Marketing Procurement Mastery

Privacy policy

This Privacy Policy explains how Alchemists Marketing Limited ("we", "us" or "our") collects, uses, stores and shares personal data when you use mpm.training and any related learning platform, services, content, communications or features made available through it.  
This Privacy Policy applies only to the MPM learning platform and related services made available through mpm.training. It does not apply to any other websites, platforms or services that have their own separate privacy policies.  
We are committed to protecting your privacy and handling your personal data transparently and in accordance with applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations.

1. Who We Are

For the purposes of applicable data protection law, the data controller is:  
Alchemists Marketing Limited

Email: mpm@alchemists.co.uk  
If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us using the details above.

2. What This Policy Covers

This Privacy Policy explains:
- what personal data we collect;
- how we collect it; - how and why we use it;
- the lawful bases we rely on;
- who we share it with;
- how long we keep it;
- your rights; and
- how to contact us or make a complaint.

3. The Personal Data We Collect

We may collect, use, store and transfer the following types of personal data:  
  • 3.1 Identity and profile data This may include your name, username, password, learner profile information, company name, job title, profession, country, profile photo and any other information you add to your account or profile.  
  • 3.2 Contact data This may include your email address, telephone number, billing address, correspondence address and any other contact details you provide to us.  
  • 3.3 Account and platform data This may include account login details, account settings, course enrolments, learning preferences, saved progress, quiz and assessment results, certificates, completion records, discussion posts, community participation, direct messages, support history and other information generated through your use of the platform.  
  • 3.4 Transaction and order data This may include details of the courses, programmes or services you purchase, order dates, order values, invoice information, payment status and transaction reference details.  
  • 3.5 Payment data Payments are processed by third-party payment providers such as Stripe. We do not ordinarily store your full payment card details ourselves. We may receive limited payment-related information such as payment status, payment method type, billing details and transaction references.  
  • 3.6 Technical and usage data This may include your IP address, browser type and version, device type, operating system, language settings, approximate location based on IP, referral source, pages viewed, time spent on pages, clicks, timestamps, login activity and other diagnostic or analytics data.  
  • 3.7 Marketing and communications data This may include your preferences in receiving marketing from us, your communication preferences, your responses to campaigns, and records of communications you send to us or receive from us.
  • 3.8 Live session and event data If we offer live sessions, webinars, workshops, enterprise onboarding or similar events, including via Zoom or Microsoft Teams, we may process attendance information, registration details, participation information, chat submissions, questions asked, recordings, transcripts and related follow-up information where applicable.  
  • 3.9 User-generated content This may include comments, forum posts, messages, assignments, feedback, survey responses, testimonials or other content that you submit through the platform.

4. How We Collect Personal Data

We collect personal data in the following ways:  
  • 4.1 Directly from you For example, when you: - create an account; - enrol in a course or programme; - purchase digital content or services; - fill in forms; - contact us by email, phone or through the platform; - join a mailing list; - participate in surveys, webinars, community spaces or events; or - upload or post content.  
  • 4.2 Automatically through your use of the platform We and our service providers may automatically collect technical and usage data through cookies, server logs, analytics tools and similar technologies.  
  • 4.3 From third parties We may receive personal data from third-party service providers and integrations, including:
- LearnWorlds, as our learning platform provider;
- Stripe or other payment processors;
- email marketing or CRM tools such as Mailchimp or HubSpot, if used;
- webinar or meeting tools such as Zoom or Microsoft Teams, if used; and
- analytics or advertising tools where these are enabled.

5. How We Use Your Personal Data

We may use your personal data for the following purposes:  
  • 5.1 To create and manage your account  
  • 5.2 To provide you with access to courses, programmes, digital content, services, community features and support  
  • 5.3 To process transactions, manage orders, issue invoices and maintain financial records  
  • 5.4 To communicate with you about your account, purchases, support requests, course updates, technical notices and service-related matters  
  • 5.5 To manage learner progress, assessments, certificates and completion records  
  • 5.6 To operate, maintain, secure and improve the platform, our services and user experience  
  • 5.7 To provide customer service, troubleshoot issues and respond to enquiries  
  • 5.8 To send you marketing communications where permitted by law or where you have opted in  
  • 5.9 To administer live sessions, webinars, workshops or enterprise onboarding activities, including recordings where applicable  
  • 5.10 To monitor usage, analyse trends and improve our content, products, services and communications  
  • 5.11 To detect, prevent and investigate fraud, misuse, unauthorised access, security incidents and other harmful activity  
  • 5.12 To comply with legal, tax, regulatory and contractual obligations  
  • 5.13 To establish, exercise or defend legal claims

6. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, we rely on one or more of the following:  
  • 6.1 Contract Where processing is necessary to take steps at your request before entering into a contract, or to perform our contract with you, including providing courses, account access, support, certificates and related services.  
  • 6.2 Legitimate interests Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests. This may include operating and improving the platform, securing our systems, communicating with users, preventing misuse, maintaining records, and running our business effectively.  
  • 6.3 Legal obligation Where we need to process your data to comply with a legal or regulatory obligation.  
  • 6.4 Consent Where we rely on your consent, for example for certain marketing communications or non-essential cookies. Where we rely on consent, you can withdraw it at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

7. Marketing Communications

We may send you service-related communications where necessary to administer your account, orders or use of the platform.  
We may also send you marketing communications by email or similar electronic means where:
- you have consented;
- you are an existing customer and we are permitted to do so under applicable law; or
- we otherwise have a lawful basis to do so.  
You can unsubscribe from marketing communications at any time by using the unsubscribe link in the message or by contacting us at mpm@alchemists.co.uk.

8. Cookies and Similar Technologies

We use cookies and similar technologies on the platform to support functionality, security, performance, analytics and, where enabled, marketing or advertising activities.  
Some cookies are essential for the operation of the platform. Others are optional and may only be used where you give the required consent.  
For more information about the cookies we use, how to manage your preferences and how to change your cookie settings, please see our Cookie Policy at mpm.training/cookiepolicy.

9. Who We Share Personal Data With

We may share personal data where reasonably necessary with:  
9.1 Platform and technology providers
Including LearnWorlds and other service providers that help us operate the platform and deliver our services.  
9.2 Payment processors
Including Stripe and other payment providers used to process transactions.  
9.3 Email, marketing and CRM providers
Including LearnWorlds email tools and, if used, third-party providers such as Mailchimp or HubSpot.  
9.4 Webinar and communication providers
Including Zoom, Microsoft Teams and similar tools, where used for live sessions, support or enterprise delivery.  
9.5 Analytics, advertising and support providers
Where enabled, we may use analytics, tag management, advertising or customer support tools to help us understand usage, improve the platform and support users.  
9.6 Professional advisers and business partners
Including legal, accounting, insurance and other professional advisers, where reasonably necessary.  
9.7 Regulators, authorities and law enforcement
Where required by law, regulation, court order or to protect rights, property, safety or the integrity of our business.
9.8 Corporate transactions
If we sell, transfer, merge or reorganise all or part of our business or assets, personal data may be shared with relevant third parties as part of that process.
We do not sell your personal data.

10. International Transfers

Because we use online platforms and third-party service providers, some personal data may be stored in or accessed from countries outside the UK.  
Where we transfer personal data internationally, we will take appropriate steps to protect it in accordance with applicable data protection law. These steps may include relying on adequacy regulations or on appropriate contractual safeguards.

11. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting and reporting requirements, resolve disputes and enforce our agreements.  
Our usual retention periods are:  
  • 11.1 Account and profile data We normally keep this for as long as your account remains active and for up to 24 months after account closure or last meaningful activity, unless a longer period is needed for legal, security or evidential reasons.  
  • 11.2 Purchase, order and transaction records We normally keep these for 6 years after the end of the relevant financial period or transaction, to meet legal, tax and accounting obligations and to deal with disputes.  
  • 11.3 Enquiry and support correspondence We normally keep these for up to 24 months after the last correspondence, unless a longer period is needed for legal or operational reasons.  
  • 11.4 Marketing contact data We normally keep this until you unsubscribe, object or withdraw consent, after which we may keep limited suppression information so that we can respect your preferences and avoid sending further marketing.  
  • 11.5 Learner progress, certificates and completion records We normally keep these for up to 6 years so that we can verify learning history, completion and certification where required.  
  • 11.6 Community content and platform submissions We normally keep these while your account remains active and for a limited period afterwards, unless removal, anonymisation or longer retention is justified.  
  • 11.7 Webinar or live-session recordings Where recorded, we will normally keep recordings only for as long as reasonably necessary for the relevant learning, support, quality or operational purpose.  
We may keep data for longer where required by law or where necessary for legal claims, fraud prevention or regulatory reasons.

12. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.  
However, no internet-based service can ever be completely secure. You are responsible for keeping your account credentials confidential and for using the platform securely.

13. Children

The platform is primarily intended for adult learners and professionals. If you are under 18, you should only use the platform with the involvement and consent of a parent or legal guardian.  
We do not knowingly collect personal data from children in a way that is inconsistent with applicable law.

14. Your Data Protection Rights

Depending on the circumstances, you may have the right to:  
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your personal data;
- request restriction of processing;
- object to certain processing, including some processing based on legitimate interests and direct marketing;
- request transfer of your personal data to you or another provider, where applicable;
- withdraw consent where we rely on consent; and
- complain to a supervisory authority.  
If you would like to exercise any of your rights, please contact us at mpm@alchemists.co.uk. 
We may need to verify your identity before responding to a request.

15. Complaints

If you have concerns about how we handle your personal data, we would appreciate the chance to address them first. Please contact us at mpm@alchemists.co.uk.  
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. More information is available on the ICO website.

16. Third-Party Links and External Services

The platform may contain links to third-party websites, tools or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. You should review their privacy notices separately.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, our processing activities or our business operations.
Any updated version will be posted on the platform with the revised effective date. Please check this page from time to time to stay informed.

18. Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please contact us at:  
Alchemists Marketing Limited

mpm@alchemists.co.uk
Created with