MoiraCorp Academy is operated by MoiraCorp Ltd, a company registered in England and Wales under company number 15897098, with its registered office at 20 Wenlock Road, London N1 7GU, United Kingdom.
For the purposes of UK data protection law, MoiraCorp Ltd is the data controller for personal data collected through this site.
Email: support@moiracorp.com
Telephone: +44 7775 636470
Post: 20 Wenlock Road, London N1 7GU, United Kingdom
We are not required to appoint a Data Protection Officer. Data protection questions should be sent to support@moiracorp.com.
In this policy, we, us and our mean MoiraCorp Ltd. You means anyone who visits this site or holds an account on it. Our Site means academy.moiracorp.com.
2.1 When you create an account we collect your first name and last name, your email address, a password (stored only as a salted cryptographic hash, which means neither we nor our platform provider can read it), a profile picture if you choose to upload one, and whether you have opted in to receive marketing emails.
2.2 As you use the courses we record which courses you are enrolled in and when, your progress through each course, your answers to quizzes and assessments and the results, certificates issued to you, and anything you post in the community area or send through the in-site inbox.
2.3 When you buy a course we keep a record of what you bought, when, and for how much, together with the email address and billing details you gave at checkout. We do not collect, see or store your card number. Card details are entered directly into Stripe's own checkout and are processed by Stripe; we receive only confirmation that a payment succeeded.
2.4 We also collect technical data as part of normal web server operation and for security, including IP address, browser type and device information, along with the cookie data described in our Cookie Policy.
- 3.1 To create and run your account, give you access to the courses you have enrolled in, record your progress, issue certificates, take payment, provide receipts, operate the community area and in-site messaging, and answer your support enquiries. Our lawful basis is performance of a contract with you.
- 3.2 To keep accounting and transaction records. Our lawful basis is compliance with a legal obligation under UK tax and company law.
- 3.3 To keep the site secure, prevent fraud and abuse, and diagnose faults. Our lawful basis is our legitimate interests in running a secure and working service.
- 3.4 To understand how the site is used, in aggregate, so that we can improve it. Our lawful basis is your consent, given through the cookie preferences control.
- 3.5 To send you marketing emails about MoiraCorp courses and services. Our lawful basis is your consent.
- 3.6 Where we rely on legitimate interests we have considered whether our interest is overridden by your rights, and we are satisfied it is not: the processing is limited to keeping the service running and secure, and involves no profiling and no disclosure for anyone else's commercial purposes. You may object at any time.
- 3.7 Where we rely on consent you may withdraw it at any time, and withdrawing it does not affect anything we did before you withdrew it. Every marketing email carries an unsubscribe link, and cookie consent can be changed at any time through the cookie preferences control on this site.
- 3.8 You can browse the public pages of Our Site without giving us any personal data. Name, email address and a password are required to create an account, because without them we cannot identify you or record your progress; this is a contractual requirement, not a statutory one. Everything else is optional, and declining it does not affect your access to courses you have paid for.
- 3.9 We do not collect special category data such as health, religious or political information, and you should not post such data in the community area. We do not collect date of birth, postcode, job title or demographic profiling data, and we do not buy personal data from third parties. The Academy is intended for adults working in regulated financial services, and we do not knowingly collect personal data from anyone under 18.
4.1 We use a small number of service providers who process personal data on our behalf, under contract, and only on our instructions.
4.2 LearnWorlds operates the Academy platform, including accounts, course delivery, the community area and email notifications. Your account and course data is hosted on Google Cloud infrastructure in Ireland. LearnWorlds uses its own sub-processors to run the platform, including for video hosting, transactional email and error monitoring; its current list is published at learnworlds.com/dpa.
4.3 Stripe processes card payments.
4.4 Mixpanel provides anonymised product analytics, and only where you have consented to analytics cookies.
4.5 We do not sell your personal data. We do not share it with advertising networks. We do not use it for advertising, retargeting or profiling.
4.6 We may disclose personal data where we are legally required to do so, for example to a court, a regulator, or a law enforcement body acting under proper authority.
- 5.1 Your account and course data is held within the European Economic Area, in Ireland.
- 5.2 Some of our providers, and some of LearnWorlds' sub-processors, are based in or transfer data to the United States. Where that happens the transfer is covered by an adequacy decision, or by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, as required by Chapter V of the UK GDPR.
- 6.1 Account and profile data is kept for as long as your account is open, and for 12 months after you close it or ask us to delete it.
- 6.2 Course progress, assessment results and certificates are kept for as long as your account is open, and for 3 years after it closes, so that you and your employer can evidence completed training.
- 6.3 Community posts and messages are kept until you delete them or your account is closed.
- 6.4 Purchase and accounting records are kept for 6 years from the end of the financial year in which the transaction took place, as required by UK tax law. We cannot delete these earlier.
- 6.5 Support correspondence is kept for 2 years from the end of the enquiry.
- 6.6 Records of marketing consent are kept until you withdraw consent, and a record of the withdrawal is kept afterwards so that we do not contact you again.
- 6.7 Cookie data is kept for the periods set out in our Cookie Policy.
- 7.1 Under UK data protection law you have the right to be informed about how we use your data, to access the personal data we hold about you and receive a copy of it, to have inaccurate data corrected, to have your data erased in certain circumstances, to restrict how we use it in certain circumstances, to object to processing carried out on the basis of legitimate interests, to object to direct marketing at any time and without exception, to data portability, and to withdraw consent where we rely on consent.
- 7.2 Exercising these rights is free of charge. We will respond within one month. If a request is especially complex we may extend that by up to two further months, and we will tell you if we do.
- 7.3 To exercise any of these rights, email support@moiracorp.com. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
- 7.4 You can also view and change much of your own data directly, at any time, from your account settings.
- 8.1 We do not make decisions about you that produce legal effects, or similarly significant effects, on the basis of automated processing alone.
- 8.2 Course progress tracking and automatically marked quizzes do not decide anything about you outside the course itself, and a person will review any assessment result on request.
9.1 The Academy runs on the LearnWorlds platform, hosted on Google Cloud infrastructure certified to ISO 27001 and SOC 2. All traffic to this site is encrypted in transit using TLS, and data is encrypted at rest. Passwords are salted and hashed and are never stored or transmitted in plain text.
9.2 Card payments are handled by Stripe, a PCI DSS Level 1 service provider. Neither we nor LearnWorlds stores, processes or transmits card details.
9.3 Access to account data inside MoiraCorp is limited to those who need it.
9.4 No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms we will report it to the Information Commissioner's Office within 72 hours, and we will tell you directly where the law requires it.
10.1 We may update this policy. When we do we will change the date at the end of it, and where the change is significant we will tell account holders by email.
10.2 Continuing to use the site after a change does not by itself mean you have agreed to new processing that requires your consent. Where consent is required we will ask for it separately.
11.1 If you have any question about this policy, or about how we handle your personal data, email us at support@moiracorp.com or write to MoiraCorp Ltd, 20 Wenlock Road, London N1 7GU, United Kingdom.
11.2 If you are unhappy with how we have handled your personal data, please tell us first so that we can try to put it right.
11.3 You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, on 0303 123 1113, or at ico.org.uk.
11.4 This Privacy Policy was last updated on 15 September 2026.
