1. Who is responsible
The British School of Outdoor Education (BSOE) is the data controller for this course. You can contact us about your data using the details in the BSOE Privacy Policy.
2. What we collect and where it comes from
| Source | What |
|---|---|
| Paystack payment | Name, email, phone (if you enter it), payment reference, amount, date and payment status. Your card or bank details are handled by Paystack and are never seen or stored by BSOE. |
| Enrolment form (Microsoft Forms) | Full name, email used to pay, phone/WhatsApp, payment reference, payment option, planned specialism, state of residence, current status, how you heard about us (optional) and your consent. |
| Course sign-in | Your email, the payment references you sign in with, your Paystack customer number, which stage of the course you have paid for, your chosen specialism, and when and how often you sign in. |
| Course Team (Microsoft Teams) | Once your payment is confirmed we invite you to the course Team as a guest. This creates a guest account with your name and email so you can join announcements and live sessions. |
| AI tutor | The questions you type, the lesson you are on and the help mode you choose. We keep a daily count of tutor questions per learner (to apply a fair-use limit), not the questions themselves. |
| Your browser | Your progress, notes, quiz answers and workbook are saved in your own browser on your device. They are not sent to BSOE unless you export your work and choose to share it. |
| Technical data | Our hosting providers process IP addresses and request logs to deliver the website and keep it secure. Our course server logs errors without your learning content. |
3. How we use it and why
- To provide the course you paid for (performance of a contract): checking your payment with Paystack, opening the parts of the course you have paid for, running the AI tutor, and inviting you to the course Team.
- To manage your enrolment and contact you about your learning (contract and your consent on the enrolment form), including a welcome email with sign-in instructions.
- To keep the course secure and fair (legitimate interests): preventing shared or fraudulent access, limiting automated misuse, and fixing errors.
- To keep financial records where the law requires it (legal obligation).
Automatic access decisions. Access is opened automatically based on your payment status with Paystack. If you think a decision about your access is wrong, contact us and a member of staff will review it.
4. Who processes your data for us
We do not sell your personal data. We use these service providers, under their own security and data protection terms:
- Paystack - payments and payment verification.
- Microsoft - Microsoft Forms (enrolment form), SharePoint (our student register), Outlook (emails), Teams (course Team), and Azure (course sign-in service and the AI tutor via Azure OpenAI). Microsoft does not use your questions to train AI models.
- GitHub - hosting the course website.
Staff at BSOE who run the course can see the student register and your access status.
5. Where your data is stored
The course sign-in service and AI tutor run in Microsoft Azure in Sweden (European Union), and our Microsoft 365 data is held in Microsoft's cloud. Paystack and GitHub may process data in other countries. Where data leaves Nigeria or the UK, we rely on our providers' contractual and security safeguards, as required by the Nigeria Data Protection Act 2023 and UK data protection law.
AI tutor questions are sent to Azure OpenAI to generate an answer and are not stored by BSOE. Microsoft may keep them for a limited period (up to 30 days) only to detect abuse, under its Azure terms.
6. How long we keep it
- Payment and enrolment records: 6 years after your last payment, for accounting and legal purposes.
- Course sign-in record and student register entry: while you are studying and for 2 years after your last sign-in, then deleted or anonymised.
- Enrolment form responses: copied into the student register, then deleted from Microsoft Forms within 12 months.
- Course Team guest account: removed within 12 months after you finish or stop the course.
- Tutor fair-use counters: one counter per learner per day, deleted within 90 days.
- Data in your browser: stays on your device until you clear it.
7. Your rights
Under the Nigeria Data Protection Act 2023 and UK data protection law you can ask to access, correct or delete your data, ask us to restrict or stop using it, ask for a copy in a portable format, and withdraw consent at any time (this does not affect processing already done, or what we must keep by law). Deleting your data will end your access to the course.
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Nigeria Data Protection Commission or the UK Information Commissioner's Office.
8. Keeping your data safe
- Course access uses signed sign-in tokens that expire, and is checked against Paystack on the server.
- Payment keys and other secrets are kept only on our server, never in the website.
- Access to the student register is limited to BSOE staff who run the course.
Please use the AI tutor for course questions only. Do not enter personal, financial or confidential workplace information into it.
9. Who the course is for
This course is for adults aged 18 and over. We do not knowingly collect data from children through this course.
10. Changes
We may update this notice when the course changes. The effective date at the top will show the latest version.
← Back to the course