E-learning & Online Courses
This is a consumer account with lessons attached, on ordinary commercial terms, so marketing, ad targeting and profiling apply in full. The course providers you studied with get your details to market their own products. No retention number, except where tax rules force one.
The read at a glance
The record is small, but it says what you were trying to learn.
A leak exposes what you study, your progress, and the card behind it.
Enrolment and completion records persist for years; marketing profiles stay on file until you object.
Most courses ask only for an email; certificates may verify identity.
Industry profile reviewed 23 August 2026. Also machine-readable via the free API.
If it leaks
What you studied says what you were trying to fix or become: a career change, a gap you were closing, a subject you would not raise. Leaked with the card that paid for it, it reads as a plan you never announced.
What repeats in the policies
They log how you study, step by step
The purchase is the small part. The platform logs what you started, what you dropped and how long you spent, question by question, and that trail shapes what it sells you next. Take a verified certificate and an ID check adds your face.
A consumer account with lessons attached
You signed yourself up, so this runs on ordinary commercial terms: marketing, ad targeting and profiling apply in full. Nothing in the learning framing narrows them, and no records law sits over the file.
The course providers get you too
Your details are passed to the content providers and partners whose courses you took, so they can market their own products to you. The policy calls that sharing things that may interest you.
No number, except where the law forces one
Most policies give no retention figure at all and keep your record as long as they judge necessary. The exceptions are narrow: the purchase sits under tax rules for about six years, and face data from a certificate check is capped at two years.
What a company here typically holds
Worked out from the industry, not from any one company. What you actually handed over is yours to record.
What this can reveal about you
Built only from what this kind of service actually collects. A dimension that the data does not support is not listed.
Political views Possible
Course choices can imply beliefs and interests.
What lawfully stays after you leave
Two kinds of hold. Law sets it: a statute makes them keep it. They set it: a ground the company grants itself.
Tax and accounting records Law sets it about 6 years
Tax and company law makes them keep billing and payment records.
Records tied to a live or potential dispute They set it the limitation period of the claim
They can keep records to defend a live or possible legal claim.
Who wants this data
The value here is intent. What you are learning says what you are about to buy or change, which makes the profile worth targeting and worth passing to the companies whose courses you took. Expect the usual reservation to keep aggregated and de-identified data with no end date.
Sold or shared Likely
Learning interest and intent are strong marketing signals.
AI training Moderate
Coursework and questions train tutoring models.
Even anonymised, this can still be you
Your written answers carry a style that language models attribute at scale (Staab et al., ICLR 2024).
Name, date of birth, postcode Typical
Fifteen demographic attributes re-identify 99.98% of Americans in a released dataset (Rocher, Hendrickx and de Montjoye, Nature Communications, 2019); date of birth, postcode, and sex alone did it for most people in the first study of the problem (Sweeney, 2000).
Payment patterns Typical
Four card transactions identify 90% of people in payment data (de Montjoye et al., Science, 2015).
How you write Sometimes
Language models infer where a person lives, their income, and their sex from their writing alone, at near-human accuracy and at scale (Staab et al., ICLR 2024).
Face and voice Sometimes
A face, voice, or fingerprint template identifies a person directly; there is nothing left to anonymise, and it cannot be reissued like a password.
Browsing fingerprint Typical
Browser and device fingerprints were unique for 84% of visitors in the first large study (Eckersley, 2010), and sparse histories of what people viewed re-identified them against public reviews (Narayanan and Shmatikov, 2008).
The studies Estimating the success of re-identifications in incomplete datasets using generative models (Nature Communications 10, 3069, 2019)·Simple Demographics Often Identify People Uniquely (Carnegie Mellon University, Data Privacy Working Paper 3, 2000)·Unique in the shopping mall: On the reidentifiability of credit card metadata (Science 347 (6221), 2015)·Beyond Memorization: Violating Privacy via Inference with Large Language Models (ICLR 2024, 2024)·How Unique Is Your Web Browser? (Privacy Enhancing Technologies Symposium (PETS 2010), 2010)·Robust De-anonymization of Large Sparse Datasets (IEEE Symposium on Security and Privacy, 2008)
The wording that does the work
Clauses that recur across this industry, and what each one actually permits.
“to provide and improve our services”
The catch-all purpose. Analytics, profiling, personalisation and AI training all fit under it. When they want to do something new with your data, this sentence usually already allows it.
The move An objection tells them to use your data to run the service and nothing more.
“we do not sell your personal information”
Usually this means no cash changes hands. Your data can still go to ad networks, analytics firms and partners, because they count that as sharing rather than selling.
The move Use the do-not-sell switch where there is one, and put an objection in writing as well.
“service providers, partners, and affiliates”
This is how your data leaves with no name attached. Recipients are described by what they do rather than named, and you cannot send a request to a company you cannot name.
The move An access request can ask for recipients by name rather than by category, and UK and EU law put that choice with you.
“aggregated or de-identified information”
Taking your name off does not take away the pattern, and the pattern often still points at you. Policies give themselves free use of this data with no end date, on the basis that it is no longer about you.
The move If a deletion comes back as 'anonymised', keep the reply. It usually means de-identified, and it is their claim, not a fact you can check.
“retained as long as necessary, or as required by law”
They can keep it for legal duties, tax rules, fraud prevention, possible lawsuits and their own business reasons. None of those has a firm end date, so deletion turns into something you have to argue for.
The move Which reasons apply to you, and how long each runs, is a request of its own.
“you grant us a licence to use your content”
This is a contract term rather than a data setting, so a privacy request cannot undo it. A careful version ends when your account does. A broad one can be passed on, never expires and survives deletion.
The move Their terms say whether the licence ends when the account does. Close the account and log the date here.
“content providers and other business partners, so they may share information about their products and services that may be of interest to you”
The companies whose courses you took receive your details and market to you directly. It is worded as an interest match, and it runs under the ordinary commercial terms of an account you opened yourself.
The move An objection draws the line and asks which partners already have your details.
“deleted upon successful completion of verification and in any event no later than two years after collection”
A real limit, and a narrow one. It covers the face data and documents from a certificate check, and nothing else in the course record. Two years is the outside date they allow themselves.
The move A request asks what the check produced and whether it is still held.
Their own policy is the one that binds them. Pin it down with a request, and keep the reply.