Privacy Policy
CreateLXP (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our platform, website, and related services (together, “the Services”).
​
1. Who We Are
CreateLXP is a Learning Experience Platform designed to deliver, track, and personalise learning for organisations and their employees. Company name: CreateLXP Ltd. Registered office: 1/1 11 Hyndland Road, Glasgow, Scotland, G12 9UZ. United Kingdom. Company number: SC696747. We act as a Data Controller for personal data we collect directly, and as a Data Processor when processing data on behalf of clients.
2. What Data We Collect
We may collect the following categories of personal data:
a) Account and Profile Information Name, job title, company name, email address and contact details, Login credentials (securely encrypted).
b) Learning Activity Data Courses viewed, completed, or bookmarked Assessment results and feedback. Engagement metrics and usage statistics.
c) Technical Data IP address, browser type, device identifiers. Operating system, access times, referring URLs.
d) Communication Data Messages or feedback submitted via chat, forms, or email Support tickets and correspondence records.
3. How We Use Your Data
We process your personal data to:
- Provide and maintain the CreateLXP platform.
- Personalise learning content and recommendations.
- Track progress and report learning outcomes.
- Communicate updates, support, and service information.
- Improve platform usability, security, and performance.
- Comply with legal obligations or contractual requirements.
We only process personal data where we have a lawful basis, such as:
Contractual necessity (to deliver the Services), Legitimate interests (improving and securing the platform), Consent (for marketing communications),Legal compliance.
4. How We Share Your Data
We do not sell your data. We may share limited information with:
- Service providers and sub-processors, such as hosting, analytics, or email delivery partners, bound by strict data processing agreements.
- Your organisation (if your account is provided by your employer or institution).
- Regulators or authorities, if legally required.
All transfers of personal data outside the UK/EEA comply with UK GDPR safeguards, such as the UK Addendum to the EU Standard Contractual Clauses.
5. Data Retention
We retain personal data only as long as necessary to fulfil the purposes set out in this policy or as required by law. When accounts are deactivated, data is deleted or anonymised within 90 days.
​
6. Your Rights
Under UK and EU GDPR, you have the right to:
- Access your data.
- Rectify inaccuracies.
- Erase your data (“right to be forgotten”).
- Restrict or object to processing.
- Port your data to another service.
- Withdraw consent at any time (for consent-based processing).
To exercise these rights, contact us at mark@createlxp.com. We may require proof of identity.
​
7. Security
We employ technical and organisational measures to protect your data, including:
- Encryption in transit and at rest.
- Multi-factor authentication for admin access.
- Regular vulnerability scanning and auditing.
- Access controls and data minimisation practices.
Despite these measures, no online service is entirely risk-free. We encourage users to maintain good password hygiene and report any suspected breaches immediately.
​
8. Cookies and Tracking
CreateLXP uses cookies and similar technologies to:
- Authenticate sessions.
- Remember preferences.
- Analyse platform usage.
You can control cookies through your browser settings. Full details are in our Cookie Policy.
​
9. Third-Party Links
Our platform may include links to third-party websites or integrations (e.g. YouTube). We are not responsible for third-party privacy practices. Please review their privacy policies before interacting.
​
10. Children’s Privacy
CreateLXP is not intended for users under the age of 16. We do not knowingly collect personal data from children.
​
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. Significant changes will be communicated directly to registered users.
​
12. Contact Us
If you have questions or complaints about this Privacy Policy or our data practices, please contact: FAO Data Protection Officer, CreateLXP Ltd, Email: mark@createlxp,com. If you are not satisfied, you may contact the UK Information Commissioner’s Office (ICO):https://ico.org.uk/make-a-complaint/
​​
​​
Last update: 23 October 2025