1. Who is responsible
The controller of personal data processed through openlearningpath.com ("Open Learning Path", "we", "us") is Daniel Reed (Open Learning Path), Oxford Street, Manchester M1 5AN, United Kingdom. Full details are in our Imprint. You can contact us about any privacy matter at info@openlearningpath.com.
2. What data we process
- Server log data. When you visit, our hosting server automatically records standard technical data: IP address, date and time of the request, the page requested, the referring page, and your browser and operating system type.
- Consent data. A small cookie that stores your cookie choices.
- Analytics and advertising data, such as cookie identifiers and information about your visit — only if you allow these cookies (see section 6).
- Messages you send us. If you e-mail us, we receive your e-mail address and the content of your message.
We do not offer user accounts, newsletters or payments. We never ask for financial information, private keys or recovery phrases.
3. Course progress stays in your browser
If you mark lessons as done or take the quiz, this information is stored only in your own browser's local storage. It is not sent to us, and we cannot see it. You can delete it at any time by clearing your browser's site data.
4. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Delivering the website, keeping it secure, preventing abuse (for example, blocking automated attacks) | Server log data | Legitimate interests, Art. 6(1)(f) |
| Remembering your cookie choices | Consent cookie | Legal obligation, Art. 6(1)(c), and legitimate interests |
| Measuring visits and the performance of adverts for this course, if enabled | Cookie identifiers, usage data | Consent, Art. 6(1)(a), which you can withdraw at any time |
| Answering your messages and correction reports | E-mail address, message content | Legitimate interests, Art. 6(1)(f) |
5. Hosting and security
The website is hosted on a server operated for us by a hosting provider, which processes server log data on our behalf. Automated protection analyses log data to block repeated attempts to attack the site; blocked IP addresses are released automatically after a short period.
6. Cookies and similar technologies
We use one necessary cookie to remember your cookie choices. Analytics and advertising cookies (for example, from Google) are loaded only after you accept them in the cookie banner; until then, Google tags, if present, run in a restricted consent mode that does not set advertising cookies. You can change your choice at any time via "Cookie settings" at the bottom of every page. Details are in our Cookie Policy.
7. Recipients
- Our hosting provider (processor), for operating the website.
- Google Ireland Limited and Google LLC, only if you consent to analytics or advertising cookies.
- Our e-mail provider, if you write to us.
- Public authorities, where we are legally required to disclose information.
We do not sell personal data, and we do not share it with crypto companies.
8. Transfers outside the EEA
Google may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework and, where applicable, the European Commission's Standard Contractual Clauses.
9. How long we keep data
- Server logs: up to 30 days, unless needed longer to investigate a specific security incident.
- Consent cookie: 6 months, after which we ask again.
- E-mails: as long as needed to handle your request, and no longer than 12 months after it is closed, unless we must keep them for legal reasons.
- Analytics and advertising cookies: see the durations in our Cookie Policy.
10. Your rights
Under the UK GDPR and, where it applies, the EU GDPR you have the right to access your data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. To exercise your rights, write to info@openlearningpath.com. We respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live, work or where an alleged infringement took place. In the UK, this is the Information Commissioner's Office (ICO).
11. Children
This website is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has contacted us, let us know and we will delete the information.
12. Automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.
13. Changes
We update this policy when our website or the law changes. The date at the top shows the current version.