What we collect, and why.
Last updated: 7 September 2026
What we collect
Three separate things, kept separate on purpose:
- If you join the founding list: your email address and which page you joined from.
- If you take a course and claim a certificate: the name you want on the certificate, your email address, and the fact that you passed. The email identifies the certificate if it ever needs reissuing. It does not join you to any mailing list unless you tick the optional box on that form.
- If you buy a course: your email address and what you bought. Payment is handled by Stripe and we never see or store card details.
Plus privacy-preserving aggregate analytics: no advertising cookies, no cross-site tracking, and no email open or click tracking of any kind.
Why (lawful basis)
Consent for marketing email. You are only on the founding list if you asked to be, either through a signup form or by ticking the optional box when claiming a certificate. Every email carries a one-click unsubscribe, and unsubscribing is permanent: we keep a record that you left precisely so that you are not added again by a later import.
Contract for everything else. Issuing a certificate you earned, keeping it verifiable on the public register, and giving you access to a course you paid for are all things you asked us to do. We do not use those records to market to you.
Who processes it
Our website is hosted on Cloudflare. Emails are stored and sent through our email service provider. Analytics are processed by PostHog, configured without advertising cookies. We do not sell or share your data with anyone else.
Who is responsible
The data controller is London School of AI Governance Ltd, registered in England and Wales, company number 17373376, at 167-169 Great Portland Street, 5th Floor, London W1W 5PF. We are registered with the UK Information Commissioner's Office under the data protection fee regime, registration reference ZC211405. Data protection enquiries: [email protected].
Your rights
Under UK GDPR you may request access to, correction of, or deletion of your data at any time: [email protected]. We respond within one month. You may also complain to the UK Information Commissioner's Office (ico.org.uk).
At launch
When courses go live, this policy will be replaced with a full version covering learner records, payment processing (handled by Stripe; we never see card numbers), assessment data and the certificate verification register, each with stated retention periods.