data protection Policy

For the purposes of this policy, SEAN PURCELL SBL means the business partnership of Sean Purcell trading as SEAN PURCELL SBL.

1. SEAN PURCELL SBL Study sites / ACCA CBE practice platform / ACCA Exam Results service

1.1. To gain access to any SEAN PURCELL SBL Study site you must give us data on your first name, last name and email address. Our study sites use Moodle Cloud open-source software, to store this information. Moodle logs your IP address for security and support purposes.

1.2. All Moodle sites require a small amount of information to be stored and maintained for user access. User data will be stored securely within this Moodle site and backed up nightly. Backups are kept for 30 days. You may amend or correct this data yourself through your Moodle user account, which you have access to during and after your enrolment.

1.3. SEAN PURCELL SBL has been allocated an exclusive area of ACCA’s Practice Platform by ACCA for the sole use of SEAN PURCELL SBL students. To register you on this area SEAN PURCELL SBL must provide the ACCA with your name, email address, date of birth and ACCA number, which the ACCA cross checks against their records before allowing SEAN PURCELL SBL to register you as a student on the SEAN PURCELL SBL exclusive area.  Providing us with this data is taken to also give us permission to use this data for this purpose.

1.4. Where you give us explicit permission to do so, we will also use your data to register you as our student with ACCA.  This allows ACCA to assess our collective pass rates, and for ACCA to provide us with your exam result. You may withdraw your permission at any time by amending your Study Site user information.

1. Accounting Data

2.1. SEAN PURCELL SBL is required to keep data on clients, tutors and suppliers for accounting purposes.  We use spread sheets and Xero accounting package to do this.

2.2. All clients and suppliers (students, tutors and others) who interact with SEAN PURCELL SBL consent to consent to SEAN PURCELL SBL storing and processing their contact details and transaction data.

2.3. SEAN PURCELL SBL accounting system includes both cloud-based and desktop-based systems. The accounting system allows us to maintain records of the services you have purchased from or supplied to us. We must maintain this data for HMRC and statutory compliance purposes.

2.4. We keep some or all of the following information for accounting purposes:

  1. a) Customer / supplier name, address, phone, email and other contact details.

  2. b) Transaction data such as PayPal / Stripe reference, amount, date, product purchased etc.

3 . Backups

3.1. Backups of the VLE are made daily and stored for 30 days using the Moodle Cloud software.

3.2. Backups hold a full copy of each site database: this includes all user information and their interactions with the site such as IP address, messaging, forums, assessments, days of login, activity tracking, etc.

3.3 Backups of the SEAN PURCELL SBL website are made on a daily basis and are kept by our website provider for 7 days before being overwritten.

4. SEAN PURCELL SBL server information

.1. SEAN PURCELL SBL uses cloud-based servers with third party providers based in the EU to host our websites.

4.2. All our servers are cloud based and managed / supported by EU based hosting companies and other EU and non-EU contractors. SEAN PURCELL SBL may have access to these servers from time to time, and the hosting providers or other contractors may require access for purposes of support. ALL clients (students, tutors and others) utilising our services are required to give their consent to our hosting your sites in this cloud.

  • All servers sit behind firewalls with only the required ports open to the outside world

  • User passwords must meet minimum password standards.

  • Administrative account passwords must meet strong password standards, and are usually also subject to two form factor authentication

  • Individual sites on our servers are under separate user accounts and are locked down so that one client cannot gain access to another client’s account

  • Our cloud hosting providers use intrusion detection software which monitors for unusual activity and flags on our monitoring systems should anything untoward occur

  • Our cloud service providers have software in place to prevent brute force attacks on passwords

  • Our cloud service providers’ agents use a secure password database with two form factor authentication to access account details for server and sites

  • All cloud service providers backup all sites nightly and these backups are kept for 30 days

5. Email information

5.1. Email is managed and stored on Google Drive, Microsoft OneDrive and EU hosting providers.

5.2. SEAN PURCELL SBL email is managed and stored on Microsoft OneDrive, Google and EU hosting providers.

6. Electronic document storage

6.1. SEAN PURCELL SBL stores electronic documents and files on local PC’s, Google Drive and Microsoft OneDrive. These files primarily contain information of a non-personal nature such as learning materials. However, accounting records and emails may include personal data, and learning videos may contain personal images.

7. Visual images and recordings

7.1. SEAN PURCELL SBL may use Vimeo, Zoom and YouTube to store learning videos and recordings of webinars. Such material may be retained for an extended period as it may be incorporated into subsequent learning materials.

7.2. Personal data may include the image of tutors, students and occasionally the names and comments of webinar attendees.

8. Student enrolments, progression and results

8.1. SEAN PURCELL SBL may use Zoho CRM, EKM.com, Google Sheets and Excel as longer-term data repositories of your enrolment, progression and results.  We use this data to manage your personal enrolment, for management information purposes, and to meet our obligations to ACCA on enrolments.

 ny time. To withdraw your consent, please contact us using the contact details in this Privacy Notice. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.