Updated 15 October 2026

Privacy information

Who is responsible

Alena Bikinesi trading as ICPED is responsible for ICPED's buyer and learning information. Contact hello@icped.online or the correspondence address on the seller and purchase-information page for privacy enquiries.

Information and where it comes from

We receive buyer names, email addresses, purchase choices, country declarations, verified billing country, order references, applicable tax amounts, purchase-term acceptance, payment status, cancellation requests and support messages. For gifts, the buyer provides the recipient's name, email address, selected learning, message and delivery time. We use those details to introduce the gift and arrange learning; recipients may tell us the gift was unexpected or decline it. Please provide only information needed for the gift, not sensitive health details.

Stripe collects billing and card information and provides payment confirmation and billing information relevant to the transaction. ICPED does not receive or store the full card number or security code. The ICPED learning portal holds learning-account details, enrolments, progress, attempts, completion and awards. Reflection activities can be kept privately; do not upload personal medical information or private financial records.

Why we use it

We use buyer details to take steps requested before a purchase and perform the purchase contract. We use gift-recipient details for our legitimate interest in delivering the gift requested by the buyer, explaining the service and arranging appropriate access, while respecting the recipient's right to decline or object. Once a learner accepts their account and learning arrangements, we use their information to provide that service. We use necessary financial records to meet legal obligations, and proportionate security and support records for legitimate interests in protecting the service and resolving problems. We use consent for optional launch updates and optional usage measurement. We do not make automated decisions about eligibility for work, healthcare or other high-impact outcomes.

Your learning and optional notes

The ICPED learning portal stores your account, access dates, opened lessons, knowledge-check attempts, completion records and optional notebook entries. Notes you type are saved to your account and can be downloaded; you can instead reflect without typing or use paper. Do not enter private medical information or sensitive financial records. Buyers, gift senders, affiliates and other programme members cannot see your notebook or results. Authorised technical support may access relevant records where necessary to operate, recover or support the service. Moodle remains a restricted backup during the transition, including earlier learning and certificate records. Necessary secure session cookies support sign-in. Short-lived hashed network identifiers help limit sign-in and reset abuse.

Sharing and services

Hostinger hosts the website, private order storage and ICPED learning portal. Stripe Managed Payments and Link handle payment, tax location checks, indirect tax, receipts, fraud prevention and transaction support under their own privacy information. Stripe/Link act as independent controllers for these functions; ICPED remains responsible for website orders, gift delivery and ICPED learning. See Stripe privacy and Link privacy. Transactional emails are sent through the service used by ICPED's transactional email service. WhatsApp processes messages and links only when you choose to share there. Bootstrap resources are served through jsDelivr and fonts through Google Fonts; these providers receive normal web requests. Relevant providers may process information outside the UK under their own privacy and transfer arrangements; contact ICPED for information about transfers involved in our service. Where EU GDPR applies, you may exercise access, correction, erasure, restriction, portability and objection rights as applicable and complain to the competent supervisory authority in your EU country. No deletion promise overrides legally required financial-record retention.

We share only relevant order and access information with authorised ICPED operations and, where necessary, advisers or authorities for financial obligations or lawful requests. Buyers do not automatically receive learner passwords, grades or private reflections. The recipient gift view excludes the buyer's email address, payment amounts and private order token. We do not sell personal information or automatically add buyers or recipients to a marketing list.

Retention and security

Core transaction and tax records are kept for the applicable accounting and legal retention period: for this sole-trader business, normally at least five years after the 31 January submission deadline for the relevant tax year, and longer where required by a live claim, investigation or applicable tax-record requirements, which can include a ten-year retention period for relevant cross-border VAT records. Stripe retains its own payment and tax records under its obligations. Gift messages and contact details are reviewed when delivery, access and related support no longer need them; unnecessary content is removed or minimised rather than retained merely because a financial record must be kept. Learner account and completion records are reviewed when access ends and an account becomes inactive, taking ongoing learning, certificate verification and unresolved requests into account. You may ask us about the retention of a particular record.

Orders are encrypted in private hosting storage outside the public website. Access is restricted to authorised operations; private order and gift links act as access tokens, so keep them secure. Hosting backups and provider records have their own retention cycles. We cannot guarantee inbox delivery or the security of information forwarded by a buyer or recipient outside ICPED.

Browsing, previews and optional measurement

Trying a public lesson does not create an account. Names and messages in gift previews stay in that page until you submit a purchase. If you request a launch update, your email and consent time are stored privately for that purpose; requests older than 90 days are removed by regular housekeeping. Ask hello@icped.online to remove a request.

With your choice to allow measurement, ICPED records daily aggregate counts such as views and gift-link clicks, excluding names, emails, gift-message text and order tokens. Short-lived network-address hashes help limit abuse; aggregate counts exclude these hashes. No advertising trackers are installed. The website's measurement controls let you change your choice. Essential security, purchase and login storage are needed to operate the service.

Your rights and questions

Depending on the circumstances, you can ask to access or correct information, request deletion or restriction, object to legitimate-interest processing, or request portability. You can withdraw optional consent without affecting its earlier lawful use. Some records must remain for legal obligations or claims. We may need proportionate information to verify a request. Contact hello@icped.online; never send a password.

If you are unhappy with our handling, contact us first or complain to the UK Information Commissioner's Office. We explain relevant privacy information before collecting order details and link it in recipient communications, including where details originally came from the buyer.

Younger learners and account authority

For ages 13–17, the buyer selects their authority declaration, parent/guardian email approval or an assisted route. Parent email is not routinely required where authority is already declared. Complete authority declarations are processed automatically after verified payment and the gift date. If the buyer chooses email approval, access waits for the parent/guardian’s explicit approval. Necessary learner account and learning records are processed under assessed legitimate interests with extra weight to children’s interests and private defaults; the adult transaction is covered by the buyer’s contract. Local requirements are checked before access. New gifts do not need a separate learner-approval step; earlier gifts keep their recorded arrangements.

We record the age group, country, buyer declaration and notice version/time, any relevant guardian contact and independent approval or operator check. A declaration is not represented as verified identity. Young learners are not added to marketing or public discussions. Private reflections need not be uploaded. Contact ICPED to correct details, object or stop participation. Relevant financial or safeguarding records may remain as required. If the parent/guardian refuses or withdraws account authority, ICPED stops access and arranges a full refund to the purchaser. Read the shorter account explanation.

Family and group programme bookings

The buyer supplies the names and individual emails on the final participant list. Adult participants must be happy to receive an account and joining instructions. Closer Together and Our Family Stories can include ages 13–17 with at least one adult participant; the buyer must first have parent/guardian authority for each younger account. We record the age band and the declaration, notice version and time, not an exact birth date. Children under 13 do not have accounts; they may join suitable activities through an adult. The care-planning and project programmes remain for adult accounts. The roster and access status are shown only on the buyer’s private booking page and to ICPED staff arranging access; the booking does not expose other participants’ details to learners. Each named learner receives their own learning instructions. The ICPED learning portal provides individual lessons, practical tools and personal progress. Family conversations happen through the group’s own chosen methods, such as WhatsApp, calls, voice notes, email or in person, and are not collected as programme discussion posts in the ICPED learning portal. You decide what to share in those channels, following their providers’ privacy terms where relevant. Passwords and personal results are not supplied to the buyer or other participants. Reflect privately offline, or choose to save and download notes in My notebook. Typed notes are saved by ICPED; avoid sensitive health or financial details. The buyer receives payment information. Contact hello@icped.online if an invitation was unexpected, you do not wish to take part or a same-person name/email correction is needed. Proportionate checks may be needed before changing account details.

Affiliate recommendations and partner accounts

An invited affiliate can use a personal referral link or code. The code follows that browsing and checkout journey in page links and memory, without a long-term referral tracking cookie. You can change or remove the optional code before purchase. We record the assigned affiliate and agreed commission rate with the order to attribute a verified purchase, prevent duplicate or improper credit and manage payments. The price you pay does not increase. This processing supports our legitimate interests in administering the referral programme; ask hello@icped.online if you wish to object or discuss an attribution.

Affiliates see only their own referral references, product titles, GBP sale/tax/base amounts, captured commission rates, earnings status, scheduled payment dates and manual payment records. They do not receive buyer or recipient names, emails, account identifiers, grades or private order, gift or approval links. Only authorised ICPED administrators can manage affiliates and review the overall ledger. Affiliate contact details, programme acceptance, password hashes, security records and financial activity are stored privately and encrypted. Necessary, secure login-session cookies operate the affiliate portal; it has no advertising trackers or optional analytics. Short-lived network-address hashes rate-limit sign-in, reset requests and recorded link opens; these hashes expire within an hour. Aggregate link-open counts may include repeats or bots.

Invitation and password-reset emails are transactional, not marketing subscriptions. Single-use help links expire and are removed after use or expiry; invitation/reset message data is kept privately only while delivery is needed. Commission, payment and programme-acceptance records are retained for applicable accounting, dispute and legal obligations, following the financial-record periods above. Affiliate account information is reviewed when an account closes, subject to those obligations. Weekly reports contain that affiliate's own records and can be downloaded or sent by ICPED. Ask hello@icped.online about correction, access, objection or closure; never send your password.