Privacy Policy – UK Trading Academy

Last updated: 2 October 2026

This Privacy Policy explains how UK Trading Academy Ltd (“UKTA”, “we”, “us”) collects, uses and protects your personal data when you visit our website, enquire about our services, buy or study one of our courses, or join our affiliate programme.

1. Who we are

UK Trading Academy Ltd is the data controller for the personal data described in this policy. We are a company registered in England and Wales (company number 08858400).

Registered office: Adey Fitzgerald and Walker, The Pavilion, 60 Eastgate, Cowbridge, CF71 7AB.

Trading address: The Business Centre, Bridgend Industrial Estate, Bridgend, CF31 3TP.

For any questions about this policy or your personal data, contact us at support@uktradingacademy.com.

2. The personal data we collect

Identity and contact details: your name, email address, phone number and postal or billing address.
Account details: your username, password (stored in encrypted form) and account preferences.
Purchase and payment details: the courses you buy, the amounts paid, your payment plan and payment history. Card payments are processed by our payment provider, Stripe. We do not see or store your full card number.
Learning records: your enrolments, course progress, study hours, exam attempts and results, and the certificates issued to you.
Managed account client details: if you use our managed account service, the contact details you give us through our private client form so that we can reach you about your account.
Communications: messages you send us through our contact form, by email or by phone, and our replies.
Affiliate details: if you join our affiliate programme, your affiliate account details, the sales referred through your links, your commission records and the payment details you give us so that we can pay you.
Technical and usage data: your IP address, browser and device type, and the pages you visit on our website, collected through cookies and similar technologies (see section 8).

3. How we collect your data

Directly from you, when you buy a course, create an account, complete a form, contact us or apply to be an affiliate.
Automatically, when you use our website and members area.
From third parties, such as Stripe (confirmation of payments) and, where you take an approved programme through ASTC Dubai, from ASTC Dubai about your registration and certification.

4. How we use your data and our lawful basis

To provide your course — setting up your account, giving you access to course materials and live training, tracking your progress, marking exams and issuing certificates. Lawful basis: performance of our contract with you.
To take payments and manage payment plans — including taking instalments, retrying failed payments and pausing or cancelling access as set out in our Terms and Conditions. Lawful basis: performance of our contract with you.
To arrange certification — where you take an approved programme through ASTC Dubai, sharing the details needed to register you and issue your KHDA certification and CPD award. Lawful basis: performance of our contract with you.
To communicate with you about your course or account — including order confirmations, payment reminders, live training details and service messages. Lawful basis: performance of our contract with you.
To contact managed account clients about their account when needed. Lawful basis: performance of our contract with you, and our legitimate interests in being able to reach our clients.
To answer your enquiries. Lawful basis: our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract.
To run our affiliate programme — tracking referrals, calculating commissions and making payments. Lawful basis: performance of our contract with our affiliates.
To send you marketing about our courses and services, where you have agreed to receive it or, if you are an existing customer, about similar products (you can opt out at any time). Lawful basis: consent, or our legitimate interests where the law allows.
To keep our website and services secure, prevent fraud and improve our website. Lawful basis: our legitimate interests.
To meet our legal obligations — such as keeping financial records for tax and accounting purposes. Lawful basis: legal obligation.

5. Who we share your data with

We only share your personal data where it is needed for the purposes above, with:

Stripe — to process card payments and manage payment plans.
Our website host (Fasthosts) — which stores our website and its data.
SMTP2GO — which sends our transactional emails, such as order confirmations and account emails.
Cisco Webex — which hosts our live training sessions.
ASTC Dubai and KHDA (Knowledge and Human Development Authority) — only where you take an approved programme through ASTC Dubai, so that you can be registered and certified.
Our CPD certification provider — where needed to issue your CPD award.
Affiliates — if you bought through an affiliate’s link, the affiliate can see that a sale was made and the commission earned, but not your payment details.
Professional advisers such as our accountants and lawyers, and authorities where we are required to by law.

We do not sell your personal data.

6. International transfers

Some of the organisations above process data outside the UK, including in the European Union, the United States and the United Arab Emirates. Where your data is transferred outside the UK, we make sure it is protected — for example, by transferring it to a country the UK recognises as providing adequate protection, by using the UK’s approved contract terms (the International Data Transfer Agreement or Addendum), or where the transfer is necessary to perform our contract with you, such as registering you with ASTC Dubai and KHDA when you choose that route.

7. How long we keep your data

Student and course records: for the length of your course and then for 6 years, so that we can deal with any questions or claims.
Exam and certification records: for 10 years, so that we can confirm and verify qualifications and certificates we have issued.
Financial and payment records: for 6 years from the end of the financial year they relate to, as required for tax and accounting purposes.
Managed account client details: for as long as you use the service and then for 6 years.
Affiliate records: for as long as you are an affiliate and then for 6 years.
Enquiries: for up to 2 years if they do not lead to a purchase.
Marketing preferences: until you unsubscribe, after which we keep a record that you have opted out.

8. Cookies

Our website uses cookies — small files stored on your device. Some are essential for the website to work, such as keeping you logged in and remembering what is in your basket. Others are not essential:

Affiliate tracking cookies record which affiliate referred you, for up to 30 days, so that they can be credited with the sale.
Analytics cookies, if used, help us understand how visitors use our website.

We will only set non-essential cookies with your consent, which you can give or withdraw through our cookie banner. You can also control cookies through your browser settings.

9. Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal data we hold about you;
ask us to correct data that is inaccurate or incomplete;
ask us to delete your data;
ask us to restrict how we use your data;
object to us using your data where we rely on our legitimate interests, and to object to direct marketing at any time;
ask us to transfer your data to you or another organisation in a commonly used format;
withdraw your consent at any time where we rely on consent.

Some of these rights do not apply in every situation — for example, we may need to keep certain records for legal reasons. To use any of your rights, email support@uktradingacademy.com. We will respond within one month.

10. Keeping your data secure

We use appropriate technical and organisational measures to protect your personal data, including secure (encrypted) connections on our website, restricted access to personal data and secure, PCI-compliant card processing through Stripe.

11. Age

Our courses are intended for adults. We do not knowingly collect personal data from anyone under 18.

12. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at support@uktradingacademy.com so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: www.ico.org.uk, telephone 0303 123 1113.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the date it was last updated shown at the top.