Bloodborne Certification
Privacy Policy
Data controller: COGNIZENSE LLP, 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN.
ICO registration: 00014276957
1. About This Policy
This Privacy Policy explains how COGNIZENSE LLP (“we”, “us”, or “our”) collects, uses, and protects personal data when you use bloodbornecertification.com, create an account, purchase an online course, or contact us about our services.
We are a UK Limited Liability Partnership and process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, and other applicable privacy laws. For privacy questions, contact info@cognizense.com.
2. Personal Data We Collect
Information you provide
- Account information: your name, email address, password, and account details.
- Course and certificate records: course enrolment, progress, quiz completion, completion dates, and certificate information.
- Payment information: payment status, transaction references, and limited payment details supplied by our payment processors. We do not store full card details, cryptocurrency wallet credentials, or payment account passwords.
- Support communications: information you provide when contacting us for help.
Information collected automatically
- Security and server data: IP address, browser type, operating system, referring URL, and technical diagnostics retained for security, fraud prevention, and service reliability.
- Aggregate site analytics: we use GoatCounter to understand overall site usage, such as pages viewed, broad location, browser type, device type, language, and referring site.
We do not buy, rent, sell, or trade personal data. We do not use Google Analytics, Google Ads, remarketing, behavioural advertising, social-media tracking pixels, or third-party web fonts.
3. How We Use Personal Data
| Purpose | Lawful basis |
|---|---|
| Create accounts, provide courses, record progress, and issue certificates | Performance of a contract |
| Process payments and handle refunds or payment queries | Performance of a contract and legal obligations |
| Provide customer support | Legitimate interests — operating and supporting our services |
| Prevent fraud, abuse, and security incidents | Legitimate interests — protecting our customers, systems, and business |
| Maintain limited server logs and aggregate site statistics | Legitimate interests — maintaining, securing, and improving our website |
| Send one factual certificate-expiry reminder, where applicable | Legitimate interests — maintaining accurate training and certificate records |
Expiry reminders are factual service messages. They do not contain discounts, promotional offers, or marketing content. We do not use automated decision-making or profiling that produces legal or similarly significant effects.
4. Service Providers and Data Sharing
We share personal data only where necessary to operate our services, process payments, provide hosting, or comply with legal obligations.
| Recipient | Purpose |
|---|---|
| Stripe and PayPal | Payment processing, fraud prevention, refunds, and payment support. |
| Rampex | Hosted cryptocurrency payment processing when you select Rampex at checkout. |
| LightningBase LLC | Website, email, and course-platform hosting. |
| GoatCounter | Privacy-focused aggregate website analytics. We do not enable individual-pageview tracking or submit personal data as custom events. |
Payment providers process payment information under their own privacy notices. Rampex is loaded only when you select that payment option during checkout. We do not sell personal data or share it for cross-context behavioural advertising.
5. International Transfers
Some of our service providers process data outside the United Kingdom. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other mechanisms recognised under applicable data-protection law.
6. Retention
| Data type | Typical retention |
|---|---|
| Account and course records | For the life of the account, then as necessary for legal, tax, contract, and record-keeping purposes. |
| Certificate and completion records | While verification remains available, which may be indefinite unless deletion is appropriate and no overriding reason requires retention. |
| Payment and transaction records | Normally six years, to meet tax, accounting, and legal obligations. |
| Support communications | Normally two years after the last correspondence. |
| Security logs | Normally up to 30 days, unless needed for an active security investigation. |
7. Cookies and Similar Technologies
We use essential cookies and similar technologies required for the website to work. These support functions such as login sessions, shopping carts, checkout, payment security, fraud prevention, and service reliability.
GoatCounter does not use cookies, local storage, browser cache, or persistent browser identifiers for its standard analytics service. Its statistics are aggregated and are not used for advertising or behavioural profiling.
When you choose a payment method, the relevant payment provider may set cookies or use similar technologies necessary to securely complete that payment. We do not use advertising, remarketing, or social-media tracking cookies.
8. Your Data Protection Rights
Subject to applicable law, you may have the right to access, correct, erase, restrict, or receive a copy of your personal data. You may also object to processing based on legitimate interests.
To exercise your rights, email info@cognizense.com. We normally respond within one month. You may also complain to the UK Information Commissioner’s Office.
9. Security
We use reasonable technical and organisational safeguards, including encrypted connections, access controls, security monitoring, and PCI-DSS compliant payment providers. No internet-based system can be guaranteed completely secure.
10. Children’s Privacy
Our courses are intended for adult professionals. We do not knowingly collect personal data from children under 16. If you believe a child has supplied personal data to us, please contact us so we can investigate and take appropriate action.
11. California Privacy Notice
California residents may have rights to know, correct, and delete certain personal information, subject to legal exceptions. In the preceding 12 months, we may have collected identifiers, commercial information, course and certificate records, security-log information, and aggregate website-usage information.
We do not sell personal information or share personal information for cross-context behavioural advertising. To make a California privacy request, email info@cognizense.com with “California Privacy Request” in the subject line. We may need to verify your identity before responding.
12. Changes to This Policy
We may update this policy when our services, legal obligations, or data practices change. The current version will always show its “Last updated” date. Where appropriate, we will provide additional notice of material changes.
13. Contact
For privacy questions or requests, contact:
- Email: info@cognizense.com
- Post: COGNIZENSE LLP, 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN
- ICO registration: 00014276957