Privacy Notice
Avanti Change
A1. Who we are
Avanti Change Ltd (company number 16790479), 35 Robert Street, Ynysybwl, Pontypridd CF37 3DU, is the controller of the personal information described in this notice. We are registered with the Information Commissioner's Office, registration number ZC281571. If you have any question about your information, email academy@avantichange.com or write to us at the address above.
A2. What we collect when you contact us or work with us
- When you contact us (by the contact form, email or phone): your name, email address, organisation, role, and what you tell us.
- When we work with you or your organisation: contact details of the people we work with; information about the work, such as session notes, programme materials and attendance; and invoicing details.
- When you take part in a live programme, coaching or a profile: what you share with us in sessions, your responses and reports, and feedback you give. Coaching conversations are confidential, as agreed at the start of the work.
- When you visit our website: basic technical information needed to run it securely (for example your browser and the pages requested). We don't use advertising cookies, and we use analytics cookies only if you agree (see A7).
A3. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry | Our legitimate interest in answering people who contact us |
| Deliver work we have agreed with you or your organisation, and invoice for it | Contract, or our legitimate interest where the contract is with your organisation |
| Keep records we must keep (for example tax and accounting records) | Legal obligation |
| Send you news about our work, if you ask for it | Your consent, which you can withdraw at any time |
A4. Who we share it with
We don't sell your information. We share it only with:
- associate facilitators and coaches who deliver work with us, under a written agreement;
- the services that run our email (Microsoft 365), our website, and our banking and accounts (Monzo Business), as our processors, under contracts that protect your information;
- your organisation, where it commissioned the work, and only what was agreed with you at the start (never coaching content);
- anyone the law requires us to share with.
A5. How long we keep it
- Enquiries that don't lead to work: two years, then deleted.
- Client work: six years after the work ends, for legal and accounting reasons, then deleted.
- Coaching notes: one year after the coaching ends, unless you ask us to delete them sooner.
A6. Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, and to move it to another provider. Email academy@avantichange.com; we will reply within one month. If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
A7. Cookies
We use the cookies needed to keep the site working and secure, for example to keep you signed in. These don't need your consent.
With your permission, we also use analytics cookies from PostHog to see how people use the site, such as which pages they visit, how they found us and where they get stuck, so we can improve it. These are only set if you click "Accept" on our cookie banner. You can change your mind at any time through "Cookie settings" at the foot of every page. We don't use advertising cookies.
A8. Changes
We will update this notice when how we use information changes, and show the date at the top.
The Avanti Academy
B1. What we collect when you start a Taster
When you start a free Taster we ask for your first name, your work email address and, if you choose, your organisation. This opens your learning passport: your account with the Avanti Academy. We also record whether you ticked the box asking for news, with the date and the exact wording you saw.
B2. Why we can use your information
| What we do | Lawful basis |
|---|---|
| Create your account, provide the courses you buy, record your progress, issue certificates | Contract |
| Take payment and keep records of purchases | Contract and legal obligation |
| Send service emails about your account and the courses you have bought (sign-in links, receipts and certificates) | Contract |
| Improve our courses, using how courses are used and feedback | Our legitimate interest |
| Send news about other courses | Your consent, which you can withdraw at any time |
| Produce profile reports for the person who bought them | Contract |
| Invite and include the people chosen by the buyer | Our legitimate interest in producing the report that was asked for |
B3. What we record in your learning passport
We record the Tasters you start and finish, the slides you open in each module, your quick check answers and scores, how far you are through each course, anything you buy, and the date you were last active. Quick check scores are saved to your account. If you take an assessment, we keep your result and your certificate.
We also keep a log of searches on the site that found nothing, without any link to you, so we can see which courses people are looking for.
B4. If your organisation buys your place
If your place was bought by your organisation, the person who manages those places can see your email address, when you joined, how many courses you have started and finished, and when you last made progress. They never see your quick check or assessment answers or scores.
B5. Feedback on our programmes
When you finish a course or programme, we invite you to give feedback. You can answer anonymously: then we don't collect your name, email or anything else that identifies you, and we don't link your answers to your learning passport. If you choose to give your name, we keep it with your feedback so we can reply, look into anything you raise and, only if you tick the box, quote you. Your answer about any adjustments you needed is always kept anonymously, even if you give your name. Concerns and complaints are seen only by the people who need to resolve them. We use feedback to improve our programmes and to report on their quality, and we never report results for groups of fewer than five people. About three months after you finish, we may ask you a few short questions about what you have applied. We keep named feedback for two years; after that we remove names and email addresses and keep only the anonymous answers.
B6. Avanti Profiles
If you buy or take an Avanti profile, we keep your answers and your report. If you invite other people to take part, or to give their views, we collect each person's name and email address so we can send their invitation, and their answers. We use these only to produce the reports. Raters' individual answers are never shown in a way that identifies them. If someone else arranged your questionnaire, your report is yours: they see it only if you choose to share it. Anyone invited can decline.
B7. The emails we send
Everyone who opens a passport gets the emails that come with it: a link back to the Taster, sign-in links when you ask for them, and confirmation of anything you buy.
We only send news about other topics and programmes if you ticked the box. You can change your mind at any time on My learning passport, or by using the unsubscribe link in any news email.
B8. Cookies and tracking
Avanti Academy does not use advertising cookies. It keeps your sign-in and your progress in your browser's own storage, so the site works for you.
If you agree through our cookie banner, we use PostHog analytics to understand how Avanti Academy is used: the pages you visit, what you click, how you arrived (for example from one of our LinkedIn posts or emails), and whether you start a Taster, sign up or buy a programme. On public pages we may also record how you move around a page so we can find what's confusing. Anything you type is hidden before it leaves your browser, and we never record your learning pages, your Profiles or your account pages. If you're signed in, we link this to your account by an anonymous number, not your name or email.
Our lawful basis is your consent, which you can withdraw at any time through "Cookie settings" at the foot of every page. If you don't agree, none of this is collected.
B9. Who we share it with, and where it is held
We use these services to run Avanti Academy, as our processors, under contracts that protect your information:
| Service | What it does | Where your information is held | Safeguard for any transfer outside the UK |
|---|---|---|---|
| Supabase | Accounts, learning records, sign-in | The EU (Paris, France) | The UK recognises the EU as giving adequate protection. For anything outside it, Supabase's data processing agreement includes the EU Standard Contractual Clauses with the UK Addendum |
| Cloudflare | Hosting, and checking that forms are sent by a person rather than an automated program | Pages are served from Cloudflare's worldwide network, nearest to you. Course videos are stored in eastern North America | UK Extension to the EU-US Data Privacy Framework, with the UK Addendum as a fallback |
| Resend | Sending emails | Emails are sent from Ireland. Account data and email logs are kept in the United States | UK Extension to the EU-US Data Privacy Framework, with the UK Addendum as a fallback |
| Stripe | Taking payments (we never see or keep your card number) | The United States, and Stripe's own processing locations | UK Extension to the EU-US Data Privacy Framework, with the UK Addendum as a fallback |
| Microsoft 365, provided to us through Trinity Pathways Ltd | Our email, including the Avanti Academy mailbox | United Kingdom | Microsoft's data protection terms for business customers |
| CodeTwo | Adds our email signatures and banners to email we send from our own mailboxes | The United Kingdom | None needed: it stays in the UK |
| PostHog | Website analytics, only if you agree to analytics cookies | The EU (Frankfurt, Germany). Kept for up to 12 months (screen recordings for 1 month) | The UK recognises the EU as giving adequate protection. For anything outside it, PostHog's data processing agreement includes the EU Standard Contractual Clauses with the UK Addendum |
We also use the services named in A4: Microsoft 365 for email, and Monzo Business for our banking and accounts.
We don't sell your information or share it with anyone else, except where the law requires.
B10. How long we keep it
- Your account and learning passport: while you have an account. If you close it, or it has been unused for three years, we delete it within 12 months, except as below.
- Purchase records: six years, for tax and accounting reasons.
- Certificate register (your name, the course, the certificate number and date): six years, so we can confirm or reissue a certificate if you ask.
- Profile answers and reports: two years after the report is issued, then deleted. Raters' names, email addresses and answers are deleted at the same time. If someone invited never takes part, we delete their name and email address 90 days after the invitation.
B11. Copies, corrections and deletion
To ask for a copy of your information, or for it to be corrected or deleted, email academy@avantichange.com from the address on your account. We will reply within one month. You can also complain to the Information Commissioner's Office (see A6).