1. Controller
The controller responsible for personal data processed through learningpointhub.com ("Learning Point Hub", "we", "us") is Oliver James Whitmore (Learning Point Hub), Fleet Street, London EC4Y 1AA, United Kingdom. Publisher details are listed in our Imprint. For any question about this policy or your data, write to info@learningpointhub.com.
2. In short
- You can read every page without giving us any personal data.
- There are no user accounts, no newsletter, no comments and no payments on this site.
- Optional analytics and advertising cookies are used only if you allow them, and you can withdraw that permission at any time.
- We do not sell personal data and do not share it with crypto companies.
3. Data we process
Server log data
Each time a page is requested, the web server that hosts this site automatically records technical information: the IP address of the requesting device, the date and time, the address of the page requested, the referring page if your browser sends it, the HTTP status code, and the browser and operating system identification string. This happens on every website and is needed to deliver pages and keep the server secure.
Your cookie choices
When you make a choice in our cookie banner, a small first-party cookie stores that choice so we do not ask you again on every page.
Analytics and advertising data (only with consent)
If you allow analytics or advertising cookies, Google may receive identifiers stored in cookies, information about the pages you view, your approximate location derived from your IP address, and information about your device and browser. Without your consent these cookies are not set.
Messages you send us
If you e-mail us, we receive your e-mail address, any name you use, the content of your message and the technical data that your e-mail provider attaches.
We never ask for passwords, private keys, recovery phrases, payment card details or identity documents. Please do not send them.
4. Nothing is stored in your browser except your cookie choice
The site does not use local storage or session storage to track you. The glossary filter works entirely in your browser and does not save what you type.
5. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering pages, keeping the site available and secure, detecting and blocking attacks | Server log data | Legitimate interests (Art. 6(1)(f) GDPR / UK GDPR) in running a secure website |
| Remembering your cookie choices | Consent cookie | Legal obligation to obtain and record consent (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
| Counting visits and understanding which cards are useful | Analytics cookies and usage data | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Measuring the performance of our own adverts for this site | Advertising cookies and usage data | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Answering your messages, handling correction reports and privacy requests | E-mail address, message content | Legitimate interests (Art. 6(1)(f)) in responding to you; where a request concerns your rights, legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have weighed them against your interests and rights. You can object to this processing at any time (see section 11).
6. Hosting and security
The site runs on a server operated for us by a hosting provider, which processes server log data on our behalf under a data processing agreement. Automated security tools analyse log entries to detect repeated failed login attempts and other attacks and temporarily block the IP addresses involved. Connections to the site are encrypted with HTTPS, and administrative access is restricted to authorised people.
7. Cookies and Google Consent Mode
Before you make a choice, analytics and advertising storage is set to "denied". If Google tags are active on the site, they run in this restricted mode and do not set advertising or analytics cookies until you accept them. You can change your choice whenever you like via "Cookie settings" in the footer of every page. Details of each cookie are in our Cookie Policy.
8. Recipients
- Our hosting provider, as a processor, to operate the website.
- Google Ireland Limited and Google LLC, only if you have consented to analytics or advertising cookies.
- Our e-mail service provider, when you write to us.
- Courts, authorities or professional advisers, where the law requires it or where it is necessary to establish or defend legal claims.
9. Transfers outside the UK and the EEA
Google may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework and its UK extension, under which Google LLC is certified, and, where needed, on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
10. How long we keep data
- Server log data: up to 30 days, unless a specific security incident requires us to keep particular entries longer to investigate it.
- Your cookie choice: 6 months, after which the banner asks again.
- E-mails: for as long as needed to deal with your message and for no more than 12 months after the matter is closed, unless the law requires longer.
- Analytics and advertising cookies: for the durations listed in our Cookie Policy.
11. Your rights
Under the UK GDPR and, where it applies, the EU GDPR, you have the right to:
- obtain confirmation of whether we process your data and a copy of it (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased in the cases set out in Art. 17;
- have processing restricted (Art. 18);
- receive data you provided in a portable format (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
To use any of these rights, write to info@learningpointhub.com. We may ask for information to confirm your identity. We answer within one month; in complex cases this period can be extended as the law allows, and we will tell you if that happens.
12. Complaints
You may complain to a data protection supervisory authority. In the UK this is the Information Commissioner's Office (ICO). In the EU you can contact the authority in the member state where you live, where you work, or where you believe an infringement took place. We would appreciate the chance to resolve your concern first.
13. Children
This site is intended for adults and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please tell us and we will delete it.
14. No automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. Advertising measurement by Google, if you consent to it, is described in section 7.
15. Changes to this policy
We update this policy when the website, our service providers or the law change. The date at the top of the page shows the version in force.