LEGAL
Last updated: 15 September 2026.
Transforming Care Academy ("we", "us") takes the privacy of everyone who contacts us seriously — whether you're enquiring about training, applying to become a Co-Expert, or (in future) signing up for online courses. This page explains what personal data we collect, why, and what rights you have over it.
Transforming Care Academy is the data controller for the information described on this page. If you have a question about how your data is handled, contact us at enquiries@transformingcareacademy.co.uk.
Course & team enquiries. When you submit the enquiry form, we collect your name, email address, organisation (if given), what you're enquiring about, and any details you choose to add. We use this to respond to your enquiry and, if it goes ahead, to arrange training. Our lawful basis is legitimate interest (responding to a request you've made) and, where training is booked, performance of a contract.
Co-Expert applications. When you apply to become a Co-Expert, we collect your name, email, optional phone number, and whatever you tell us about your experience. Because this role specifically involves lived experience of learning disability and/or autism, what you share may include health-related information, which UK data protection law treats as a special category of data requiring extra care. We only use this information to assess your application and, if successful, to support you in the role — we don't use it for any other purpose, and submitting the form is treated as your explicit consent to us processing that information for this purpose (see the consent checkbox on the form itself).
Online training accounts (once available). When our online learning area is live, creating an account will collect your name, email address, and a securely hashed password (we never store your actual password — a one-way hash means even we can't read it back). If you buy a paid course, payment is handled entirely by Stripe; we never see or store your card details.
We use a small number of trusted service providers to run this site and would never sell your data:
We don't share your data with anyone else, and we don't use it for advertising or sell it to third parties.
We keep enquiry and application data for as long as reasonably needed to respond to you and, if relevant, deliver training — generally no longer than 24 months after our last contact, unless we're legally required to keep it longer (for example, financial records relating to payments). Account data is kept for as long as your account is active, and deleted within a reasonable period after you ask us to close it.
This site does not currently use any analytics, advertising or marketing cookies. If you log in to access online training (once available), we use one strictly necessary cookie to keep you signed in — this doesn't track you elsewhere and isn't used for anything beyond keeping your session working, so it doesn't require separate consent under UK cookie rules. If that changes (for example, if we add analytics in future), we'll update this page and add a cookie consent banner if required.
Under UK GDPR, you have the right to ask us for a copy of the personal data we hold about you, to have it corrected if it's wrong, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. To exercise any of these, email enquiries@transformingcareacademy.co.uk. If you're not satisfied with our response, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
We may update this page as the site and our services develop — for example, once online training and payments go live. We'll update the "last updated" date above whenever we make a material change.
