ComplySkills

Privacy Policy

Last updated: June 2026

1. Who We Are

ComplySkills is a trading name of Schmooboo & Co Ltd. We are a compliance training platform and the data controller for the personal data we collect through the Platform.

2. What We Collect

  • Account data: name, email, organisation, role
  • Learning data: course progress, quiz results, completion dates
  • Declaration data: signed compliance declarations with timestamps and IP addresses
  • Usage data: pages visited, features used, session duration

3. Lawful Basis

We process your data under the following lawful bases:

  • Contract: to provide you with the training platform service
  • Legitimate interest: to improve the Platform and prevent fraud
  • Legal obligation: to maintain training records for compliance purposes

4. How We Use Your Data

  • Providing and personalising the training experience
  • Tracking course completion and generating certificates
  • Maintaining compliance declaration audit trails
  • Sending training reminders and overdue notifications
  • Platform improvement and analytics

5. Data Retention

We retain your data for as long as your account is active, plus 7 years for compliance declaration records (in line with regulatory record-keeping requirements).

6. Your Rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Contact privacy@complyskills.com.

7. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), and httpOnly JWT cookies.

8. Third Parties

We use the following third-party services to operate the Platform:

  • Vercel: hosting and content delivery (UK/EU regions)
  • Stripe: payment processing (PCI DSS compliant)
  • Anthropic: AI course content generation via the Claude API

We do not sell your personal data to third parties. Third-party processors are bound by data processing agreements and process data only on our instructions.

9. Cookies

We use essential cookies only: an authentication token (httpOnly, 7-day expiry) and local storage for course progress tracking.

10. Contact

Data Protection Officer: privacy@complyskills.com