Coursensu Limited (“Coursensu”, “we”, “us”, “our”) provides a learning design and course quality enhancement platform used by educational institutions and organisations.
When Coursensu is provided to an institution (such as a university), that institution acts as the Data Controller under UK GDPR. Coursensu acts as a Data Processor, processing personal data only on documented instructions from the Controller.
This Privacy Policy explains how personal data is processed when using the Coursensu platform.
We process limited categories of personal data necessary to deliver the Service.
These may include:
We do not require or intentionally process:
Personal data is processed solely for the purpose of delivering the Coursensu Service, including:
We do not use personal data for direct marketing, profiling, or automated decision-making.
We do not sell personal data to third parties.
Where Coursensu acts as a Data Processor, the legal basis for processing is determined by the Data Controller (e.g. your institution).
Typically, this will be:
Coursensu uses established hosting and infrastructure providers. Personal data may be processed outside the UK or EEA, including in the United States.
Where international transfers occur, they are safeguarded through:
For enterprise customers with specific data residency requirements, regional hosting (including UK or EU locations) may be made available by contractual agreement.
Personal data is retained for the duration of the active subscription between your organisation and Coursensu.
If a subscription lapses:
Users may delete their own account at any time via a self-service feature. This results in deletion of the user profile and learning designs created by that user.
Backups are created daily and retained for seven business days for disaster recovery purposes. User-deleted data is removed from active systems and will not appear in subsequent backups.
Data exchanged with Moodle via REST API is either processed ephemerally to fulfil a request or stored within the organisation’s Moodle environment.
As Coursensu acts as a Data Processor, rights requests should be directed to your institution as Data Controller.
Within the platform:
Where a formal rights request is submitted to the Controller, Coursensu will act on documented instructions in accordance with the Data Processing Agreement.
No automated decision-making or profiling affecting individuals takes place within the Service. AI-assisted features are user-initiated and advisory in nature.
Under UK GDPR, you have the following rights:
You have the right to request access to the personal data held about you. In most cases, you can access your profile information and learning designs directly within the platform. Formal Subject Access Requests should be directed to your organisation as Data Controller.
You have the right to request correction of inaccurate or incomplete personal data. You can update your profile information within the platform. For other corrections, contact your organisation.
You have the right to request deletion of your personal data in certain circumstances. You may delete your account using the platform’s self-service feature. Where erasure is requested through your organisation, Coursensu will act on the Controller’s instructions in accordance with contractual obligations.
You have the right to request restriction of processing in certain circumstances (for example, if you contest the accuracy of the data). Such requests should be made to your organisation as Data Controller.
You have the right to object to processing in certain circumstances. Coursensu does not process personal data for direct marketing or profiling. Objections should be raised with your organisation.
Where applicable, you have the right to receive personal data you have provided in a structured, commonly used format. Users can export their learning designs directly from the platform. Formal portability requests should be made via the Data Controller.
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.
Coursensu uses a limited number of specialist service providers to deliver the Service, including:
All such providers operate under Data Processing Agreements that include:
Coursensu does not permit processors to use personal data for their own purposes.
Coursensu implements appropriate technical and organisational measures to protect personal data, including:
Access to personal data is limited to authorised personnel and only where operationally necessary.
Coursensu uses cookies and similar technologies necessary for platform functionality, authentication, and security. Where applicable, users are informed about cookie use when accessing the platform - see Cookies.
Individuals have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if they believe their data protection rights have been infringed.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Coursensu Ltd
Last updated: 11 Feb 2025
For privacy-related queries, please contact support@coursensu.com with your request.
We help you structure learning activities, align with learning outcomes and collaborate with subject experts to create learning experiences in any format and for any platform.
