Privacy notice
Last reviewed 10 August 2026.
Controller
Seller and platform operator: DIGIDENT LTD, company number 17055539, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Contact: digidentAI@proton.me.
DIGIDENT LTD is the controller for this platform and is registered with the Information Commissioner's Office under reference ZC210644.
Information we use
We process account and certificate names, email, password hash, acceptance records, payment identifiers and status, purchases, entitlements, module progress, learner notebook and optional research-report text, revision history, automated feedback and rubric scores, quiz and examination scores, certificate records, support correspondence, security logs, optional marketing preference, and aggregated website-use and performance measurements. We do not receive or store online-banking credentials.
Why we use it
Contract data supplies purchased courses, saves learner writing, provides requested formative feedback, calculates the disclosed course result, records progression, issues certificates and supports the account. Legal-obligation and legitimate-interest processing supports accounting, fraud prevention, service security, aggregate website and performance measurement, quality monitoring, complaints and defensible certificate verification. Consent is used for optional marketing and can be withdrawn.
AI-supported feedback
When a learner requests feedback, the submitted text, selected public-resource details and relevant lesson context are sent to OpenAI through its API. The prompt does not include the learner's name or email. The service asks the model for structured supportive feedback and does not use learner writing to train a Digident model. If the service is unavailable, a deterministic rubric supplies immediate fallback feedback. Do not enter confidential, identifying or sensitive personal information in notebook fields.
Recipients
Cloudflare hosts the service and database and provides cookieless Web Analytics for aggregated page-use, referrer, device and performance reporting without creating advertising profiles; GoCardless operates hosted bank-payment authorisation; Resend delivers transactional email; OpenAI processes submitted writing solely to return requested assessment feedback under the configured API service. Professional advisers or authorities receive information only where lawful and necessary. We do not sell personal information.
Retention
Active account, learning, writing, revision and assessment records are kept while the account is used so progress and certificates remain defensible. Financial records are normally retained for the legally required accounting period. Certificate verification records remain while the certificate is valid; a revoked record may retain its code and revocation status to prevent misleading verification. Expired sessions and reset tokens are routinely deleted. Learners may export their writing directly and may request deletion subject to necessary financial, legal-claim and certificate-integrity records.
Your choices and rights
You may request access, correction, deletion, restriction, objection or portability where applicable, and complain to the ICO. Some records may be retained where required for tax, legal claims, fraud prevention or certificate integrity. Contact digidentAI@proton.me.
International processing
Some service providers may process data internationally using recognised safeguards. Their current terms and transfer arrangements should be consulted through their published privacy information.