NEL CA LogoBack to sign in

Privacy notice

How the North East London Cancer Alliance training platform handles your personal data.

Who we are

The data controller for this platform is the North East London Cancer Alliance (NEL CA) [TO CONFIRM: hosting NHS body and ICO registration number]. Questions about this notice or your data can be sent to [TO CONFIRM: Data Protection Officer contact email].

What data we hold

  • Your name and email address (used to create your account and to sign you in).
  • Your training progress: modules started and completed, quiz scores and answers, and your selected role.
  • Any feedback or review comments you submit.
  • A record of administrative actions taken on your account (for security auditing).

Why we hold it and our lawful basis

We use this data to provide and record your completion of mandatory training. Our lawful basis under UK GDPR is the performance of a task carried out in the public interest (Article 6(1)(e)) [TO CONFIRM with DPO]. We do not use your data for marketing and we do not sell it.

How we sign you in

This platform uses passwordless sign-in. When you enter your email address we send you a single-use, time-limited link. We store only an essential session cookie to keep you signed in — we do not use advertising or tracking cookies.

Who we share it with

Login and invitation emails are sent on our behalf by an email delivery provider acting as our data processor [TO CONFIRM: current provider — Resend (interim) or GOV.UK Notify; and its data region]. The provider receives only your name, email address and the login link. Platform data is hosted on [TO CONFIRM: hosting provider and region].

How long we keep it

We keep your training records for [TO CONFIRM: retention period, e.g. 6 years] and security audit logs for [TO CONFIRM: retention period]. After this your data is deleted.

Your rights

You have the right to access, correct, or request deletion of your personal data, and to complain to the Information Commissioner's Office (ICO). To exercise any of these rights, contact [TO CONFIRM: DPO contact email].

Last updated: [TO CONFIRM: date]