Legal
Privacy Notice
Last updated: 21 August 2026
In plain English: We use personal information to provide and improve our learning services, manage accounts, respond to enquiries, meet legal obligations and, in limited cases, contact relevant people at UK organisations about services connected to their professional role. We do not sell personal information. You can object to direct marketing at any time.
1. Who We Are
Swift Learn is a trading brand of Brainy Cheeks Ltd. Brainy Cheeks Ltd is the controller of the personal information described in this notice unless we state that we process information on behalf of a customer.
| Legal entity | Brainy Cheeks Ltd |
| Company number | SC823109 |
| Registered office | 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN |
| Privacy contact | Data Protection Contact |
| support@swiftlearn.co.uk |
This notice applies to website visitors, customers, learners where we are the controller, people who contact us, and current or prospective business contacts.
2. Personal Information We Use
Depending on your relationship with us, we may use:
- Your name, work or personal contact details, employer and professional role
- Account, communication and marketing preferences
- Payment, billing and transaction information
- Course enrolment, progress, assessment and certification information
- Enquiries, support requests and correspondence
- Device, browser, IP address, website-use and security information
- Where relevant to a business contact, the source of the information, public facts about the organisation, our assessment of service relevance, and any objection or opt-out
We do not intentionally collect special-category information, criminal-offence information, private-life information or children's information for business prospecting.
3. Where Information Comes From
We obtain information:
- Directly from you
- From a customer that asks us to provide services to you
- From payment, analytics, hosting and other service providers
- From your employer's website, official public registers and other professional or business publications
- From business enquiries, correspondence and referrals
Public availability does not remove our responsibilities under data-protection law. Where we obtain identifiable information from another source, we provide this notice within the period required by law and no later than our first communication with you where that occurs sooner.
4. Why We Use Information and Our Lawful Bases
| Purpose | Lawful basis |
|---|---|
| Provide services, administer accounts and track learning | Contract, or steps requested before entering a contract |
| Process payments and keep required financial records | Contract and legal obligation |
| Respond to enquiries and provide support | Contract or legitimate interests in operating and supporting our services |
| Protect our systems, users and business | Legitimate interests in security, fraud prevention and service resilience |
| Measure and improve our website and services | Consent where required for non-essential cookies; otherwise legitimate interests |
| Send relevant business-to-business information to professional contacts at corporate subscribers | Legitimate interests in developing our business and offering relevant Moodle, learning-platform and learning-design services |
| Send electronic marketing where PECR requires consent | Consent; or legitimate interests where every soft-opt-in condition and the legitimate-interests test are met |
| Meet tax, regulatory and other legal requirements | Legal obligation |
Where we rely on legitimate interests, we consider whether the use is necessary and proportionate and balance our interests against the person's rights and reasonable expectations. You may request further information about our assessment by contacting us.
If information is required to enter into or perform a contract and is not provided, we may be unable to provide the relevant service. Other information is optional unless we explain otherwise when it is requested.
5. Business Contacts and Direct Marketing
We may use limited professional contact information to tell relevant people at UK corporate subscribers about our services. Consent is not generally required under the Privacy and Electronic Communications Regulations for electronic mail sent to a corporate subscriber, but the UK GDPR applies whenever we use information that identifies a person.
We identify ourselves and provide a valid way to opt out. We treat sole traders, certain partnerships, personal contact details and uncertain cases as individual subscribers and do not send unsolicited electronic marketing to them unless valid consent or a lawful soft opt-in applies.
You have an absolute right to object to the use of your personal information for direct marketing. Email support@swiftlearn.co.uk or use the opt-out method in the message. We will stop the marketing use and retain only the minimum information needed to respect your choice.
6. Automated and AI-Assisted Tools
We may use automated or AI-assisted tools to support business research, organise information, assess service relevance and prepare draft material. External communications and commercial decisions remain subject to human supervision.
We do not use solely automated decision-making that produces legal or similarly significant effects on individuals.
7. Who We Share Information With
Where necessary for the purposes described above, information may be shared with:
- Authorised staff and contractors
- Payment and financial-service providers
- Website, cloud-hosting, security and IT-support providers
- Email, productivity and communication service providers
- Analytics providers, subject to applicable cookie choices
- Learning-management and service-delivery providers
- A customer or organisation arranging a service for you, where applicable
- Professional advisers, insurers and auditors
- Regulators, courts, law-enforcement bodies or other authorities where required or permitted by law
Service providers may use information only for the authorised purpose and are subject to appropriate contractual and security controls. We do not sell personal information.
8. International Transfers
Some service providers may process information outside the United Kingdom. If we make a restricted transfer, we use an applicable UK adequacy regulation or an approved transfer safeguard, such as the UK International Data Transfer Agreement or UK Addendum, together with appropriate security measures.
Contact us if you would like more information about a safeguard relevant to your information.
9. How Long We Keep Information
We keep personal information only for as long as needed for the purpose for which it was collected, including applicable contractual, tax, regulatory, accountability and legal-claims requirements.
In particular:
- Customer, account, learning, transaction and service records are retained for the duration of the relationship and any applicable legal or claims period
- Enquiry and correspondence records are retained while relevant to the enquiry, relationship or a potential legal claim
- Prospective-business-contact information is periodically reviewed and deleted or anonymised when it is no longer relevant or necessary
- Consent and preference records are retained as evidence while relevant
- A minimal suppression record may be retained for as long as needed to honour an objection or opt-out
At the end of the applicable period, we securely delete or irreversibly anonymise the information.
10. Cookies and Similar Technologies
Our website uses cookies and similar technologies. We do not set non-essential cookies until the required consent has been given. See our Cookie Policy for details and preference controls.
11. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction. Access is limited to people and providers that need it for an authorised purpose.
12. Your Rights
Depending on the circumstances, you may have the right to:
- Access your personal information
- Have inaccurate or incomplete information corrected
- Request deletion or restriction of processing
- Receive eligible information in a portable format
- Object to processing based on legitimate interests
- Object at any time to processing for direct marketing
- Withdraw consent at any time where consent is the lawful basis
To exercise a right, email support@swiftlearn.co.uk. We normally respond within one calendar month and may ask for information needed to verify your identity. The law permits us to limit or refuse a request in some circumstances, and we will explain our decision where required.
13. Children's Information
Our services are designed for organisations and professionals. We do not knowingly collect personal information from children under 13. Business prospecting is not directed at children. Please contact us if you believe we have inadvertently collected a child's information.
14. Changes to This Notice
We may update this notice when our processing or legal obligations change. The current version and effective date will appear on this page. Where a change is material, we will take reasonable steps to bring it to the attention of affected people before the new processing begins.
15. Complaints
Please contact us first if you are unhappy with how we have handled your information so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO):
- Website: https://ico.org.uk/make-a-complaint
- Telephone: 0303 123 1113
© 2026 Brainy Cheeks Ltd trading as Swift Learn. All rights reserved.
If you have any questions about this policy, please contact us at support@swiftlearn.co.uk