Privacy notice
What personal data IF Digital collects, why, and your rights. Last updated 11 November 2026.
The short version
IF Digital is run by IFDIGITAL LTD (company number 12950710). We decide how your personal data is used, so we are the controller under UK GDPR. Contact us at support@ifdigital.org.
Browsing the guidance site needs no account. We do not use analytics, advertising or tracking cookies, and we do not record how you move around the site or what you read.
We do not collect case information
IF Digital does not need and does not ask for case information, and the site has no way to submit it. Please do not put case details, personal data about other people or restricted material in a support email, a question to Ask IF Digital, or anywhere else. If you do send something like that by mistake, tell us and we will delete it.
What happens when you visit
- Server logs. Our web server records the time, your IP address, the page requested and the result. We use this only to keep the site secure and working, and delete it after 14 days.
- Safe-use acknowledgement. When you first visit, you are asked to acknowledge the safe-use notice. That choice is stored only in your browser and is never sent to us.
- Ask IF Digital. Your question is answered by software running on our own equipment, reached over our private network. It is not sent to an outside AI provider, not stored, and not added to any log.
Why we use data, and how long we keep it
| What | Why (legal basis) | How long |
|---|---|---|
| Support emails: your name, email address and what you write | Answering you (legitimate interests) | 2 years after the request is closed |
| Learning account on learn.ifdigital.org: name, email, username, course progress and completion | Providing the course you signed up for (contract) | While the account is active, then deleted 12 months after you last use it |
| Marketing emails: name, email address, when and where you signed up | Your consent, confirmed by a second email (double opt-in) | Until you unsubscribe. We then keep only your address on a do-not-email list so we do not contact you again |
| Business contacts and customer records | Contract and legitimate interests | While the relationship continues, then up to 2 years |
| Accounting and tax records | Legal obligation | 6 years |
The learning platform keeps the standard activity records needed to run a course, such as progress and completions. We use them to run the course and to help you, not to profile you.
Who else handles your data
We do not sell your data. Some companies handle it for us under contract:
- Hetzner hosts our servers in Germany.
- Purelymail hosts our email.
- Cloudflare provides our domain name service and passes web traffic to our servers.
The UK recognises the EU and EEA as providing adequate protection. Where a provider processes data elsewhere, we rely on the safeguards approved under UK data protection law. We may also share data where the law requires it.
Access, correction, deletion and complaints
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or stop using it for something you object to. Email support@ifdigital.org. We aim to reply within one month.
Every marketing email has an unsubscribe link, or you can email us to stop. Withdrawing consent does not affect service emails such as password resets.
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
If this notice changes
We will update this page and its date when what we do changes, for example if we start taking payments or add analytics.
