This implementation draft describes the public website, project enquiries and protected stakeholder-demonstration workflow now included in the website plugin. The final legal entity, address, retention schedule and processor list must be reviewed before production publication.
Implementation draft for review · 16 August 2026Who this policy covers
This policy applies to website visitors, people who submit project enquiries, people who request or receive a stakeholder invitation, approved demonstration users and people who communicate with the Interactive Learner team.
Information we may collect
Information may include name, work email, organisation, role, project or evaluation interests, chosen field and stakeholder perspective, support correspondence, access status, expiry date, mapped-course enrolment, demonstration activity and submitted feedback. Security controls may use limited technical information and a one-way hash of an IP address; event context excludes passwords, verification tokens, nonces, raw IP addresses and email addresses.
How stakeholder access works
A public request is stored first as a private review record. A WordPress account is created or connected only after exact-email verification and approval. Access is individual, time-limited and revocable. Existing WordPress roles and passwords are preserved when an existing account is used.
Why information is used
Information may be used to respond to enquiries, verify and assess stakeholder requests, tailor demonstration routes, provide mapped learning access, record evidence of product evaluation, follow up on feedback, protect the service and meet legal or operational obligations.
Sharing and processors
Personal data may be processed by the hosting, email-delivery, security, analytics, customer-relationship, payment or specialist providers selected for the live service. The final processor list and international-transfer position should be documented before publication.
Retention
Request, account, access, feedback, audit, support and contractual records may have different retention periods according to purpose, legal requirements and operational need. A final retention and deletion schedule should be approved for the live service.
Your choices and rights
You can ask about information held about you, request correction, object to or restrict certain uses, request deletion where applicable, or withdraw consent where consent is the basis. Use the website contact page to submit a request.
Contact and review
Add the final legal entity, registered address, data-protection contact and applicable supervisory authority before publishing this policy.
Contact
Use the Interactive Learner contact page for questions about this policy or the service.