Data Protection

Version 1.0, 1 September 2026

How LERN meets its duties under UK GDPR and the Data Protection Act 2018. LERN is run by IRL Connect Ltd, trading as LERN. Data is held in the UK.

Who is responsible for what

  • For young people under 18, their school, college, or provider is the data controller. LERN processes their data on the organisation's behalf and on its instructions.
  • For adult users (organisation staff and employers), LERN is the controller for their account information.

How data is protected

  • Held in the UK.
  • Access limited to named, authorised people.
  • Under-18s are not publicly searchable or identifiable as people.
  • Security measures suited to holding young people's data, backed by insurance cover.
  • Kept only as long as needed to provide the service or meet a legal duty.
  • Never sold, and shared only where needed to run the service.

For students

  • You joined through your school, and they look after your information with us.
  • You can see a copy of your data, correct it, or ask to delete it.
  • If you are under 18 and want to delete your data, we let your school know so the right adult can help.
  • You can ask us anything at alieu@joinirl.co.uk, or complain to the ICO.

For institutions and training providers

  • You are the data controller for your young people; LERN is your processor and acts on your instructions.
  • You obtain the appropriate consents for your young people to use LERN, in line with your existing duties.
  • You manage access, and can export or request deletion of your data.
  • A data processing schedule sets out exactly how LERN handles your students' data.

For employers

  • LERN is the controller for your account information.
  • You see only what you are allowed to see: verified work and, for under-18s, only through the organisation.
  • You keep any information you see about a young person confidential and use it only for the opportunity.
  • You do not export, copy, or reuse young people's data outside the platform's proper use.

Contact for all: alieu@joinirl.co.uk. Concerns can also go to the Information Commissioner's Office (ICO).