This is a draft. The facts about what the platform records and who can see it have been checked against the system itself, but the highlighted fields are not yet filled in and the wording has not been reviewed by a lawyer. Do not rely on it as a final agreement.
This page is published in English. Translations will follow; if they ever disagree, the English version is the one that counts.
This notice explains what Clic2Learn records about you, why, who can see it, and what you can ask us to do about it. It covers the Clic2Learn learning platform only.
Who is responsible
Clic2Learn is operated by [legal entity name], of [registered address]. For anything in this notice, including a request to see or correct your data, write to [contact email].
Your training centre or employer — the organisation whose courses you are enrolled in — decides which courses you take and who administers them. They can see your progress. Clic2Learn holds the data on their behalf.
What we hold
- Who you are. Your name, and whichever of these your OneClicID account provides: username, OneClicID number, phone number, email address. We do not hold your OneClicID password — signing in happens at OneClicID, not here.
- Your learning. Which organisation you belong to and your role in it, the courses you are enrolled in, which lessons you have completed, your quiz attempts and scores, assignments you submit and the feedback on them, attendance at live sessions, and the certificates you earn.
- Your preferences. The language you chose, and whether you have turned off email or SMS notifications.
- Payments, where a course is not free: the amount, the currency, and whether it succeeded. Card and mobile-money details are handled by the payment provider and never reach Clic2Learn.
Where it goes
Very little leaves the platform, and we would rather say so precisely than reassure you vaguely:
- OneClicID handles signing in, and tells Clic2Learn who you are.
- Notifications you have not turned off are sent through an email or SMS provider, which necessarily receives the address or number the message goes to.
- Our incident system records technical failures so they get fixed. A report can include the internal identifier of the account a failure happened to. It does not carry your coursework.
- Nothing goes to an AI model. Course material is written and reviewed before it is published; your questions, answers and submissions are not sent to any language-model provider.
We do not sell your data, we do not share it for advertising, and there are no analytics or tracking services on this site.
Certificates are public on purpose
A certificate is only worth something if an employer can check it. So anyone holding a certificate's serial number — printed on the certificate itself — can see the name of the person it was awarded to, the course, the date, and the awarding organisation, without signing in. Nothing else about you is on that page: not your contact details, not your scores, not your other courses.
If that is a problem for you, tell your training centre before you complete a course: a certificate that has been issued cannot be made private afterwards without revoking it.
Cookies
Four, all necessary, none for tracking: one that keeps you signed in, one that remembers your language, and two short-lived ones used during sign-in to protect the exchange against tampering. There is no cookie banner because there is nothing to consent to.
How long we keep it
Your learning record and certificates are kept for as long as your organisation uses Clic2Learn, because a credential you earned should still be checkable years later. Backups are held for [retention period] and then destroyed.
Your rights, and one honest limitation
You can ask for a copy of what we hold about you, ask us to correct anything wrong, and ask us to delete your account. Write to [contact email].
There is no self-service delete button yet, and deletion today is a manual process. We would rather tell you that than imply a control that does not exist. Note also that deleting your account does not withdraw a certificate already issued to you — an awarded credential is a statement your training centre made to the world, and revoking one is their decision, not an automatic consequence of closing an account.
Where your data is held
On servers operated by [hosting arrangement and country]. It is not copied to other regions.
Complaints
If you think we have handled your data badly, tell us first at [contact email] — most things are a misunderstanding we can fix quickly. If that does not resolve it, you can complain to [supervisory authority].
See also: Terms.