Privacy notice

Learner accounts: your name, email address and sign-in information supplied to LearnWorlds; account identifiers, enrolment, progress and completion records. Never email your password.

Learning activity: the logbook entries, reflections, course-form responses and feedback you submit. These are linked to your account and are not anonymous. Keep entries practical. Do not include other people’s private information or special-category data: health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or identifying biometric data, sex life or sexual orientation. LearnWorlds does not permit special-category personal data in this service.

Support: your contact details, message, relevant account or order reference and correspondence needed to resolve the request.

Purchases: contact and billing information requested at checkout, the product ordered, price and currency, payment status and transaction references. Stripe receives payment credentials through its payment interface. Do not send full card details through email, course forms or logbooks.

Email preferences: recorded marketing choices, signup source and date, applicable permission wording and unsubscribe or suppression records.

Technical information: connection, browser and device information and platform/security logs associated with using the school. See section 7 for cookies and similar technology.

We use personal information for the following purposes under applicable data-protection law, including the UK GDPR and Data Protection Act 2018 as amended.

Providing your course and handling purchases — contract: creating your account, processing an order, managing enrolment, delivering access, recording necessary progress and completion, and sending essential service messages. This also covers steps you ask us to take before a purchase and support needed to fulfil it.

Support, security and service improvement — legitimate interests: answering general enquiries, diagnosing problems, protecting the school, administering records and improving learning activities from relevant feedback. Our interests are operating a reliable service and responding to learners. Optional reflections and feedback are reviewed only for relevant learning, support or improvement purposes; they are not automatically necessary to perform a contract. You may object to processing based on legitimate interests.

Legal obligations: retaining required accounting and tax evidence and responding to legally required disclosures.

Marketing: consent where required. Where the law permits the customer soft opt-in described in section 6, our lawful basis is our legitimate interest in informing customers about our own similar services, subject to their right to object. Course participation is not marketing consent.

How long we keep information

Account details and minimum entitlement, progress and completion records are kept while needed to provide and administer supported course access. No-fixed-expiry access does not mean that every reflection is kept indefinitely.

We review identifiable reflections and feedback when their learning or improvement purpose ends, remove identifying detail from retained improvement summaries and delete source material no longer needed, subject to legal obligations or justified claims. Support correspondence is reviewed when a case closes; relevant records may be retained for follow-up or claims.

Purchase and financial records are retained for applicable accounting and tax requirements and justified claims. Marketing records are kept while needed for the permitted purpose; a minimum suppression record is retained as needed to respect an unsubscribe or objection. Temporary troubleshooting exports are removed when the investigation is complete.

Deleted information may remain temporarily in protected backups or version histories, or longer where legally required. Such copies are not reused for unrelated purposes. Contact us to ask about the retention of your particular records.

Authorised HUF Institute personnel access information where needed to administer the school, deliver support or carry out the purposes above. We use these service providers:

LearnWorlds: hosts learner accounts, the school and submitted learning activity as a processor. Its suppliers support hosting, media, transactional delivery and platform operations.

Microsoft 365: supports operational records and correspondence sent to our HUF Support, Operations and Communications mailboxes.

Stripe: processes payments through the native LearnWorlds checkout. It acts as a processor for some activities and as a controller for its own fraud prevention, security and legal-compliance purposes.

Mailchimp (Intuit): manages HUF Institute email-update lists and delivery, including email addresses, preferences, signup information and unsubscribe records where you subscribe to those updates.

We may disclose relevant information to professional advisers or public authorities where necessary and lawful. Providers may process information outside the UK, including in the European Economic Area, the United States and other locations used by their services. Applicable transfer arrangements include adequacy decisions and contractual safeguards such as standard contractual clauses with the UK Addendum where required. Contact us for information about the safeguards relevant to your data.

LearnWorlds uses your purchase and enrolment records to provide access and release weekly units. Course activity and completion records support your progress through Foundations. If access, a release date or completion status appears wrong, contact support@huf.institute for review; do not purchase again to correct it.

Course reflections are used for the learning, support and improvement purposes in this notice, not to make solely automated decisions about you with legal or similarly significant effects.

Essential account, payment, access and course-service messages are separate from marketing. Buying Foundations does not give blanket permission for unrelated products or third-party marketing. Choosing not to receive marketing does not remove purchased course access.

Where applicable law permits customer soft opt-in, we may email you about our own similar HUF Institute courses and services only where we collected your details directly during a purchase or purchase enquiry, offered a clear opt-out at collection, and you did not opt out. Each marketing email includes an unsubscribe option. Where this exception does not apply, we obtain the permission required by applicable law.

You can unsubscribe using the link in an email, update available account preferences or contact support@huf.institute to object to marketing at any time. Withdrawing consent does not affect earlier lawful processing. Permission for another venture’s mailing list does not establish permission for Arc Light messages.

Required and optional information: account, contact and purchase fields needed to deliver a service are identified when requested. Without them we may be unable to create an account, complete an order or resolve an enquiry. Learning activities identify any required submissions. Feedback and marketing choices are optional.

Cookies and similar technology: the school uses technology needed for functions such as sign-in, security and maintaining your session. Platform and media services may also process technical information needed to deliver their functions. Optional advertising or analytics technology requires any information and choices required by applicable law before use; continued browsing is not treated as consent.

Your browser lets you restrict or delete cookies, although blocking necessary cookies may prevent sign-in or interrupt learning. Contact us for help with privacy questions or data rights; an account self-service control is not required to make a request.

You may review and update available account details and marketing preferences in your learner account. You may also ask for access to your personal information and, where applicable, correction, erasure, restriction, portability or objection to its use. You may withdraw consent where processing relies on it. You have the right to object to direct marketing at any time.

Contact support@huf.institute to make a request. Requests are normally free; a fee or refusal applies only where the law permits, and we will explain the reason. Some rights depend on the purpose and lawful basis for processing.

You can raise a concern with us and may complain to the UK Information Commissioner’s Office or your competent local data-protection authority. You do not have to contact us before doing so.

We restrict access to authorised people who need the information and use proportionate safeguards to protect it. No online service can guarantee complete security. Keep sign-in details private and do not send passwords, security codes or payment credentials to support.

For a rights request, we identify the relevant records, verify identity proportionately where needed, assess the applicable rights and exceptions, coordinate with relevant providers and respond within the applicable legal time limit. Do not send identity documents unless we explain why they are necessary and provide an appropriate route.

Requests may cover school records, support correspondence, marketing preferences and relevant purchase records. We will explain any information that must be retained for a legal obligation or justified claim and any effect of a requested deletion on course access.

We date updates to this notice and explain material changes before new processing begins where required. Continued use of the school is not consent to a new purpose or to marketing. The version above was updated on 26 October 2026.

For questions, privacy concerns or data-protection requests, email support@huf.institute.

You may also write to: Privacy enquiries, IKIGAISYSTEM LIMITED trading as HUF Institute, Woodside Lodge, Glasshouse Lane, Kenilworth, Warwickshire, United Kingdom, CV8 2AL.