e-Learning Privacy Policy
Effective: 1 June 2026
1. Who are we?
We are Compliance Taxi Limited, a subsidiary of Robert Quinn Consulting Limited. We offer online learning programmes via our learning platform, provided by our trusted supplier: LearnUpon.
We are a Data Controller and are registered with the Information Commission under reference ZB752940.
We understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who uses our learning platform, and we only collect and use personal data in ways that are described in this notice; and in a way that is consistent with our obligations and your rights under the law.
Please take some time to read this Privacy Policy and ensure that you understand it, if you have any questions you can contact us at:
elearning@rqcgroup.com
2. What Does This Policy Cover?
This privacy policy advises how we collect and use your personal data, when you enquire about our learning platform, and use our learning platform, in the following ways:
- When we respond to enquiries about our learning platform.
- When we sell a learning platform product directly to you.
- When we sell a learning platform product to a business and they ask you to use the product.
- In other circumstances, when we decide what learner data is required, and retain training records, issue certificates, manage access and associated reporting.
We may be Data Processor if you are accessing the learning platform because your employer requires you to do so – in this circumstance we will process your Personal Data as directed by your employer, and take all reasonable steps to keep your Personal Data secure.
3. What is Personal Data?
Personal Data is ‘any information relating to an identified, or identifiable, living individual’.
In simpler terms it is any information that can be used to identify a living person, either on its own or in connection with other information.
Personal Data can be, among other things, name, date of birth, home address, email address, telephone number; as well as fingerprints, gender, salary and other financial information.
4. What Data Do We Collect?
We collect the following Personal Data so that we can answer any enquiries about the learning platform, provide the platform, training materials, certificates and training records.
Personal Details:
- Name
- Business activities
- Role
Contact Information:
- Email address
- Telephone number
- Business name
- Business address
Log-in Data:
- Username
- Password
- IP address (if required to facilitate access)
Platform Usage Related Data:
We monitor log-in data and platform usage data so we can improve services, and offer support when required.
5. How Do We Use Your Personal Data?
We must have a lawful basis for processing your personal data. In relation to the learning platform we process your personal data on the lawful bases of:
- Performance of a Contract – so that we can provide information about contracted services, grant access to the platform, provide the services we have agreed to, and support you when required.
- Legitimate Interests – so that we can improve our services, provide information to you about similar services, and maintain the security of the learning platform.
- Legal Obligation – so that we can comply with any lawful request for Personal Data, such as a court order.
- Consent – so that we can market our services to you.
6. How Long Will We Keep Your Personal Data?
- When you request information and do not purchase a learning platform service from us – we will retain your Personal Data for 12 months from our last contact with you.
- When you purchase a learning platform service from us – we will retain your Personal Data for 7 years from the date that the service ends.
7. How and Where Do We Store Your Personal Data?
Personal data is processed manually and electronically, and may be held in a number of different places in line with the operations of a typical business. The locations your personal data could be stored include, but are not limited to:
- Our learning platform
- Our databases and customer relationship management system
- Emails on computers
- Mobile phones and tablets
- Contact address books
- Business cards
- Notebooks
- Electronic documents on our file servers
- Paper files in our offices
- Cloud back-up and storage.
The security of your personal data is important to us, we implement appropriate technical and organisational measures, to protect and secure your personal data.
We have a framework of policies, procedures and training to cover information and cyber security, confidentiality and data protection.
8. Sharing of Personal Data
We will only disclose personal data to third parties (Service providers, Regulators) as is necessary to provide our services and/or to comply with your instructions. We may share your personal data with our affiliates and subsidiaries. We do not give or sell your personal information to third parties.
In addition, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
If any of your personal data is required by a third-party, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third-party’s obligations under the law.
9. Transfer of Personal Data
Your Personal Data may be processed outside of the UK. This is because the organisations we use to provide our services to you may be based outside the UK. We have taken appropriate steps to ensure that the Personal Data processed outside the UK has an essentially equivalent level of protection to that guaranteed in the UK.
We do this by ensuring that:
- Your Personal Data is only processed in a country which the Secretary of State has confirmed has an adequate level of protection (an adequacy regulation), or
- We enter into an International Data Transfer Agreement (“IDTA”) with the receiving organisation and adopt supplementary measures, where necessary.
- In the case of the USA, we may rely on the EU-US Data Bridge, if applicable.
Your Personal Data may be processed outside the European Economic Area (“EEA”). This is because the organisations we use to provide our services to you are located outside of the EEA. We have taken appropriate steps to ensure that the Personal Data processed outside the EEA has an essentially equivalent level of protection to that guaranteed in the EEA.
We do this by ensuring that:
- Your Personal Data is only processed in a country which the European Commission has confirmed has an adequate level of protection (an adequacy decision), or
- We enter into Standard Contractual Clauses (“SCCs”) with the receiving organisations and adopt supplementary measures, where necessary.
- In the case of the USA, we may rely on the EU-US Data Bridge, if applicable.
10. Your Rights
Right to be informed
You have the right to know what personal data we collect about you, how we use it, for what purpose and in accordance with which lawful basis, who we share it with and how long we keep it. We use our privacy notice to explain this.
Right of access (commonly known as a “Subject Access Request”)
You have the right to receive a copy of the Personal Data we hold about you.
Right to rectification
You have the right to have any incomplete or inaccurate information we hold about you corrected.
Right to erasure (commonly known as the right to be forgotten)
You have the right to ask us to delete your Personal Data.
Right to object to processing
You have the right to object to us processing your Personal Data. If you object to us using your Personal Data for marketing purposes, we will stop sending you marketing material.
Right to restrict processing
You have the right to restrict our use of your Personal Data.
Right to portability
You have the right to ask us to transfer your Personal Data to another party.
Automated decision-making
You have the right not to be subject to a decision based solely on automated processing which will significantly affect you. We do not use automated decision-making.
Right to withdraw consent
If you have provided your consent for us to process your Personal Data for a specific purpose, you have the right to withdraw your consent at any time. If you do withdraw your consent, we will no longer process your information for the purpose(s) you originally agreed to, unless we are permitted by law to do so.
For more information about our use of your personal data, exercising your rights, or your choices as outlined above, please contact us as below:
Robert Quinn Consulting Limited
Ariel House
74A Charlotte Street
London W1T 4QJ
E: elearning@rqcgroup.com
T: + 44 (0) 207 958 9127
11. Complaints
You have the right to complain if you consider that we have not complied with the data protection law when handling your Personal Data. We will acknowledge receipt of your complaint within 30 days, investigate the matter without undue delay, and keep you informed of the progress and outcome.
If you are not satisfied with the outcome of your complaint, you can complain with the relevant supervisory authority. The supervisory authority in the UK is the Information Commission who can be contacted online at:
Or by telephone on 0303 123 1113
12. Contact Us
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details:
FAO: Compliance Officer
Robert Quinn Consulting Limited
Ariel House
74A Charlotte Street
London W1T 4QJ
E: elearning@rqcgroup.com
T: +44 (0) 207 958 9127
13. Changes to this Privacy Policy
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
This Privacy Policy was last updated; 1 June 2026
