetings run through this site.
3) Data we collect
- Account data: name, email, username, password (hashed), time zone.
- Learning activity: enrolments, course progress, lesson/quiz completions, certificates.
- Order & checkout data: full name, billing address, shipping address, phone number, items purchased, order history, and payment status/transaction reference via Stripe and PayPal (we do not store full card numbers).
- Communications: emails, website comments or messages.
- Technical: IP address, device/browser info, cookie IDs, and order-attribution data automatically recorded by WooCommerce (e.g. how you arrived at the site and basic session activity).
4) How we collect it
- Directly from you: account registration, course enrolment, checkout, emails, website comments.
- Automatically via essential cookies and WooCommerce’s built-in order tracking, and via Google Analytics — but only if you accept the optional Analytics category in the consent banner.
- From our service providers (hosting, payments, email) to operate the service.
5) Purposes & lawful bases
| Purpose | Examples | Legal basis |
|---|---|---|
| Course delivery, tracking & certificates | Enrolment, progress, completions | Contract |
| Payments & accounts | Orders, invoices, tax/audit | Contract + Legal obligation |
| Platform administration / abuse prevention | Security, account integrity | Legitimate interests |
| Course-related emails | Enrolment confirmations, course updates | Legitimate interests |
| Marketing / newsletter | Optional updates unrelated to an active course | Consent |
| Security / essential cookies | Fraud/abuse prevention, site performance | Legitimate interests |
6) Who we share data with
Processors/partners: Fasthosts (hosting, incl. Installatron site management), WordPress/LearnDash/WooCommerce (course & store platform), Vimeo (video hosting, domain-restricted to skillupbreakfree.co.uk), WP Mail SMTP + Brevo (transactional email), Stripe and PayPal (payments), Wordfence (security), CookieYes (cookie consent management), Google Analytics (Google Ireland Limited / Google LLC) — website traffic statistics, only where you’ve given cookie consent. We do not sell personal data.
Your payments are taken and processed directly by Stripe and PayPal — we do not receive or store your card details. Settled funds are subsequently paid into our business bank account, but your personal data is not shared with our bank as part of that process; we do not currently accept direct bank transfer, cheque, or cash-on-delivery payments from customers.
7) International transfers
Some providers may process or store data outside the UK. Where this happens, we rely on UK-approved safeguards (UK Addendum to SCCs/IDTA) or adequacy regulations. Google Analytics, once connected, may transfer data outside the UK; Google provides its own safeguards for this (currently the UK Extension to the EU-US Data Privacy Framework, or the UK Addendum to SCCs).
8) How long we keep data
- Course progress/completions: 2 years after last activity.
- Account data: reviewed at 24 months of inactivity.
- Orders/invoices/financial records: 6 years (UK tax requirement).
- Enquiry emails (no ongoing relationship): 12 months.
- Marketing/newsletter subscribers: until unsubscribe, or 24 months inactivity.
We delete or irreversibly anonymise data when it’s no longer needed.
9) Security
We apply proportionate measures: multi-factor authentication on admin accounts, up-to-date security software (Wordfence), least-privilege access, and periodic review.
10) Your rights
You can request access, rectification, erasure, restriction, objection, portability, and can withdraw consent for consent-based processing. Contact info@skillupbreakfree.co.uk — we respond within one month. You can complain to the Information Commissioner’s Office (ico.org.uk).
11) Children
Our services are intended for adults (18+).
12) Cookies
We use a consent banner that blocks non-essential cookies until accepted, and a Cookie Notice listing the cookies, purposes and their duration. See our Cookie Notice.