Last updated: 09.01.2026
Privacy Policy
This Privacy Policy explains how The Risk Academy collects, uses, stores, and protects personal data when you visit our website or use our services.
We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner.
Who we are
The Risk Academy
Registered in England and Wales
Registered address:
15 Tabitha Close
Poole
Dorset
BH15 4FS
United Kingdom
Email: info@riskacademy.live
For the purposes of data protection law, The Risk Academy is the data controller responsible for your personal data.
What personal data we collect
We may collect and process the following categories of personal data:
Information you provide directly:
- Name
- Postal address
- Email address
- Telephone number
- Account login details such as username and password
- Billing information where required for purchases
- Information submitted via forms or registrations
- Information provided when downloading digital content such as PDFs
- Newsletter subscription details
Account and usage information:
- Course enrolments and progress
- Account preferences and settings
Payment information:
- Payments are processed via third-party providers. We do not store full payment card details on our systems.
Technical information:
- IP address
- Browser type and version
- Device and operating system information
- Basic usage data relating to site access
How we use your data
We use your personal data for the following purposes:
- To provide access to online training and digital products
- To create and manage user accounts
- To process payments and transactions
- To deliver purchased courses and content
- To send service related communications
- To send marketing emails where permitted
- To maintain website functionality and security
- To comply with legal and regulatory obligations
Legal basis for processing
We process personal data under one or more of the following legal bases:
- Performance of a contract
- Legitimate interests in operating and improving our services
- Consent, where required for marketing communications
- Compliance with legal obligations
Marketing communications
We may send marketing emails relating to our training, services, and updates.
Marketing communications are sent on a soft opt-in basis where permitted by law. You may unsubscribe at any time by using the link in our emails or by contacting us directly.
We do not currently send SMS or WhatsApp marketing messages.
Cookies and analytics
We use only essential cookies necessary for the operation of the website.
We also use Google Analytics to understand how visitors use our website. This data is aggregated and used for performance and improvement purposes.
We do not currently use advertising or retargeting cookies.
A cookie consent banner may be implemented in the future as required.
Payments and ecommerce
Payments on our website are processed through Stripe and our ecommerce platform.
Payment details are handled securely by our payment providers. We do not store or process full card details ourselves.
Third-party services
We may share personal data with trusted third-party service providers where necessary, including:
- Payment processors
- Email marketing platforms such as Mailchimp
- Learning management systems such as Absorb LMS
- Website hosting and infrastructure providers
These providers process data only on our instructions and are subject to appropriate confidentiality and security obligations.
International data transfers
Our users are primarily based in the UK and EU, but our services may be accessed globally.
We do not intentionally transfer personal data outside the UK or EU. Where international transfers occur, appropriate safeguards are applied in accordance with applicable data protection laws.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.
When data is no longer required, it is securely deleted or anonymised.
Your rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Request data portability
- Lodge a complaint with a data protection authority
UK users may contact the Information Commissioner’s Office.
You can exercise your rights by contacting info@riskacademy.live.
Account deletion
Users may delete their own accounts directly through the website. Once deleted, associated personal data will be removed or anonymised unless retention is required by law.
Children’s data
Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.
No system is completely secure, but we take reasonable steps to safeguard your information.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and continued use of the website indicates acceptance of the updated policy.
Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact:
