Skip to main content
London School of Applied Excellence

Cookie & Privacy Policy

London School of Applied Excellence (LSAE)

Last updated: May 2026

This Cookie & Privacy Policy applies to London School of Applied Excellence (“LSAE”, “we”, “our”, or “us”), operating in England and Wales. This policy explains how we collect, use, store, share, and protect your personal data when you visit our website, create an account, or enrol on any of our courses.

We are committed to protecting your privacy and handling your personal data with transparency and care, in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

If you have any questions, please contact us at support@lonsea.co.uk.

1. Who We Are

Data Controller: Patronica Limited, England & Wales (LSAE), operating in England and Wales.

Email: support@lonsea.co.uk
Post: Data Protection Officer, London School of Applied Excellence, c/o Patronica Limited, England & Wales.

We aim to respond to all data protection enquiries within 30 calendar days.

2. What Personal Data We Collect

We collect and process the following categories of personal data:

  • Identity Data — Full name, date of birth, username, or similar identifier.
  • Contact Data — Email address, telephone number, and postal address.
  • Account & Enrolment Data — Login credentials (hashed), course enrolment history, learning progress, assessment results, and certificates.
  • Payment Data — Billing name and address. We do not store full card details; all payments are processed by PCI-DSS compliant providers.
  • Technical Data — IP address, browser type, device type, time zone, and pages visited.
  • Usage & Behavioural Data — Click behaviour, search queries, time on lessons, and quiz interactions.
  • Communication Data — Records of emails, support tickets, and feedback.
  • Marketing Preferences — Your stated preferences regarding marketing communications.

3. How We Use Your Personal Data

  • Course delivery and account management (contract performance).
  • Payment processing and financial administration.
  • Student support and enquiry resolution.
  • Service communications (account and course updates).
  • Marketing communications (with consent or legitimate interest).
  • Service improvement and research (anonymised where possible).
  • Safety, security, and fraud prevention.
  • Legal and regulatory compliance.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

  • Contract (Article 6(1)(b)) — To deliver courses and manage accounts.
  • Legal Obligation (Article 6(1)(c)) — To comply with UK tax and other laws.
  • Legitimate Interests (Article 6(1)(f)) — For fraud prevention and service improvement.
  • Consent (Article 6(1)(a)) — For non-essential cookies and direct marketing to prospects.

5. Cookies

What Are Cookies?

Cookies are small text files placed on your device by our website. They store information about your visit such as preferences, session state, and browsing behaviour.

Categories of Cookies We Use

  • Strictly Necessary Cookies — Essential for the website to function (session, security). Cannot be disabled.
  • Performance & Analytics Cookies — Help us understand visitor behaviour (e.g. Google Analytics). Require consent.
  • Functional Cookies — Remember your choices (language, dismissed notifications).
  • Marketing & Targeting Cookies — Used for relevant advertising. Require explicit consent.

Managing Your Cookie Preferences

When you first visit, a cookie consent banner allows you to accept or decline non-essential cookies. Change preferences any time via the “Cookie Settings” link in our footer. You can also control cookies through your browser settings.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share data with:

  • Service providers (payment processors, email providers, hosting, analytics).
  • Accreditation and awarding bodies (for certificate verification).
  • Legal and regulatory authorities (where legally required).

7. International Data Transfers

We store data primarily within the UK and EEA. For transfers outside these areas, we use appropriate safeguards including adequacy decisions, International Data Transfer Agreements, and Standard Contractual Clauses.

8. Data Retention

  • Account data — 6 years following end of enrolment.
  • Financial records — 7 years (HMRC requirements).
  • Certificate records — Retained indefinitely for verification.
  • Marketing data — Until consent is withdrawn.
  • Technical/usage data — Up to 13 months, then anonymised.

9. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data (Subject Access Request).
  • Rectify inaccurate or incomplete data.
  • Request erasure (“right to be forgotten”).
  • Restrict processing in certain circumstances.
  • Data portability (structured, machine-readable format).
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time.

To exercise your rights, contact support@lonsea.co.uk. If unsatisfied, you may complain to the ICO at ico.org.uk.

10. Data Security

We implement SSL/TLS encryption, access controls, secure cloud infrastructure, regular security reviews, and incident response procedures. In the event of a breach posing risk to your rights, we will notify the ICO within 72 hours.

11. Children’s Privacy

Our services are not directed at children under 18. We do not knowingly collect data from minors. Contact us immediately if you believe a child has provided personal data.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email or prominent notice on our website. For historical versions, contact support@lonsea.co.uk.

London School of Applied Excellence is operated by Patronica Limited, England & Wales. For data protection enquiries: support@lonsea.co.uk | ico.org.uk