Terms of Service

e-Learning Terms and Conditions 

Effective: 1 June 2026 

These Terms and Conditions apply to the sale and supply of e-learning courses, learning materials, related digital content, and access to the online learning platform made available by Compliance Taxi Limited ("we", "us" or "our"). By placing an order, registering for an account, or accessing any course or portal, the customer agrees to be bound by these Terms and Conditions. 

In these Terms and Conditions:  

"Business Customer" means a customer purchasing wholly or mainly for purposes of its trade, business, craft or profession;  

 "Courses" means the online courses, programmes, assessments, resources and related digital content offered by us;  

“Consumer” means a customer who is an individual acting for purposes which are wholly or mainly outside that individual's trade, business, craft or profession; 

"Learner" means any individual user to whom access to a Course is provided;  

“LMS” means the learning management system used by us to host and deliver the Portal and Courses from time to time; 

"Order" means a request to purchase Courses or Services, whether placed through the Portal, a checkout page, a proposal, an Order Form, email, or any other method accepted by us;  

"Order Confirmation" means our acceptance of an Order; 

“Order Form” means a written or electronic proposal, quotation, or order document signed or accepted by both parties setting out the specific Courses, Services, pricing, access periods, and other terms applicable to a particular Order; 

 "Payment Processor" means Third-party payment provider used to process payments; and  

"Portal" means our branded online learning portal through which the Courses and related services are delivered, which is operated using third-party hosted LMS technology;  

"Services" means the supply of Courses, Learner access, support, reporting, and related services described in the Order. 

Headings are for convenience only and do not affect interpretation. References to legislation include amendments, re-enactments, and subordinate legislation in force from time to time. 

We are Compliance Taxi Limited, a company incorporated in United Kingdom with company number 11497121 and registered office at Elsley Court, 20-22 Great Titchfield Street, London, United Kingdom, W1W 8BE. 

Our contact email for customer service, billing, and legal notices is e-Learning@rqcgroup.com. Our normal support hours are 9am to 5.30pm Monday to Friday. 

Where the Portal is white-labelled or branded in our name, the contract for the sale of Courses is between you and us, not between you and the underlying LMS provider, payment processors or any other third-party service provider, except that their own platform terms may separately govern your use of their services.  We may change the underlying LMS provider or other third-party service providers from time to time, provided that any such change does not materially adversely affect the Services. 

These Terms and Conditions apply to all Orders unless we agree otherwise in writing. 

If there is any inconsistency between these Terms and Conditions, an Order Form or proposal signed by the parties, a statement of work, and specific course information shown at checkout, the following order of precedence applies (with the document listed first prevailing over those listed after it) unless expressly stated otherwise: (a) signed Order Form or proposal; (b) these Terms and Conditions; (c) course-specific information; and (d) any purchase order terms or other customer terms, which are excluded unless we expressly accept them in writing. 

Any purchase order, acknowledgement, or similar document issued by the customer is for the customer’s internal administrative purposes only and does not form part of any contract between the parties. Our acceptance of, or our acting in accordance with, any such document shall not constitute acceptance of any terms and conditions contained in or referred to in that document. 

Customers must provide complete and accurate registration, billing, and account information and keep it up to date. We may suspend or terminate access if any information provided is materially inaccurate, incomplete, or misleading. 

If an Order is placed on behalf of a company, partnership, charity, public body, or other organisation, the person placing the Order confirms that they have full authority to bind that organisation to these Terms and Conditions. 

You are responsible for maintaining the confidentiality and security of all account credentials, including usernames and passwords, and for ensuring that Learners do the same. You are liable for all activity carried out through your account credentials, whether or not authorised by you, and you must notify us immediately if you become aware of any unauthorised access or security breach. 

An Order constitutes an offer by the customer to purchase the relevant Courses or Services. 

The contract is formed only when we issue an Order Confirmation, activate access to the Course, or otherwise notify you that we accept the Order. 

We may decline any Order at our discretion, including where pricing information is incorrect, the requested Course is unavailable, eligibility checks are not met, or fraud or misuse is suspected. 

Subject to payment and compliance with these Terms and Conditions, we grant the customer and authorised Learners a limited, non-exclusive, non-transferable, revocable licence to access and use the purchased Courses for internal training and learning purposes only during the access period stated in the Order or course description. The licence is for online access through the Portal only, unless we expressly provide downloadable materials as part of the Course. The licence terminates automatically on expiry of the applicable access period, and the customer and Learners shall have no further right to access or use the Course thereafter. 

Access rights are personal to the named Learner unless the Order expressly allows reassignment. Shared logins are prohibited. 

Unless stated otherwise in the Order Form, access to any course is available for six weeks from the date of enrollment. 

Unless expressly stated otherwise, no sale, transfer, or assignment of intellectual property rights is made under these Terms and Conditions. All intellectual property rights in the Courses and any materials provided remain the exclusive property of Compliance Taxi Limited and/or its licensors. 

Any third-party LMS providers or processors engaged by us may process customer content and Learner data only to the extent necessary to provide the Services. Such data will not be used to train artificial intelligence or machine learning models, or for unrelated analytics or product development, unless you expressly authorise that use in writing or such use is required by law. 

Courses are delivered electronically through the Portal. Delivery takes place when access credentials are issued, a Learner is enrolled, or the Course is otherwise made available in the Portal. 

Course availability may depend on internet access, device compatibility, browser settings, and third-party integrations outside our reasonable control. 

We may update, improve, substitute, or withdraw minor features, resources, or presentation aspects of the Portal or a Course to reflect changes in relevant laws and regulatory requirements, to implement minor technical adjustments and improvements (for example, to address a security threat), or to update digital content, provided that the overall nature and core learning purpose of the purchased Course are not materially adversely affected. If we make a change that materially adversely affects a Consumer’s use of a Course, the Consumer may contact us to end the contract and receive a refund for any Courses paid for but not yet substantially delivered. 

The customer must: (a) ensure that all information supplied to us is accurate and up to date; (b) ensure Learners comply with these Terms and Conditions and any Portal rules; (c) use the Courses only for lawful purposes and in accordance with any usage guidelines we provide; (d) maintain suitable systems, devices, internet connectivity, and security arrangements; (e) cooperate with us where reasonably required for enrolment, support, or investigation of misuse; (f) ensure that the number of Learners accessing the Courses does not exceed the number of licences or seats purchased; (g) not permit any third party to access the Courses unless expressly authorised by us; and (h) comply with all applicable laws and regulations, including data protection legislation, in connection with any personal data provided to us or processed through the Portal. 

The customer is responsible for selecting Courses that meet its own requirements. It is the customer’s sole responsibility to determine that the Courses meet the needs of the customer’s business and are suitable for the purpose for which they are used. Unless expressly agreed in writing, we do not warrant that any Course will satisfy a particular regulatory, professional, or internal policy requirement of the customer. 

You must not allow any Learner or third party to: copy, reproduce, republish, distribute, sell, rent, sublicense, broadcast, or exploit any Course content except as expressly permitted; reverse engineer or attempt to extract source code from any software element of the Portal; upload malicious code; interfere with security or performance; use automated means to scrape or harvest content or user data; impersonate others; or use the Portal in a way that is unlawful, defamatory, infringing, abusive, discriminatory, or harmful. 

We may suspend or terminate access immediately where we reasonably believe there has been unauthorised use, a security risk, non-payment, or a breach of these Terms and Conditions. 

We may also suspend supply to deal with technical problems or make minor technical changes, to update the Courses to reflect changes in relevant laws and regulatory requirements, or to make changes to the Courses as described in section 7. We will contact you in advance to tell you we are suspending access, unless the problem is urgent or an emergency. If we suspend access for more than 30 consecutive days, you may contact us to end the contract and we will refund any sums you have paid in advance for Courses you will not receive. 

Prices are as displayed on the Portal, quotation, or Order Form at the time of purchase, unless an obvious error has occurred. 

Unless stated otherwise, prices are exclusive of VAT and any other applicable taxes, which shall be payable in addition where legally chargeable. If the rate of VAT changes between your Order date and the date we supply the Course, we adjust the rate of VAT that you pay, unless you have already paid in full before the change in the rate of VAT takes effect. 

Payment is due in accordance with the checkout process, invoice, or Order Form. For online purchases, payment must be made by an approved method accepted through the Portal. For offline purchases payment must be made via bank transfer, in accordance with the invoice provided. Invoices for offline purchases may be issued using our accounting platform. 

Payments processed by third-party payment providers are also subject to the relevant provider’s own terms, policies, verification requirements, acceptable use rules, and fraud controls. We are not responsible for acts or omissions of those providers, delays caused by them, or any separate contract between you and them. 

If payment is not made on time, we may suspend access, refuse new enrolments, charge interest and recovery costs where permitted by law, and/or terminate the contract after giving notice. 

If the customer disputes any invoice in good faith, the customer must notify us in writing within 14 days of the invoice date, specifying in reasonable detail the nature and basis of the dispute. The customer must pay all undisputed amounts by the due date. Failure to notify a dispute within the 14-day period shall constitute acceptance of the invoice. We will investigate disputed amounts promptly and in good faith, and if the dispute is resolved in the customer’s favour, we will credit or refund any overpayment. Pending resolution of any dispute, we shall not exercise our rights to suspend access or terminate the contract solely in respect of the disputed amount, provided that all undisputed amounts have been paid when due. 

If any Course subscription is sold on a recurring or time-limited basis, the applicable term, renewal mechanics, course limits, expiry dates, and any non-use consequences will be stated in the Order Form. 

Unless expressly stated otherwise in the Order Form, unused courses, credits, or access rights do not roll over to any subsequent period and are non-refundable. The customer has no right to any refund, credit, or extension in respect of unused entitlements at the end of an access period or subscription term. 

Promotional pricing, discount codes, and discounts apply only on the terms stated with the offer, are personal to the original recipient, may be withdrawn or modified at any time before contract formation, and cannot be combined with other offers or discounts unless expressly stated otherwise. Promotional pricing applies only to the initial term and does not apply to any renewal period unless expressly stated. 

We may cancel or refuse any discount or promotional benefit where misuse, fraud, duplication, manipulation, or technical error is suspected, or where the customer does not meet any eligibility criteria for the promotion. 

If you are a Consumer, you have a legal right to change your mind within 14 days and receive a refund. 

Your legal right to change your mind. If you are a Consumer and purchase a Course online or otherwise at a distance, you have a legal right to change your mind about your purchase and receive a refund of what you paid for it. The cancellation period expires 14 days after the day on which we confirm acceptance of your Order. To cancel, please contact our e-Learning team at e-Learning@rqcgroup.com. We will refund you as soon as possible and within 14 days of you telling us you have changed your mind. We will refund you by the method you used for payment. We do not charge a fee for the refund. 

When you can’t change your mind. You cannot change your mind about an order for a Course after you have started to access or stream it, where you have given your express consent to immediate supply and acknowledged that you will lose your cancellation right. 

Giving your consent to immediate supply. Where you ask us to begin supplying a Course during the cancellation period, and confirm that you acknowledge that: 

 

Nothing in these Terms and Conditions affects any non-excludable statutory rights. 

For Business Customers, all purchases are final and non-refundable unless these Terms and Conditions, the Order Form, or a specific refund policy expressly states otherwise. 

If we agree in our sole discretion to offer a refund, we may deduct the value of any access already provided, administration costs, third-party fees, and any promotional discounts or credits previously applied. Any refund will be made using the same payment method used for the original purchase, unless otherwise agreed. 

Without limiting the foregoing, no refund is due for: (a) failure to complete a Course or any part of it; (b) change of mind by a Business Customer; (c) lack of compatible equipment, software, or browser; (d) internet connectivity issues or technical problems outside our reasonable control; (e) breach by the customer of these Terms and Conditions; (f) dissatisfaction with Course content, format, or outcomes; (g) failure to achieve any particular result, qualification, or accreditation; or (h) circumstances that would otherwise entitle the customer to terminate under these Terms and Conditions where we have offered a reasonable remedy or substitute. 

We may make reasonable changes to Course titles, descriptions, content, format, release dates, duration, or supporting materials where needed to improve quality, correct errors, reflect changes in law or guidance, address operational or technical issues, or maintain platform functionality. 

If we discontinue a purchased Course before substantial delivery and cannot provide a reasonable substitute acceptable to us, we will notify the customer and refund any sums paid in advance for the affected undelivered Course. This refund shall be the customer’s sole and exclusive remedy in respect of any Course discontinuation or withdrawal, and we shall have no further liability to the customer in connection with such discontinuation. 

Where a Course includes a certificate, completion record, or assessment outcome, this will only be issued where the stated completion criteria are met and any applicable fees have been paid in full. We may withhold or revoke any certificate or completion record if we subsequently determine that the completion criteria were not genuinely met or that there was any fraud, cheating, or misrepresentation by the Learner. 

Unless expressly stated otherwise in writing, completion of a Course does not guarantee any external accreditation, professional qualification, employment outcome, regulatory approval, competence level, or business result. The customer acknowledges that any third-party accreditation, recognition, or CPD allocation is subject to the requirements of the relevant accrediting body and is outside our control. We accept no liability for any failure to obtain or maintain any external accreditation or recognition. 

All intellectual property rights in the Courses, Portal branding supplied by us, text, graphics, video, audio, assessments, downloadable materials, reports, and related content are owned by us and/or our licensors and remain vested in us and/or our licensors at all times. Nothing in these Terms and Conditions shall operate to transfer, assign, or grant to the customer or any Learner any intellectual property rights in any Course, Portal, or any materials provided by us. The customer’s rights to access and use the Courses are limited to the licence granted in section 6 and are subject to the acceptable use restrictions in section 9. 

The customer shall not remove copyright notices, trademarks, confidentiality legends, or other proprietary markings. 

If the customer or a Learner submits feedback, suggestions, reviews, comments, or ideas relating to the Courses or Portal, we may use, incorporate, sublicense, and exploit those materials without restriction, attribution, or payment, provided that this does not override applicable data protection law or confidentiality obligations. 

Each party shall comply with applicable data protection law. 

The customer acknowledges that use of the Portal involves the processing of personal data. Our handling of personal data is described in our privacy notice, which is made available on the Portal and at checkout and registration. Customers should review the privacy notice before placing an Order. 

The Business Customer is responsible for ensuring it has an appropriate lawful basis and has provided all necessary notices to Learners before providing their personal data to us for enrolment or administration. 

The processing of personal data in connection with the Services is governed by our Data Processing Agreement, which can be found in the appendix to these Terms and Conditions. By placing an Order, Business Customers agree to be bound by the terms of the Data Processing Agreement as in force at the time of the Order. 

The Portal is delivered using third-party infrastructure and services, including (as at the date of these Terms and Conditions), LearnUpon as the underlying LMS and payment providers such as Stripe and PayPal. We may change third-party providers from time to time in accordance with section 2.  

Certain features may also depend on email providers, browsers, identity systems, analytics tools, or cloud hosting services. 

We do not control third-party services and do not guarantee that they will be available without interruption at all times. We are not liable for outages, delays, or failures caused by third-party networks, software, payment gateways, telecommunications, hosting providers, or force majeure events, except to the extent liability cannot legally be excluded. 

Our LMS provider disclaims all warranties of fitness for a particular purpose and non-infringement in respect of the platform. Accordingly, we do not pass through any warranty from our LMS provider to the customer beyond the express warranties stated in section 21 of these Terms and Conditions 

Learners may also be required to comply with relevant third-party terms when interacting with those services. 

We will use reasonable care and skill in making the Courses available and in providing any support expressly included with the purchase. 

Unless expressly agreed in writing, support does not include bespoke consultancy, custom content development, customer IT administration, or guaranteed response times. 

We may carry out maintenance, updates, and security changes from time to time. We will use reasonable efforts to minimise material disruption. 

Without limiting the foregoing, we do not guarantee that the Portal will be uninterrupted, error-free, or free from viruses or other harmful components at all times. It is the customer’s responsibility to implement appropriate IT security measures (including anti-virus and other security checks) in connection with their use of the Portal. 

We warrant that we will provide the Services with reasonable care and skill. Where the customer is a Consumer, the Services will comply with the requirements of applicable consumer protection legislation in respect of digital content, including the requirements that digital content must be as described, fit for purpose, and of satisfactory quality. 

Except as expressly stated in these Terms and Conditions, and to the fullest extent permitted by law, the Services and Courses are provided on an “as is” and “as available” basis. We exclude all other warranties, representations, conditions, and terms, whether express or implied, including any implied warranties of fitness for a particular purpose, merchantability, non-infringement, accuracy, completeness, reliability, availability, or uninterrupted access. 

Business Customers acknowledge that: (a) the Courses are educational resources and are not legal, regulatory, compliance, tax, or other professional advice unless expressly stated in writing; (b) Course content may become outdated, and we do not warrant that it reflects the current state of law, regulation, or best practice at the time of access; (c) third-party content, integrations, or links are provided for convenience only and we make no representations or warranties regarding their accuracy, availability, or suitability; and (d) Business Customers should obtain independent professional advice where appropriate before relying on any Course content. 

Losses we never limit or exclude. Nothing in these Terms and Conditions shall limit or exclude our liability for:  

Our liability to Business Customers. If you are a Business Customer then, except in respect of the losses described in the paragraph above:  

Our liability to Consumers. If you are a Consumer, we are not responsible for losses you suffer caused by us breaking this contract if the loss is:  

Nothing in this clause affects your statutory rights relating to faulty digital content or services. 

The Business Customer shall indemnify and keep us indemnified against losses, liabilities, costs, and expenses (including reasonable legal fees) arising from: (a) misuse of the Portal or Courses by the customer or its Learners; (b) breach of applicable law by the customer;  (c) unauthorised sharing of login credentials or Course content by the customer or its Learners by the customer or its Learners; or (d) any third-party claim arising out of the customer’s or its Learners’ use of the Courses, Portal, or any content uploaded or distributed. 

We may suspend access immediately on notice, or without notice where reasonably necessary, if the customer: (a) fails to pay any amount when due; (b) breaches these Terms and Conditions; (c) creates or poses a security risk to the Portal, other customers, or Learners; (d) becomes insolvent, enters administration, liquidation, or any analogous process, or is unable to pay its debts as they fall due; (e) uses the Portal or Courses unlawfully, abusively, or in a manner that may bring us into disrepute; or (f) is the subject of any investigation, complaint, or proceeding by a regulatory or law enforcement authority that could affect our ability to provide the Services. During any suspension, the customer remains liable for all applicable fees. 

Either party may terminate a Business Customer contract for material breach not remedied within 14 days of written notice specifying the breach, or immediately on written notice if the other party becomes insolvent, enters administration, liquidation, or any analogous process, or is unable to pay its debts as they fall due. We may also terminate immediately on written notice if the customer fails to pay any amount within 30 days of the due date, or if continued provision of the Services would expose us to legal, regulatory, or reputational risk. 

On termination or expiry for any reason: (a) all access rights end immediately unless otherwise stated in writing; (b) the customer and all Learners must immediately cease using the Courses and Portal; (c) the customer must pay all outstanding fees and any other amounts owing to us; and (d) each party must return or destroy (at the other party’s option) any confidential information of the other party in its possession, except to the extent retention is required by law or for regulatory compliance purposes. 

Termination does not affect: (a) accrued rights and remedies of either party; (b) payment obligations arising before or as a result of termination; or (c) clauses intended to survive termination, including clauses on intellectual property, confidentiality, liability, indemnity, payment, data protection, and governing law, which shall continue in full force and effect. 

Following termination or expiry, we may delete or anonymise customer and Learner data in accordance with our retention policies, legal obligations, and any applicable privacy notice or data processing agreement. We have no obligation to retain, return, or provide copies of any customer data, Learner data, or Course completion records after termination unless expressly agreed in writing or required by law. 

Each party shall keep confidential all confidential information disclosed by the other party in connection with the contract, including (in relation to information disclosed by us) non-public pricing, discounts, promotional offers, fee structures, or other commercial terms, and (in relation to information disclosed by a customer) non-public business or operational information, and shall not disclose it except to personnel, professional advisers, or subcontractors who need to know it and are bound by confidentiality obligations, or where disclosure is required by law. 

Confidential information does not include information that is or becomes public other than through breach, was lawfully known before disclosure, or is independently developed without use of the confidential information. 

If our provision of Courses is delayed by an event beyond our reasonable control, including internet or telecommunications failure, cyberattack, utility outage, pandemic, industrial dispute, governmental action, failure of hosting or cloud providers, or other force majeure events, we will contact you as soon as possible to let you know and do what we can to reduce the delay.  

As long as we do this, we will not compensate you for the delay, but if the delay is likely to be substantial you can contact us to end the contract and receive a refund for any Courses you have paid for in advance but not received. Our obligations shall be suspended for the duration of the event. 

Notices under these Terms and Conditions must be in writing and sent by email to the contact details specified by the parties, or by another method expressly agreed in writing. Notices to us must be sent to e-Learning@rqcgroup.com (or such other address as we notify to you). The customer must keep its contact details up to date and notify us promptly of any changes. 

Notices are deemed received: (a) if sent by email, at the time of transmission if sent during business hours (9.00 am to 5.30 pm Monday to Friday, excluding public holidays) at the recipient’s location, otherwise at 9.00 am on the next business day; or (b) if sent by post, on the second business day after posting (or the fifth business day if sent internationally). 

Customers should first raise any issue with our e-Learning team using the contact details provided on the Portal or in these Terms and Conditions. 

We will use reasonable efforts to investigate complaints promptly and in good faith. 

If the customer is a Consumer, nothing prevents the customer from using any statutory rights or any alternative dispute resolution process that may be available. 

These Terms and Conditions constitute the entire agreement between the parties in relation to their subject matter, except for fraud or fraudulent misrepresentation. If you are a Business Customer, you acknowledge that you have not relied on any statement, promise, representation, assurance or warranty made or given by us or on our behalf which is not set out in these Terms and Conditions and that you have no claim for innocent or negligent misrepresentation based on any statement in these Terms and Conditions. 

We may assign or subcontract our rights and obligations under these Terms and Conditions, provided that doing so does not reduce the customer’s legal protections. 

The customer may not assign, transfer, sublicense, or otherwise dispose of any rights under the contract without our prior written consent. 

This contract is between the customer and us. No other person shall have any rights to enforce any of its terms, whether under the Contracts (Rights of Third Parties) Act 1999 or otherwise, unless expressly stated in these Terms and Conditions. 

If any provision is held invalid or unenforceable, the remaining provisions shall continue in full force and effect. 

No failure or delay in exercising any right shall constitute a waiver. 

These Terms and Conditions constitute the entire agreement between the parties in relation to their subject matter, except for fraud or fraudulent misrepresentation. 

We may update these Terms and Conditions from time to time. Where we make changes, we will publish the updated Terms and Conditions on the Portal. Changes will not affect Orders already accepted before the date of the change.  

These Terms and Conditions and any dispute or claim arising out of or in connection with them shall be governed by the laws of England and Wales and the courts of England and Wales shall have exclusive jurisdiction, except that if the customer is a Consumer resident in another part of the United Kingdom, mandatory consumer jurisdiction rules may apply. 

 APPENDIX A – Data Processing Agreement 

The processing of personal data in connection with the Services is governed by our Data Processing Agreement. By placing an Order, Business Customers agree to be bound by the terms of the Data Processing Agreement as in force at the time of the Order. 

BETWEEN: 

(1) Business Customer (“Data Controller”) and 

(2) Compliance Taxi Limited, a company registered in England with company number 11497121, whose registered office is at Elsey Court, 20-22, Great Titchfield Street, London, W1W 8BE (“Data Processor”). And is registered with the Information Commission under reference ZB752940

WHEREAS:  

(1) Under an agreement between the Data Controller and the Data Processor (“the Service Agreement”) the Data Processor provides tothe Data Controller the Services described in Schedule 1. 

(2) The provision of the Services by the Data Processor involves it in processing the Personal Data described in Schedule 2 on behalf of the Data Controller. 

(3) Under the Data Protection Law (Article 28, paragraph 3), the Data Controller is required to put in place an agreement in writing between the Data Controller and any organisation which processes personal data on its behalf governing the processing of that data. 

(4) The Parties have agreed to enter into this Agreement to ensure compliance with the said provisions of the Data Protection Law in relation to all processing of the Personal Data by the Data Processor for the Data Controller. 

(5) The terms of this Agreement are to apply to all processing of Personal Data carried out for the Data Controller by the Data Processor and to all Personal Data held by the Data Processor in relation to all such processing. 

IT IS AGREED as follows:

1. Definitions and Interpretation  

In this Agreement, unless the context otherwise requires, the following expressions have the following meanings: 

“Data Controller”, “Data Processor”, “processing”, and “data subject” shall have the meanings given to the terms “controller”, “processor”, “processing”, and “data subject” respectively in Article 4 of the Data Protection Law; 

“Data Protection Law” means the United Kingdom (“UK”) General Data Protection Regulation (“GDPR”) or the EU (“European Union”) General Data Protection Regulation (“GDPR”) (whichever is applicable); 

“ICO” means the Information Commissioner’s Office, the UK’s independent public authority established under Article 51 of the UK GDPR; or any subsequent body; 

“Personal Data” means all such “personal data”, as defined in Article 4 of the Data Protection Law, as is, or is to be, processed by the Data Processor on behalf of the Data Controller, as described in Schedule 2; 

“Services” means those services described in Schedule 1 which are provided by the Data Processor to the Data Controller and which the Data Controller uses for the purposes described in Schedule 1; 

“Sub-Processor” means a sub-processor appointed by the Data Processor to process the Personal Data; and 

“Sub-Processing Agreement” means an agreement between the Data Processor and a Sub-Processor governing the Personal Data processing carried out by the Sub-Processor, as described in Clause 9. 

“Supervisory Authority” shall have the meaning given to it in Article 4 of the EU GDPR  (an independent public authority which is established by a member state pursuant to Article 51 of the EU GDPR) 

   The Data Processor is only to carry out the Services, and only to process the Personal       Data received from the Data Controller: 

All copyright, database rights, and other intellectual property rights subsisting in the Personal Data (including but not limited to any updates, amendments, or adaptations to the Personal Data made by either the Data Controller or the Data Processor) shall belong to the Data Controller or to any other applicable third party from whom the Data Controller has obtained the Personal Data under licence (including, but not limited to, data subjects, where applicable). The Data Processor is licensed to use such Personal Data under such rights only for the purposes of the Services, and in accordance with this Agreement. 

Subject matter of processing: Provision of e-learning courses, learner access, platform administration, course completion tracking, reporting, support, certificates, training records, customer administration and related services. 

Duration of processing: For the duration of the Services and thereafter as required for retention, legal, regulatory, audit, accounting, dispute resolution, security and business record purposes. 

Nature of processing: Collection, recording, organisation, structuring, storage, hosting, access, retrieval, consultation, use, disclosure by transmission, reporting, restriction, deletion and destruction. 

Purpose of processing: To enrol Learners, provide access to online courses, administer training, monitor progress, provide support, generate completion records and certificates, provide reporting to the Customer, maintain security, and comply with legal or regulatory obligations. 

Categories of Data Subjects: Learners, Customer personnel, administrators, managers, training contacts, billing contacts and support contacts. 

Processing locations: United Kingdom, EEA and other locations used by Compliance Taxi, LearnUpon or authorised Sub-processors, subject to applicable transfer safeguards. 

Controller: Customer, where it purchases access for its Learners and determines the purposes and means of processing. 

Processor: Compliance Taxi Limited. 

Sub-processors: LearnUpon as LMS provider; hosting, email, payment, CRM, accounting, support, IT, cloud storage and professional service providers as reasonably necessary to provide and administer the Services. 

Types of Personal Data: Name, business activities, role, email address, telephone number, username, password or authentication details, IP address where required to facilitate access, login data, platform usage data, course progress, assessment results, completion status, certificate records, customer account details and support communications, financial data for payments. 

Special Category Data: Not intended to be processed unless expressly agreed in writing. 

Criminal Offence Data: Not intended to be processed unless expressly agreed in writing. 

 

Schedule 4 - List of Approved Sub-Processors 

LearnUpon 

Purpose: Provision of the learning management system used to host and deliver the e-learning platform, enroll Learners, administer courses, record progress, support reporting and certification.  

Location: UK, EEA and/or other locations used by LearnUpon and its authorised Sub-processors, subject to applicable contractual and transfer safeguards. 

 

Stripe and Paypal 

Purpose: Processing customer payments.  

Location: As set out in the relevant provider’s terms and privacy documentation. 

 

Purpose: Customer administration, billing, support, communications, storage, legal, audit and business operations.  

Location: UK, EEA and/or other locations subject to applicable safeguards.