Privacy Policy
How we collect, use, protect and retain personal information when you visit the Academy, contact us or enrol in a course.
Effective date: 14 October 2026 · Last updated: 14 October 2026
- Who is responsible for your data
- Who this notice covers
- Information we may collect
- How we obtain information
- Purposes and lawful bases
- Course progress and learner activity
- Payments and external providers
- Cookies and analytics
- Sharing and processors
- International transfers
- Retention and deletion
- Security
- Your rights
- Complaints and questions
- Children and changes
1. Who is responsible for your data
For the Academy website and services, the data controller is FLR HOLDINGS UK LIMITED (trading through the Webbing Studios Academy brand), company number 16970627, registered in England and Wales. Registered office: 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE. Email: contact@webbingstudios.com. This notice concerns the Academy and should be read alongside any specific information shown at checkout or when creating a learner account.
2. Who this notice covers
This policy applies to website visitors, prospective learners, paying learners, people contacting support, business customers and representatives of organisations enquiring about team access. A company purchasing seats may also process its employees' information independently, according to its own policies.
3. Information we may collect
Depending on your interaction with the Academy, this may include your name, email address, organisation, course preferences, enquiry messages, transaction and order references, billing details supplied at checkout, learner account identifiers, course enrolments, progress and support communications. Technical information may include IP address, browser and device details, approximate location derived from network data, security events and cookie choices. We do not need your payment card number on our own website when payment is handled by an external payment processor.
4. How we obtain information
You provide information when contacting us, enrolling, making a purchase or asking for support. Technical data may arise from normal website operation and security logs. If your employer purchases team access, it may provide your work contact details and course allocation. Payment providers may provide payment status, transaction identifiers and limited billing information necessary to administer an order.
5. Purposes and lawful bases
We use data to respond to enquiries and administer course access (legitimate interests or steps before a contract); fulfil paid orders and learner accounts (performance of a contract); maintain records and meet accounting or legal requirements (legal obligation); protect our website against fraud and misuse (legitimate interests); and send optional promotional messages only where an appropriate lawful basis exists, including consent where required. We assess legitimate interests against individual rights and expectations.
6. Course progress and learner activity
When the learning platform launches, we may record enrolment, modules opened, completion indicators, exercise submissions and support history to deliver the learning experience and help you resume where you left off. We will update this notice before enabling any materially new collection, tracking or automated assessment.
7. Payments and external providers
Stripe processes payments and may collect purchaser and billing information. We receive order and payment details to administer enrolment and refunds. Web3Forms processes enquiries submitted through our contact form. Google Analytics 4 and Umami Cloud process optional usage analytics only after visitors opt in. Hosting and operational providers may process technical data needed to deliver the site.
8. Cookies and analytics
We save your analytics preference in browser local storage under academy.analytics.consent.v1. Google Analytics 4 and Umami Cloud do not load until you accept analytics. After consent, Google Analytics may use cookies and both providers may process device and website usage information. You can withdraw consent using the persistent Privacy settings control. See the Cookie Policy for more information.
9. Sharing and processors
We share personal information only where necessary with service providers that host or operate the site, handle messages, process payments, support delivery, provide technical infrastructure or advise on legal/accounting obligations. We may disclose information where required by law or to protect legitimate rights. We do not sell learner personal data.
10. International transfers
Some suppliers may process information outside the UK. Where UK data protection rules require safeguards, we will assess the destination and use applicable mechanisms such as adequacy regulations or appropriate contractual safeguards. Details of relevant safeguards can be requested using our contact email.
11. Retention and deletion
We keep enquiries only for as long as reasonably needed to handle the request and any follow-up, unless a longer period is justified. We retain purchase, payment and accounting records for applicable statutory periods, and learner records while needed to provide purchased access and handle support or disputes. Security logs are retained for proportionate operational periods. A detailed retention schedule will be finalised before the learning portal and checkout launch; data is reviewed and deleted or anonymised when no longer needed.
12. Security
We use proportionate organisational and technical safeguards such as access restrictions, encrypted transport where available, controlled provider access, updates and backups appropriate to the systems in use. No internet service can guarantee absolute security. Please avoid sending passwords, payment card details or other highly sensitive information in contact messages.
13. Your rights
Subject to applicable UK GDPR rules and exemptions, you may request access, correction, erasure, restriction, portability and, in relevant circumstances, object to processing. You have the right to object to processing based on legitimate interests, including relevant profiling, and to direct marketing at any time. Where we rely on consent, you can withdraw it without affecting prior lawful processing. Contact us to exercise your rights; we may need to verify your identity.
14. Complaints and questions
Please contact us first at contact@webbingstudios.com. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk. Individuals in other jurisdictions may have additional rights under local law.
15. Children and changes
The Academy is designed for adults and professional learning. We do not intentionally collect children's data through this prelaunch site. If future courses are offered to minors, appropriate age-related information and safeguards will be introduced first. We may update this policy when services or suppliers change and will publish the revised effective date.
Company details
FLR HOLDINGS UK LIMITED (trading through the Webbing Studios Academy brand), company number 16970627, registered in England and Wales. Registered office: 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE. Email: contact@webbingstudios.com.
These policies are published for transparency and must be reviewed against the Academy's actual checkout, supplier configuration and operating procedures before taking payments.