Privacy Notice

Global Learning Standards (GLS) is an independent accreditation and quality-assurance body for online, digital, CPD and immersive learning. GLS is the data controller for personal data processed through this platform, except where we act as a processor on behalf of a training provider using our tools. GLS is registered with the UK Information Commissioner's Office (ICO) — registration number 00014816084.

• Account data: name, work email address, password hash, role and organisation.
• Organisation data: provider name, country, contact details, website and accreditation status.
• Accreditation data: course records, criteria responses, uploaded evidence documents, AI analysis outputs, reviewer notes and decisions.
• Usage data: pages requested, device and browser information, IP address and security logs.
• Support data: messages you send us through contact forms or email.

• To operate accounts, authenticate users and secure the platform.
• To assess accreditation applications, map evidence against GLS criteria and record human review decisions.
• To publish limited accreditation facts (provider name, course title, reference, status, dates) so employers and learners can verify credentials.
• To send service and accreditation notifications, renewal reminders and monitoring alerts.
• To meet legal, audit and quality-assurance obligations.

We rely on contract (to deliver accreditation services you request), legitimate interests (platform security, service improvement and the integrity of public verification), consent (non-essential cookies and marketing communications) and legal obligation (record keeping).

Evidence you upload may be analysed by AI models to map it against GLS criteria and highlight gaps. AI output is advisory only. No accreditation decision is made by automated means alone — a qualified GLS reviewer makes every decision. We do not permit our AI providers to use your evidence to train their models.

• Infrastructure, database, storage and email providers acting under contract.
• AI model providers used solely to analyse submitted evidence.
• Assigned GLS reviewers and administrators, on a need-to-know basis.
• Authorities or regulators where we are legally required to disclose.

Accreditation records, evidence and decision trails are retained for the accreditation cycle plus six years so that issued credentials remain auditable and verifiable. Account data is deleted on request unless we must keep it to maintain the integrity of an issued accreditation. Security logs are kept for up to 12 months.

GLS operates globally. Where personal data moves outside your country, we use recognised safeguards such as UK/EU standard contractual clauses and adequacy decisions, together with encryption in transit and at rest.

Subject to local law you may request access, correction, erasure, restriction, portability, or object to processing, and you may withdraw consent at any time. To exercise a right, contact us through the contact page. We respond within one month. You may also complain to your national data protection authority.

Access is role-based and enforced at the database layer, evidence files are stored in access-controlled storage, transport is encrypted, and administrative actions are recorded in an audit log.

Privacy questions and requests can be sent through our contact page and are routed to the GLS data protection contact.