Privacy Policy
Last updated: June 2025
Who We Are
GloBeale Learning Solutions ("GloBeale", "we", "us", "our") operates the GloBeale LMS platform, accessible at globeale.com. We are based in England and Wales.
We are committed to protecting your personal data and respecting your privacy. This policy explains what data we collect, why we collect it, and how we use it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What Data We Collect
We collect the following categories of personal data:
- Account data — your name, email address and password when you register
- Company data — company name, branding settings and subscription plan (for CompanyAdmin accounts)
- Learning data — course progress, completion status, scores and certificates
- Usage data — pages visited, features used and login timestamps
- Payment data — subscription plan and billing correspondence (we do not store full card details)
Why We Collect It
We collect and process your data for the following purposes:
- To provide and operate the GloBeale LMS platform
- To manage your account and authenticate your identity
- To track and report on course progress for employees and company administrators
- To issue completion certificates
- To manage billing and subscription plans
- To send important service notifications (e.g. account changes, renewal reminders)
- To improve the platform based on usage patterns
Our lawful basis for processing under UK GDPR is contract performance (to deliver the service you have signed up for) and legitimate interests (to improve and maintain the platform).
Who We Share Data With
We do not sell your personal data to third parties. We may share data with:
- Hosting providers — to store and run the platform (e.g. Microsoft Azure)
- Email service providers — to send transactional emails
- Your employer — CompanyAdmin users can see the learning progress of employees within their company
All third-party providers are required to handle your data securely and in accordance with UK GDPR.
How Long We Keep Your Data
We retain your data for as long as your account is active. If you close your account:
- Account and learning data is deleted within 30 days
- Billing records may be retained for up to 7 years to comply with financial regulations
- Anonymised usage statistics may be retained indefinitely
Your Rights
Under UK GDPR you have the following rights:
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data ("right to be forgotten")
- Right to restriction — ask us to limit how we use your data
- Right to portability — request your data in a portable format
- Right to object — object to processing based on legitimate interests
Cookies
GloBeale LMS uses essential cookies only — these are required for the platform to function (e.g. keeping you logged in). We do not use advertising or tracking cookies.
You can disable cookies in your browser settings, but this may affect your ability to use the platform.
Security
We take the security of your data seriously. All data is transmitted over HTTPS (encrypted), passwords are hashed and never stored in plain text, and access to production data is strictly limited.
In the event of a data breach that affects your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours as required by UK GDPR.
Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page and notify users by email if the changes are significant.
Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns or complaints about how we handle your data, please contact us:
- Email: hello@globeale.com
- Website: www.globeale.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.