Skillspan Privacy Policy

Effective Date: 05/02/2026
Last Updated: 012/02/2026
Company Name: Heylios Ltd T/A Skillspan
Registered Office: Little Daux, Dorking Road, Warnham, RH12 3QQ
Contact: Info@skillspan.co.uk

1. Introduction

Heylios Ltd T/A Skillspan (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website, services, or engage with our learning content.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following types of personal data:

• Name, email address, and contact details
• Business name and role (for SME clients)
• Login credentials and course access history
• Payment and billing information
• Usage data (e.g. page views, course progress)
• Feedback, survey responses, and support queries

We do not collect sensitive personal data unless explicitly required and consented to.

3. How We Use Your Data

We use your data to:

• Provide access to SkillSpan courses and services
• Manage your account and learning progress
• Process payments and issue invoices
• Respond to enquiries and support requests
• Improve our content and user experience
• Send updates, newsletters, and relevant communications (with consent)

4. Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent (e.g. marketing communications)
• Contract (e.g. course access and billing)
• Legitimate interest (e.g. improving services, analytics)
• Legal obligation (e.g. financial recordkeeping)

5. Data Sharing

We do not sell your data.
We may share data with trusted third-party processors (e.g. payment gateways, email platforms) under strict data protection agreements.

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Secure servers and encrypted connections
• Access controls and password protection
• Regular security reviews and updates

7. Data Retention

We retain personal data only as long as necessary for its purpose, or as required by law.
Inactive accounts may be anonymised or deleted after 2 Years.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent at any time
• Lodge a complaint with the ICO
  To exercise your rights, contact us at Info@skillspan.co.uk

9. Cookies

Our website uses cookies to improve user experience and analyse traffic.
You can manage cookie preferences via your browser settings.
See our Cookie Policy for details.

10. Third-Party Links

Our site may contain links to external websites. We are not responsible for their privacy practices.

11. Changes To This Policy

We may update this policy from time to time.
Any changes will be posted on this page with a revised effective date