4MAX LEARNING PORTAL

Privacy notice

What the 4max Learning Portal (learn.4max.co.uk) collects, why, who else handles it, how long we keep it, and your rights. Last updated: 10 November 2026.

This notice covers the 4max Learning Portal. It sits alongside the 4max website privacy notice, which covers www.4max.co.uk, our mailing list and contact form.

Who we are

The 4max Learning Portal is run by 4max Ltd, a company registered in England and Wales, company number 17062349, registered office South Molton, Devon, EX36 3PE. 4max Ltd is the controller of the personal data described here.

Questions, or to use any of your rights: email mentor@4max.co.uk, or use Help in the portal.

What we collect, and why

WhatExamplesWhy
Your accountName, email address, whether you've confirmed your email, a password if you choose one, your lesson language, Watch or Read and listen, captions on or offTo give you your own account, put your name on your certificate and remember how you like to learn
Guest progressIf you start lesson 1 without signing up: a random guest account on your device (no name or email), your lesson 1 progress and check answersSo lesson 1 works before you sign up. If you add your name and email, it becomes your account and keeps your progress
Sign-in recordsWhen you signed in, the device and browser type, sign-in links and codes sent, failed sign-in attempts. We don't store your IP address with theseTo keep accounts secure and help when a sign-in goes wrong
Lesson activityLessons opened (and in which language), pages reached, lessons completed, Watch or Read and listen, and how you found the course (for example a link from LinkedIn)To save your progress, and to see which parts of the lessons work so we can improve them
Knowledge checksYour answers and scoresTo mark them and decide when your Certificate of completion is due
CertificatesName on the certificate, course or path, date, certificate numberTo issue it, and to let anyone you show it to check it's genuine on our check page
FeedbackCourse and module ratings and comments, translation suggestions, requests for a new languageTo improve lessons and decide which languages to add. Only 4max sees your comments
SupportYour questions, our replies, and the lesson and language you were onTo answer you and keep a record of the conversation
Purchases (when paid plans open)Plan, seats, invoices and payment status from Paddle. We never see or store card detailsTo give you access to what you've paid for, and for our accounts

Emails about new lessons are separate and optional. If you tick the box when you start the course, you join the 4max mailing list after you confirm by email; the 4max website privacy notice explains how that list works, and every email has a one-click unsubscribe.

Sharing on LinkedIn. The "Announce my achievement on LinkedIn" button opens LinkedIn with a suggested post. Nothing is sent to LinkedIn unless you choose to post it, and LinkedIn's own privacy policy then applies.

We don't use your data for advertising, and we don't sell it.

If your employer gives you access

If you have a seat on a team or organisation licence, your organisation is told who has a seat, and its managers and portal admins can see your progress: the lessons and paths you've started and completed, check scores, due dates you've been given, and certificates. They can't see your support messages to us or your comments on lessons.

For these accounts your organisation decides why the data is used (for example, training records), so your employer may also be responsible for it. Ask them how they use it.

Services we use

These companies process data for us, only for the purposes below:

ServiceWhat it doesPersonal data it gets
Our web hosting providerRuns learn.4max.co.uk and stores the portal's database, and keeps standard server logs for securityEverything in the table above, and server logs such as IP addresses and pages requested
Brevo (Sendinblue SAS, France)Delivers the portal's emails: sign-in links and codes, welcome emails, support repliesYour name, email address and the message
Bunny.netStreams the lesson videosYour device's IP address and browser, as for any video stream; no account details
CloudflareCookie-free website analytics (Cloudflare Web Analytics)Technical details of each page request, such as the page and browser type, without identifying or tracking you
Google FontsSupplies the typefaceYour IP address, when your browser fetches the font
Paddle (when paid plans open)Takes payments as merchant of record, and handles VAT, invoices and refundsYour name, email, billing details and payment. Paddle is a controller for the payment itself
XeroOur accounts, for team invoicesThe organisation's billing contact and invoice
Google (Text-to-Speech, Gemini) and Anthropic (Claude)Help us make narration, captions and translations, and check lesson contentLesson text only, never your personal data

Where any of these providers process data outside the UK, they do so under recognised safeguards such as the UK's adequacy regulations or the UK International Data Transfer Addendum.

Lawful bases

How long we keep it

DataKept for
Account, progress and check resultsWhile your account is open, then deleted within 30 days of closing it
Certificates6 years, so they can still be checked, unless you delete your account or ask us to remove them
Guest progress not saved to an account30 days, then deleted
Sign-in records and failed sign-ins12 months
Lesson activity24 months, then only as anonymous totals
Support messages2 years after the last message
Purchase records6 years, as tax law requires

Your rights

You can ask to see the data we hold about you, have it corrected, have it deleted, get a copy to take elsewhere, restrict or object to how we use it, and withdraw consent where we rely on it. Email mentor@4max.co.uk and we'll reply within one month.

Deleting your account: go to Account → Delete my account, or email us. Your sign-in, name, email, progress, check results and certificates are deleted (certificate check links stop working, so download any PDFs you want first). Support requests are kept for our records without your name, email or messages.

Cookies and browser storage

The portal uses only essential cookies, to keep you signed in: learn_s (your visit, until you close the browser), learn_session (keeps you signed in, up to 30 days) and learn_trust (remembers a device you've signed in on, up to 90 days). It also keeps a few settings in your browser: captions on or off, Watch or Read and listen, and the simulation's Guided mode. There are no advertising or tracking cookies, and our analytics don't use cookies.

Complaints

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

We'll update this notice when the portal changes, and change the date at the top.