Privacy policy

This policy explains what personal data Learn Skills LRS handles, why, for how long, and what your rights are. It covers people who visit our websites (lrs.ie, tincan.ie and xapi.ie), our customers and their team members, and learners who take courses through Learn Skills LRS.

Who we are

Learn Skills LRS is run by Innovative Learning Solutions Ltd, trading as Learn Skills (registered in Ireland, company number 460035, VAT number IE9691078C), Platform94, Mervue Business Park, Galway H91 D932, Ireland. Phone +353 91 39 55 01, email support@lrs.ie.

We are the controller of the data about our website visitors and customers. For learners’ course records we are a processor: the organisation that provides the course (our customer) decides why and how they are used, and we handle them on its behalf (see If you are a learner).

Website visitors

• Server logs: IP address, browser, the page requested and the time. Used to keep the service secure and to find faults. Legal basis: our legitimate interest in running a secure service. Kept for 30 days.
• We don’t use analytics, advertising or tracking of any kind, and our pages load nothing from other companies. See Cookies.

Customers and their team members

• Account: your name, email address, organisation name, a hash of your password (never the password itself) and, if you turn it on, the secret for two-step sign-in. Needed to provide the service: the contract with you (or your organisation).
• Billing: paid plans are paid through Stripe. Stripe collects and keeps the card details; we never see or store them. We keep the plan, invoices and billing contact. Legal basis: the contract, and our legal obligation to keep accounting records.
• Service emails: sign-in and password emails, invitations, and notices about your account, plan or the service. These are part of the service; we don’t send marketing emails without asking.
• Support: what you write to us and our replies, to help you. Legal basis: the contract, or our legitimate interest in answering you.
• Use of the service: which courses you host, how many learners and statements per month, and storage and traffic, to apply the plan limits and to run the service. Our staff can view your account to give support; this is recorded.

If you are a learner

When you take a course through Learn Skills LRS, we record for the organisation that gave you the course:

• who you are: your name and email address, or, when you start the course from a learning platform such as Moodle, your name and user name there and the platform’s address;
• what you do in the course: when you start and finish, the pages you see, your answers, scores, results and the time you spend.

The organisation that provides the course is responsible for these records, and decides what they are used for (usually to confirm training was completed and to improve the course) and how long they are kept. Please ask them first about your data; if you contact us, we will pass your request to them. We use your records only to provide the service to that organisation, never for our own purposes.

If you start a course from a course link, your name and email are kept in a cookie on your device so you don’t have to enter them again (see Cookies).

Who else handles the data

We use these service providers (sub-processors). Each has a contract with us that protects the data.

Where a provider may handle data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses in that provider’s data processing terms. We will update this list before adding a new sub-processor.

We don’t sell personal data, and we don’t share it with anyone else unless the law requires us to.

How long we keep data

• Accounts: while the account is open. When an account is closed, its data, courses and learner records are deleted within 30 days.
• Learner records: as long as the customer keeps them. On the Free plan, records older than 12 months are deleted automatically. Customers can ask us to delete records at any time.
• Invoices and billing records: six years, as Irish tax law requires.
• Server and error logs: 30 days.
• Backups: daily, kept for 7 days, so deleted data is gone from backups within 7 days.

Security

All connections are encrypted (HTTPS). Data is stored in Ireland on servers only we can access. Passwords are stored as hashes, two-step sign-in is available for every account and required for our staff. Courses get short-lived keys that can only record the learner who is taking them; customers’ own LRS keys are never shown to learners.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop using it, or ask for it in a portable format. Email support@lrs.ie. We answer within one month. Learners: please see above.

If you are unhappy with how we handle your data, you can complain to the Data Protection Commission, www.dataprotection.ie.

Changes

We will update this page when what we do changes, and tell customers by email about important changes.