We respect your privacy and are committed to protecting your personal information. This policy explains what data we collect, how and why we use it, how we keep it secure, and your rights under data-protection law. This Privacy Policy applies to your use of the Neuro Frontiers website and learning platform (the “Website” and “LMS”), including when you create an account, purchase or access courses, attend live sessions, sign up to newsletters or updates, contact us, or interact with us on social media. If you do not agree with this Policy, please do not use the Website/LMS.
Data Controller: Neuro Frontiers
Registered/Postal Address: Norman Court, Salisbury SP5 1NL
Email (privacy): info@neurofrontiers.org
Platform Provider & Data Processor: Zenler (New Zenler / Zenler.com)
We use Zenler to host and deliver our LMS. Zenler processes personal data on our behalf under a data-processing agreement. For any privacy questions or to exercise your rights, please contact Neuro Frontiers using the details above.
Communication Data
- Messages you send via contact forms, email, phone, social media, support tickets, or in-platform messaging.
Customer & Account Data
- Name, email, billing address, delivery address (if applicable), phone, organisation (optional), purchase history, course enrolments, membership status, support history, and (via our payment processors) transaction identifiers. We do not store full payment card details.
User & Content Data
- Your course progress, quiz/survey responses, comments in forums or live sessions, assignments you upload, and preferences. If we host community spaces, we may process profile photos and bios you provide.
Technical Data
- IP address, device and browser type, operating system, time zone, session logs, pages viewed, referral URLs, and interaction data collected via cookies or similar technologies (see Cookies).
Marketing & Communications Data
- Your preferences for receiving marketing and updates from us, plus engagement data (opens/clicks) where permitted.
Special Category Data
- We do not intentionally collect special category data (e.g., health, ethnicity) or criminal-offence data. Please do not submit such data to us. If you do, we will delete or minimise it wherever possible.
Directly from you (forms, checkout, support, uploads, live sessions).
Automatically via cookies/analytics when you use the Website/LMS.
From third-party tools integrated into the LMS (e.g., analytics, email, payments).
From publicly available sources where appropriate (e.g., companies house, professional websites).
We may also receive data from publicly available sources such as European Commision EU VAT database.
To provide the LMS and services (Contract / Legitimate Interests)
- Create and manage your account and memberships
- Deliver courses, live sessions, assessments, certificates
- Provide customer support and service notifications
To process payments (Contract / Legal Obligation)
- Through our payment processors (e.g., Stripe, PayPal)
- Fraud prevention and compliance (e.g., tax, accounting)
- To operate, secure, and improve our platform (Legitimate Interests)
- Troubleshooting, analytics, performance monitoring
- Preventing unauthorised access and misuse
- Backups and platform administration
To communicate with you (Legitimate Interests / Consent)
- Service messages (contractual/transactional)
- Newsletters, updates, and marketing (only where you’ve consented or where PECR allows).
- You can opt out at any time.
To comply with law (Legal Obligation)
- Tax and accounting retention
- Responding to lawful requests from authorities
We do not use your data for fully automated decision-making that has legal or similarly significant effects.
We may host live sessions (e.g., webinars, group calls).
We’ll tell you if a session is recorded and why (e.g., to provide a replay to enrolled learners).
Where recording occurs, we minimise personal data captured and limit access to enrolled users.
You must not record, upload, or share sessions, and you must not use AI tools to record/transcribe/summarise our lessons (see our Terms & Conditions).
We may use privacy-respecting tools (including AI-assisted utilities) to support moderation, spam-prevention, or content tagging, but not to profile you or make automated decisions about you.
Marketing communications
We may send you updates about new courses, resources, or events:
- with your consent;
- or where permitted under PECR (e.g., you’re an existing customer and you have not opted out).
You can unsubscribe at any time via the link in our emails or by contacting us.
Opting out of marketing does not affect service emails (e.g., receipts, critical notices).
We use cookies and similar technologies for functionality (e.g., login), analytics, and performance. You can control cookies in your browser settings. Some features may not work if cookies are disabled. See our Cookie Policy for details.
We share personal data with trusted providers who process it for us under contract and only on our instructions, including:
Platform & infrastructure: Zenler (LMS), Amazon Web Services (hosting/CDN)
Email & messaging: SendGrid (transactional email), [Your email marketing provider, e.g., Mailchimp]
Payments: Stripe, PayPal
Video & live sessions: Vimeo, Zoom
File handling: Filestack (uploads)
Analytics / security: Google Analytics/Tag Manager, reCAPTCHA, Meta Pixel (where configured)
Automation: Zapier (if used to connect services)
We may also share data with professional advisers (legal, accounting, insurance), and with authorities where required by law. If we undergo a reorganisation or business transfer, data may be transferred to the successor entity under appropriate safeguards. We do not sell your personal data.
Some providers may process data outside the UK/EEA.
Where that occurs, we use appropriate safeguards such as:
- UK Addendum/International Data Transfer Agreements (IDTA) or EU Standard Contractual Clauses (SCCs); and/or
- Adequacy regulations/decisions or recognised frameworks (as applicable).
For details of specific transfer mechanisms in place with our processors, contact us.
We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or loss. Access to personal data is limited to personnel and processors with a business need and subject to confidentiality commitments. We maintain incident-response procedures and will notify you and the relevant authority where legally required.
We retain personal data only as long as necessary for the purposes described above:
- Customer, transaction and invoice records: typically 6 years (tax/accounting).
- Course and membership records: for the duration of your enrolment/membership and a reasonable period thereafter to manage queries, renewals, or disputes.
- Support and communications: for as long as needed to manage your request and maintain appropriate records.
We may anonymise data for analytics/research; anonymised data is not personal data and may be kept indefinitely.
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your data (where applicable)
- Restrict processing (in certain cases)
- Object to processing (including direct marketing)
- Data portability (for data you provided to us, where lawful)
- Withdraw consent where processing relies on consent
To exercise your rights, contact us using the details above. We may need to verify your identity. We aim to respond within one month. You will not usually have to pay a fee; we may charge a reasonable fee or refuse requests that are unfounded, repetitive, or excessive.
Supervisory Authority (UK): Information Commissioner’s Office (ICO) — www.ico.org.uk We would appreciate the chance to address your concerns first—please contact us.
Our services are intended for adults (18+). We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.
Our Website/LMS may include links, plugins, or embedded content from third-party sites. We do not control those sites and are not responsible for their privacy practices. Please review their privacy notices.
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised Effective date. Material changes may also be communicated via email or in-app notices.
Questions or requests about this Policy or your personal data: Neuro Frontiers — info@neurofrontiers.org