User Data Deletion Policy

Introduction

This User Data Deletion Policy explains how you can request the deletion of your personal data held by The Career Academy, including data obtained through third-party logins (SSO) and accounts on our learning management system (Totara).

We are committed to protecting your privacy and ensuring that you can exercise your rights to request deletion of your personal data in accordance with applicable data protection laws, including GDPR and other privacy regulations.

How to Request Deletion

If you wish to delete your personal data, you can submit a request as follows:

Email: privacy@thecareeracademy.com
Subject Line: Data Deletion Request

Please include the following information to help us verify your identity and process your request:

  • Your full name
  • The email address associated with your account
  • A description of the deletion request including the SSO provider

Once your request is received, we will verify your identity before processing the deletion.

What Data Will Be Deleted

Depending on the type of account and login method, we will delete the following:

1. Accounts with Third-Party Logins (SSO)

We store minimal information to enable login via a third-party provider, such as:

  • Unique provider identifier
  • Name
  • Email address

Upon deletion request, all stored SSO information linked to your account will be permanently removed. We do not store passwords or authentication credentials from the provider.

2. Totara LMS Accounts

For users with Totara accounts, deleting an account will remove:

  • User profile information (name, email, ID numbers)
  • SSO identifiers
  • Course enrolments and participation records
  • Grades, certificates, and other learning progress data

Note: In some cases, we may anonymize learning records instead of full deletion to comply with regulatory or reporting requirements. Anonymization removes all personal identifiers while preserving course completion records for reporting purposes.

3. Other Personal Data

We will also remove personal data collected through other interactions with our services, such as:

  • Contact details
  • Payment information
  • Support or feedback correspondence
  • Marketing preferences

Timeframe for Deletion

We will process verified deletion requests within 30 days of receipt.

In certain cases, where the request is complex or legal obligations require retention, deletion may take longer. If this occurs, we will notify you and keep you updated on the progress.

Revoking Third-Party Access

You can also revoke access directly through the authentication provider you used to sign in. This prevents future login attempts and stops any further data sharing between the provider and our services. The method to revoke access can be found on the providers website or by contacting their support team.

Note: Revoking access at the provider does not automatically delete your data stored on our system. You must submit a deletion request to remove your personal data from our services.

Confirmation of Deletion

Once your data has been deleted, we will send a confirmation email indicating that your request has been completed. This may include a reference number for your records.

If you do not receive confirmation within 30 days, please contact us again at privacy@thecareeracademy.com.

Contact Information

If you have any questions about this policy or your data deletion request, contact:

The Career Academy International Limited
Email: privacy@thecareeracademy.com