Privacy policy

This explains what TableRight collects about you when you use it, why, who helps us look after it, and what you can ask us to do with it. We've tried to keep it short and plain.

Who we are

TableRight is run by David Maxwell, [address]. We're the “controller” of your personal data under UK data protection law, and we're registered with the Information Commissioner's Office (registration number ZC293622). To ask about your data, email [email protected].

What we collect

• Without an account: nothing that identifies you. Your progress is kept in your own browser, not sent to us.
• Your account: your email address and, if you sign in with Google, the name on your Google account. You can change the name on your account page.
• Your learning: which exercises you've solved, hints used, XP, the days you practised, the answers you submit, and your exam answers and results.
• Certificates: the name, course, level and dates on each certificate you earn. Anyone with a certificate's ID or link can check it (that's what makes it worth having), but the check pages aren't listed in search engines, and certificates can't be looked up by name.
• Waiting list: if you join the waiting list for the Data Analyst Path, your email address (and your account, if you're signed in).
• Payments: your plan and its status. Card details go straight to Stripe, our payment provider: we never see or store them.
• Technical records: our hosting and database providers keep short-lived logs (such as IP addresses) to keep the service secure, and we record errors (without your details) so we can fix them.

Why we use it

• To run your account, save your progress, mark your exams and issue certificates: this is what you sign up for (performing our contract with you).
• To take payments and keep the records the law requires for tax (legal obligation).
• To keep TableRight secure, fix problems and improve the lessons, for example by seeing which exercises people find hardest (our legitimate interests, which don't override yours).
• If you join a waiting list, to email you when the steps you're waiting for open, and about the founding-member price (your consent). Every email lets you leave the list, and you can ask us to delete your address at any time.
• To email you about your account, such as sign-in links and receipts. We won't send you marketing unless you ask for it.

If your employer pays for your place through a Teams plan, your team's managers can see your progress, exam results and certificates for the courses they've given you.

Who helps us

These companies process data for us, under contracts that require them to protect it:

• Supabase: our database and sign-in, hosted in London.
• Stripe: payments.
• Railway: hosts the website.
• Our email provider: sends sign-in links.
• Plausible: counts visits to pages without cookies or any personal data.
• Google: only if you choose to sign in with Google.

Where a provider handles data outside the UK, we rely on the UK's adequacy regulations or the standard contract clauses the ICO approves.

How long we keep it

We keep your account and learning record for as long as you have an account, so your certificates can be checked. If you ask us to close your account we delete it within 30 days, apart from payment records, which we must keep for six years. Logs are deleted after about 30 days.

Your rights

You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to have it in a form you can take elsewhere. Email [email protected] and we'll reply within a month. If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

We only use the cookies and browser storage TableRight needs to work. The cookie policy lists them.

Age

TableRight is for adults learning skills for work, and isn't meant for anyone under 16.

Changes

If we change this policy, we'll update the date at the top, and email account holders about anything important.