Privacy Policy
Last updated 29 August 2026
This policy explains what personal data Techcopter Ltd ("Techcopter", "we") collects when you use techcopter.co.uk and the Techcopter platform, why we collect it, and what rights you have over it.
It is written to describe what the software actually does. Where we say we do not collect something, that is because there is no code that collects it.
Draft — not yet reviewed by a solicitor. Highlighted text marks facts only Techcopter can supply. This document must be completed and professionally reviewed before accounts open or any payment is taken.
Who we are
Techcopter Ltd (company number 14423500), 2 Frederick Street, Kings Cross, London, WC1X 0ND, United Kingdom, is the data controller for the personal data described in this policy.
For any privacy question, or to exercise the rights set out below, contact privacy@techcopter.co.uk.
What we collect, and why
We collect four categories of data. Each is listed with the reason we hold it and the lawful basis we rely on under UK GDPR.
| Data | Why we hold it |
|---|---|
| Account: your name, email address, a hashed password, your role, and whether your email is confirmed | To create and secure your account. Lawful basis: performance of a contract. |
| Session: a hashed session token, its expiry, your IP address and browser user-agent | To keep you signed in and to detect abuse. Lawful basis: legitimate interests (securing the service). |
| Enquiries: your name, email, organisation, the subject you chose, your message, plus IP address and user-agent | To answer you and to limit automated abuse of the form. Lawful basis: legitimate interests, and steps toward a contract. |
| Billing: your PayPal payer ID and the email on your PayPal account, your plan, seat count and billing dates | To provide and bill the subscription you bought. Lawful basis: performance of a contract. |
| Learning records: modules assigned to you, your progress and completion dates | To deliver training and produce completion evidence for your employer. Lawful basis: performance of a contract. |
What we do not collect
Techcopter runs no analytics, no advertising pixels and no third-party trackers. We do not profile you, we do not build advertising audiences, and we do not sell or share personal data with data brokers. There is no code in the product that does any of these things.
We never see your payment card or bank details. Payments are handled entirely by PayPal; we receive only a payer identifier, the email on the PayPal account, and the status of the subscription.
We do not ask for special category data (health, biometrics, political opinions and similar), and you should not send it to us.
Cookies and browser storage
Techcopter sets exactly one cookie:
| Cookie | Purpose |
|---|---|
| tc_session | Keeps you signed in. HttpOnly, Secure and SameSite=Lax. Contains a random token — no personal data is stored in the cookie itself. Expires after 30 days, or immediately when you sign out. |
Cookies, continued
This cookie is strictly necessary to provide a service you asked for, so it does not require consent and we do not show a cookie banner. If we ever add analytics, we will ask for consent first and this policy will change before that code ships.
The signed-in workspace also stores a small amount of data in your browser's local storage — your colour theme, whether the sidebar is collapsed, and whether you have seen the welcome tour. This never leaves your device and is not personal data. Clearing your browser data removes it.
Fonts are served from our own domain. Although they originate from Google Fonts, they are downloaded when the site is built and served by us, so your browser makes no request to Google and your IP address is never disclosed to them.
Who else processes your data
We keep the list of processors short on purpose.
| Processor | What they handle |
|---|---|
| PayPal | Payment and subscription processing. PayPal is a separate controller for the payment itself and applies its own privacy policy. |
| GoDaddy | Hosting of the application, database and uploaded files, and the mail account that sends verification and enquiry email. |
Where your data is held
Application data and uploaded files are stored on our hosting provider's infrastructure in the United Kingdom.
PayPal processes payments internationally and may transfer data outside the UK and EEA under its own safeguards. Where we transfer personal data outside the UK, we rely on the UK International Data Transfer Addendum or an adequacy decision.
How long we keep it
| Data | Retention |
|---|---|
| Account and learning records | For as long as your account is open, then 24 months after closure. |
| Sessions | Deleted automatically when they expire, and immediately when you sign out. |
| Abuse-prevention counters (which include IP addresses) | Deleted automatically after 24 hours. |
| Enquiries | 24 months from your last contact with us. |
| Billing records | Retained for [6] years where required by tax and accounting law, even after account closure. |
How we protect it
No system is perfectly secure. If we ever suffer a breach that is likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you directly where the risk is high.
Passwords are hashed with scrypt and are never stored or logged in a readable form — we cannot see your password, and a database leak would not reveal it.
Session cookies hold a random token; only a SHA-256 hash of that token is stored in our database, so a copy of the database cannot be replayed to sign in as you.
Uploaded model files are stored outside the public web root and can only be reached through an authenticated request.
The site is served over HTTPS and session cookies are marked Secure, so they are never transmitted unencrypted.
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can also withdraw consent where we rely on it.
Write to privacy@techcopter.co.uk. We will respond within one month.
If your employer bought your Techcopter seat, they may be the controller of your learning records. We will tell you if that is the case and point you to them.
If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Techcopter is a professional tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.
Changes
If we change this policy materially — for example by adding a processor or a new category of data — we will update the date at the top and, for significant changes, email account holders before the change takes effect.
See also the Privacy Policy and Terms of Service.