Privacy policy

This Privacy Policy explains how Marketing Procurement Mastery, Alchemists Marketing Limited (CN:15555914) ("we", "us" or "our") collects, uses, stores and shares personal data in connection with mpm.training, our learning platform, training services, events, professional relationships, marketing communications and other related business activities.
This Privacy Policy applies only to the MPM learning platform and related services made available through mpm.training. It does not apply to any other websites, platforms or services that have their own separate privacy policies.  
We are committed to protecting your privacy and handling your personal data transparently and in accordance with applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations.

1. Who We Are

For the purposes of applicable data protection law, the data controller is:  
Marketing Procurement Mastery, Alchemists Marketing Limited (CN:15555914)


Email: support@mpm.training  
If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us using the details above.

2. What This Policy Covers

This Privacy Policy explains:
- what personal data we collect;
- how we collect it; - how and why we use it;
- the lawful bases we rely on;
- who we share it with;
- how long we keep it;
- your rights; and
- how to contact us or make a complaint.

3. The Personal Data We Collect

We may collect, use, store and transfer the following types of personal data:  
  • 3.1 Identity and profile data This may include your name, username, password, learner profile information, company name, job title, profession, country, profile photo and any other information you add to your account or profile.  
  • 3.2 Contact data This may include your email address, telephone number, billing address, correspondence address and any other contact details you provide to us.  
  • 3.3 Account and platform data This may include account login details, account settings, course enrolments, learning preferences, saved progress, quiz and assessment results, certificates, completion records, discussion posts, community participation, direct messages, support history and other information generated through your use of the platform.  
  • 3.4 Transaction and order data This may include details of the courses, programmes or services you purchase, order dates, order values, invoice information, payment status and transaction reference details.  
  • 3.5 Payment data Payments are processed by third-party payment providers such as Stripe. We do not ordinarily store your full payment card details ourselves. We may receive limited payment-related information such as payment status, payment method type, billing details and transaction references.  
  • 3.6 Technical and usage data This may include your IP address, browser type and version, device type, operating system, language settings, approximate location based on IP, referral source, pages viewed, time spent on pages, clicks, timestamps, login activity and other diagnostic or analytics data.  
  • 3.7 Marketing and communications data This may also include information about how we came to know or contact you in a professional capacity, such as an industry event, professional relationship, introduction or business network.
  • 3.8 Live session and event data If we offer live sessions, webinars, workshops, enterprise onboarding or similar events, including via Zoom or Microsoft Teams, we may process attendance information, registration details, participation information, chat submissions, questions asked, recordings, transcripts and related follow-up information where applicable.  
  • 3.9 User-generated content This may include comments, forum posts, messages, assignments, feedback, survey responses, testimonials or other content that you submit through the platform.

4. How We Collect Personal Data

We collect personal data in the following ways:  
  • 4.1 Directly from you For example, when you: - create an account; - enrol in a course or programme; - purchase digital content or services; - fill in forms; - contact us by email, phone or through the platform; - join a mailing list; - participate in surveys, webinars, community spaces or events; or - upload or post content.  
  • 4.2 Automatically through your use of the platform We and our service providers may automatically collect technical and usage data through cookies, server logs, analytics tools and similar technologies.  
  • 4.3 From third parties We may receive personal data from third-party service providers and integrations, including:
- LearnWorlds, as our learning platform provider;
- Stripe or other payment processors;
- email marketing or CRM tools such as Mailchimp or HubSpot, if used;
- webinar or meeting tools such as Zoom or Microsoft Teams, if used; and
- analytics or advertising tools where these are enabled.
  • 4.4 We may receive or retain professional contact information through the established professional relationships, industry networks and business activities of our directors, partners and team members.
    This may include contact information accumulated through professional correspondence, introductions, networking, conferences, industry events, business relationships and other interactions within the marketing procurement and related professional communities.
    The information we process in this context is generally limited to business and professional information, such as your name, job title, employer, professional email address and information about the context of our professional relationship.
    We may use this information to maintain professional relationships and, where permitted by law, to communicate with you about MPM Training courses, events, resources, services and other matters that we reasonably believe may be relevant to your professional role.

5. How We Use Your Personal Data

We may use your personal data for the following purposes:  
  • 5.1 To create and manage your account  
  • 5.2 To provide you with access to courses, programmes, digital content, services, community features and support  
  • 5.3 To process transactions, manage orders, issue invoices and maintain financial records  
  • 5.4 To communicate with you about your account, purchases, support requests, course updates, technical notices and service-related matters  
  • 5.5 To manage learner progress, assessments, certificates and completion records  
  • 5.6 To operate, maintain, secure and improve the platform, our services and user experience  
  • 5.7 To provide customer service, troubleshoot issues and respond to enquiries  
  • 5.8 To send you information about MPM Training courses, programmes, events, resources, insights and services that we reasonably believe may be relevant to your professional role, where permitted by applicable data protection and electronic marketing law. This may include communications to professional contacts with whom MPM Training, our directors, partners or team members have an existing or historic professional relationship, or who form part of the professional and industry networks in which we operate.
  • 5.9 To administer live sessions, webinars, workshops or enterprise onboarding activities, including recordings where applicable  
  • 5.10 To monitor usage, analyse trends and improve our content, products, services and communications  
  • 5.11 To detect, prevent and investigate fraud, misuse, unauthorised access, security incidents and other harmful activity  
  • 5.12 To comply with legal, tax, regulatory and contractual obligations  
  • 5.13 To establish, exercise or defend legal claims

6. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, we rely on one or more of the following:  
  • 6.1 Contract Where processing is necessary to take steps at your request before entering into a contract, or to perform our contract with you, including providing courses, account access, support, certificates and related services.  
  • 6.2 Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights, freedoms and interests.
    Our legitimate interests may include operating and improving our platform and services, protecting our systems, maintaining business and professional relationships, responding to enquiries, maintaining appropriate business records, developing our business and, where permitted by law, carrying out relevant business-to-business direct marketing.
    Where we rely on legitimate interests for direct marketing, we consider factors including the nature of our relationship with you, the professional context in which your information was obtained, the relevance of our communications to your role, the nature of the information involved and the potential impact on your privacy.
    You have an absolute right to object at any time to the use of your personal data for direct marketing.
  • 6.3 Legal obligation Where we need to process your data to comply with a legal or regulatory obligation.  
  • 6.4 Consent Where we rely on your consent, for example for certain marketing communications or non-essential cookies. Where we rely on consent, you can withdraw it at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

7. Marketing Communications

We may send you service-related communications where necessary to administer your account, purchases, courses or use of our services.
We may also send marketing or professional communications by email or similar electronic means where:
•    you have consented to receive them;
•    you are an existing customer and applicable law permits us to contact you;
•    you are acting in a professional capacity on behalf of a company or other corporate organisation and applicable law permits business-to-business marketing; or
•    we otherwise have an appropriate lawful basis for processing your personal data and the communication is permitted under applicable electronic marketing law.
Where we use professional contact information obtained through our established industry networks or professional relationships, we may rely on our legitimate interests in maintaining professional relationships and promoting relevant specialist training and services.
We aim to ensure that such communications are relevant to your professional role and proportionate to the nature of our relationship with you.
You can object to the use of your personal data for direct marketing at any time.
You can unsubscribe from marketing communications using the unsubscribe link included in our emails or by contacting us at support@mpm.training.
If you unsubscribe or object, we may retain limited information about you on a suppression list so that we can ensure that we do not inadvertently contact you again for marketing purposes.

8. Cookies and Similar Technologies

We use cookies and similar technologies on the platform to support functionality, security, performance, analytics and, where enabled, marketing or advertising activities.  
Some cookies are essential for the operation of the platform. Others are optional and may only be used where you give the required consent.  
For more information about the cookies we use, how to manage your preferences and how to change your cookie settings, please see our Cookie Policy at mpm.training/cookiepolicy.

9. Who We Share Personal Data With

We may share personal data where reasonably necessary with:  
9.1 Platform and technology providers
Including LearnWorlds and other service providers that help us operate the platform and deliver our services.  
9.2 Payment processors
Including Stripe and other payment providers used to process transactions.  
9.3 Email, marketing and CRM providers
Including LearnWorlds email tools and, if used, third-party providers such as Mailchimp or HubSpot.  
9.4 Webinar and communication providers
Including Zoom, Microsoft Teams and similar tools, where used for live sessions, support or enterprise delivery.  
9.5 Analytics, advertising and support providers
Where enabled, we may use analytics, tag management, advertising or customer support tools to help us understand usage, improve the platform and support users.  
9.6 Professional advisers and business partners
Including legal, accounting, insurance and other professional advisers, where reasonably necessary.  
9.7 Regulators, authorities and law enforcement
Where required by law, regulation, court order or to protect rights, property, safety or the integrity of our business.
9.8 Corporate transactions
If we sell, transfer, merge or reorganise all or part of our business or assets, personal data may be shared with relevant third parties as part of that process.
We do not sell your personal data.

10. International Transfers

Because we use online platforms and third-party service providers, some personal data may be stored in or accessed from countries outside the UK.  
Where we transfer personal data internationally, we will take appropriate steps to protect it in accordance with applicable data protection law. These steps may include relying on adequacy regulations or on appropriate contractual safeguards.

11. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting and reporting requirements, resolve disputes and enforce our agreements.  
Our usual retention periods are:  
  • 11.1 Account and profile data We normally keep this for as long as your account remains active and for up to 24 months after account closure or last meaningful activity, unless a longer period is needed for legal, security or evidential reasons.  
  • 11.2 Purchase, order and transaction records We normally keep these for 6 years after the end of the relevant financial period or transaction, to meet legal, tax and accounting obligations and to deal with disputes.  
  • 11.3 Enquiry and support correspondence We normally keep these for up to 24 months after the last correspondence, unless a longer period is needed for legal or operational reasons.  
  • 11.4 Marketing contact data We periodically review professional and marketing contact information to ensure that it remains accurate, relevant and appropriate to retain. We normally keep this until you unsubscribe, object or withdraw consent, after which we may keep limited suppression information so that we can respect your preferences and avoid sending further marketing.  
  • 11.5 Learner progress, certificates and completion records We normally keep these for up to 6 years so that we can verify learning history, completion and certification where required.  
  • 11.6 Community content and platform submissions We normally keep these while your account remains active and for a limited period afterwards, unless removal, anonymisation or longer retention is justified.  
  • 11.7 Webinar or live-session recordings Where recorded, we will normally keep recordings only for as long as reasonably necessary for the relevant learning, support, quality or operational purpose.  
We may keep data for longer where required by law or where necessary for legal claims, fraud prevention or regulatory reasons.

12. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.  
However, no internet-based service can ever be completely secure. You are responsible for keeping your account credentials confidential and for using the platform securely.

13. Children

The platform is primarily intended for adult learners and professionals. If you are under 18, you should only use the platform with the involvement and consent of a parent or legal guardian.  
We do not knowingly collect personal data from children in a way that is inconsistent with applicable law.

14. Your Data Protection Rights

Depending on the circumstances, you may have the right to:  
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your personal data;
- request restriction of processing;
- object to certain processing, including some processing based on legitimate interests and direct marketing;
- request transfer of your personal data to you or another provider, where applicable;
- withdraw consent where we rely on consent; and
- complain to a supervisory authority.  
If you would like to exercise any of your rights, please contact us at support@mpm.training
We may need to verify your identity before responding to a request.

15. Complaints

If you have concerns about how we handle your personal data, we would appreciate the chance to address them first. Please contact us at support@mpm.training.  
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. More information is available on the ICO website.

16. Third-Party Links and External Services

The platform may contain links to third-party websites, tools or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. You should review their privacy notices separately.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, our processing activities or our business operations.
Any updated version will be posted on the platform with the revised effective date. Please check this page from time to time to stay informed.

18. Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please contact us at:  
Marketing Procurement Mastery, Alchemists Marketing Limited (CN:15555914)

support@mpm.training
Created with