Privacy & Data Handling Notice

AI Accelerator Learn Platform · learn.aiaccelerator.uk · Last updated 21 October 2026

This notice explains what the Learn Platform collects, why, how long we keep it, who processes it on our behalf, and the rights you have over your data. We keep it current as the platform evolves; we may refine the wording following review, but the substance of how we handle your data is described here.

1. Who we are

The AI Accelerator Learn Platform (“the platform”) is operated by AI Accelerator Limited (“we”, “us”). We provide AI-literacy training to organisations, whose employees (“you”, “learners”) use the platform to take that training.

Because learners are usually employees of a client organisation that has commissioned the training, that organisation is the data controller for its employees' data and we act as a processor on its behalf for the training records, while acting as a controller for operating and securing the platform itself. Where your access was arranged by your employer, you can raise data requests either with us or with them.

2. What we collect and why

We collect only what the platform needs to deliver training, show you your progress, and improve the courses:

We do not sell your data, and we do not use it for advertising.

3a. Your course feedback, and the choice you have

When you finish a course we ask what went well, what could be better, and what else you would like covered. Those answers go to your programme lead — the person at your organisation running the programme — on their dashboard, with your name against them by default. That is deliberate: it is how a comment turns into a conversation about your team’s learning rather than an anonymous data point.

You can send the words without the name. Tick “Share this feedback without my name” on the survey and your programme lead sees what you wrote and not that it was you. Your ratings still count towards every group figure, so nothing is lost from the result by choosing it.

This is enforced in our database rather than in the page: with that box ticked, the record simply is not readable by your programme lead, and the comment reaches their dashboard with nothing attached to identify you. You can change your mind by resubmitting the survey.

3b. What your programme lead can see about your learning

Your programme lead and AI Accelerator can see, by name, which lessons, tips, ideas and activities you opened and completed, with dates. That is the list of items itself, not only a count: for each one, when you first and last opened it, how many times, and when you completed it (for example by finishing a lesson, or by pressing Mark as done or Mark as tried).

Your programme lead sees this only for the people in their own organisation. That is enforced in our database rather than in the page. AI Accelerator’s administrators can see it for every organisation, to run and support the programme.

Your programme lead can also download this for the people in their own organisation, as a spreadsheet with or without names and emails, and every download is recorded. Without names, each person is shown by a short ID that your programme lead can match back to them.

If you run a live activity for a room, the record shows that you ran it. People taking part in a live activity are still not linked to their accounts: see the activity privacy notice. The self-serve activity pages (such as Build a simple tool) still send nothing to us; what is recorded is opening the activity’s page on this platform.

3. Lawful basis

We rely on the following lawful bases under the UK GDPR:

• Performance of a contract (and our client's legitimate interests) for operating the platform and delivering the training your organisation has arranged.
• Legitimate interests for course analytics and improvement, carried out on anonymised, aggregated data wherever possible (see §6).
• The weekly digest is a low-frequency service email sent on a legitimate-interest / soft opt-in basis, with a one-click unsubscribe in every message.

4. Who we share it with (sub-processors)

We host and run the platform using a small number of vetted providers, each bound by a data-processing agreement:

Your core platform data (accounts and learning records) is held in the EU. Where a provider processes data outside the UK/EU, the transfer is covered by appropriate safeguards (the UK International Data Transfer Agreement / Addendum, or Standard Contractual Clauses).

5. How long we keep it

We keep your account and learning data for as long as your organisation's engagement with us is active.

Your access ends immediately when the programme leader at your organisation removes you, or when the engagement ends. 30 days after that, we anonymise your records: we remove the data that identifies you (your name, your department, your role, your questionnaire answers, and any free text you wrote), we delete any screenshots you attached to a problem report, we delete your email preferences and notifications, and we sever your login permanently. The record of learning activity itself is kept, attached to an anonymous record that no longer identifies a person, so your organisation's reporting is unaffected. We do not keep your name, and you cannot be singled out from what remains.

The 30 days exist so that a removal made by mistake can be put right: if you are added back within that window, your account and your progress are restored and nothing is anonymised. After the window closes, the anonymisation cannot be reversed.

If you would rather we anonymised your data sooner than 30 days, ask us and we will (see §7). Beyond that point we keep only anonymous, aggregated learning statistics (see §6).

6. Anonymous analytics we keep long-term

To understand and demonstrate what learning works, we keep aggregated, anonymous statistics: for example, average confidence improvement by job function and course. These carry no name, no account identifier, and no organisation identifier, we never publish a figure drawn from a single person’s answer, and the statistics are held internally rather than shared with your organisation. Because this information is anonymous, it is not personal data and we may keep it after you leave.

7. Your rights

You have the right to:

• Access the personal data we hold about you, and receive a copy.
• Rectify data that is wrong or incomplete.
• Erasure of your data (“right to be forgotten”), subject to any legal retention we must observe.
• Portability: receive your data in a structured, machine-readable format.
• Restriction: ask us to limit how we use your data in certain circumstances.
• Object to certain processing, including opting out of the digest email.

You are not required to pay a fee to exercise your rights. To exercise any of these, contact hello@aiaccelerator.uk, or, if your access was arranged by your employer, you may also contact them. We respond within one month.

If you have concerns about how we use your personal information, please contact us first so we can try to resolve them. You also have the right to complain to the UK regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk

Note: after an erasure, residual copies persist in our daily backups for up to 7 days and then age out automatically.

8. Security

Your data is encrypted in transit and at rest, held in the EU, and access is restricted by row-level security so you (and staff of your organisation) can only see what you're entitled to. Course videos are served through signed, time-limited links so they can't be accessed without a valid session.

Access by our staff is limited to authorised personnel, protected by multi-factor authentication and device-level encryption, and reviewed regularly. We operate incident-reporting procedures and take a layered approach to data protection.

AI Accelerator Limited holds Cyber Essentials Plus certification, an independently audited UK government-backed scheme, demonstrating our commitment to industry-standard cyber security practices.

9. Use of AI

We do not use your learning data to train AI models, and we do not put identifiable or confidential information into public AI tools. Where we use AI internally to support our own work, it is governed by internal policies that protect privacy and confidentiality.

The course assistant is an AI chatbot, and it is labelled as one. The panel says “Powered by Claude” before you type anything. When you send it a question, that question and the recent turns of the conversation go to Anthropic, who generate the reply, along with a short summary of your progress so the answer knows what you have already done. Your name, your email address and your account identifier are never sent. We do not store the conversation, and Anthropic do not use it to train their models under the terms we contract on.

What you type is yours to decide. We do not put your records into it on your behalf — it only ever sees what you choose to write — so please use the same judgement you would with any AI tool and don’t paste in anything confidential. The rest of the platform works exactly the same if you never open it.

We also derive a sentiment score from any comments you leave in an end-of-course survey, so we can see how a course landed across a group. That is used in aggregate.

10. Cookies and similar storage

Learn stores a small amount of information in your browser. Most of it is essential: it keeps you signed in, remembers your progress and keeps the settings you choose. We do not use cookies for advertising, and we do not let advertisers track you here.

Two kinds are optional, and they stay off until you say yes. Usage statistics tell us what brought you to Learn, such as the weekly email or a link a colleague sent, so we can see which reminders help. That stays with us. Video statistics let Mux, the company that streams our videos, measure how they play, so we can fix slow or broken ones.

You can change your choice at any time from Cookie settings at the bottom of every page. We ask again after 12 months.

What we store

Services the page connects to

These set nothing in your browser, but your browser contacts them, so they see your IP address. Google Fonts supplies the Poppins typeface. jsDelivr supplies the sign-in and video player code. Supabase, in the EU, runs your account and saves your progress. Mux streams the videos.

11. Changes and contact

We'll update this notice as the platform evolves and post the current version here. Questions or requests: hello@aiaccelerator.uk.

AI Accelerator Limited · The Poplars, Bridge Street, Brigg, North Lincolnshire, DN20 8NQ · Registered in England & Wales, company no. 14725861.