Privacy Policy

1. Who we are

Amrani Academy is operated by Amrani IT Ltd, registered in England and Wales (company no. 14832007, registered office 86-90 Paul Street, London EC2A 4NE). Amrani IT Ltd is the data controller for personal data collected through this site. We teach data protection here, so we hold ourselves to what we teach: this policy is short because we collect very little.

2. What we collect, and why

You can browse the site and complete every lesson without giving us any personal data. There are no accounts and no signup.

When you take a final assessment, we collect the name you enter, your score, and the date. We use these to issue your certificate and to answer verification lookups afterwards. That is the certificate's entire purpose: anyone with your verification code can see the name on the certificate, the course, the score, and the issue and expiry dates. Only give a verification code to people you are happy to see those details.

Our lawful basis for this processing under UK GDPR is legitimate interests: issuing the certificate you asked for and keeping it verifiable. You choose the name that appears, and you can complete any course without taking the assessment at all.

3. Cookies and tracking

We do not set tracking or advertising cookies, and we do not run third-party advertising or social media trackers. If we add privacy-respecting, cookieless page analytics (such as Cloudflare Web Analytics) we will note it here.

4. Where your data lives

Certificate records are stored with Supabase, our database hosting processor. The site itself is served by Cloudflare. Assessment answers are scored server-side and correct answers are never sent to your browser; other users of the site cannot see your records except through the verification lookup described above.

5. How long we keep it

Certificate records are kept for as long as the certificate is valid, and for a reasonable period afterwards so that recently expired certificates can still be identified as expired rather than fake. We periodically delete records well past their expiry date.

6. Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data, and to object to or restrict processing. To exercise any of these, email us at the address below with your verification code. Deleting your record will stop the associated certificate verifying. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

7. Contact

Amrani IT Ltd, 86-90 Paul Street, London EC2A 4NE. Email: a@amrani.uk.