Last updated: 02/02/2026
1. Who We Are
Systems Hub is operated by Human Systems Hub Ltd (company number 17000477), a subsidiary of Morgan Human Systems Ltd (company number 12402874).
Registered address: 1 Brassey Road, Old Potts Way, Shrewsbury, SY3 7FA
Data Protection Officer: Olivia Jones
Email: [email protected]
We are committed to protecting your personal information and your right to privacy. This policy explains how we collect, use, and safeguard your data when you use Systems Hub.
2. What Information We Collect
When you register for and use Systems Hub, we collect:
Personal details: Name, email address
Professional information: Job role, organisation name
Account information: Username, password (encrypted)
Learning data: Course progress, completion status, assessment results, CPD certificates earned
Payment information: Processed securely by our payment provider Stripe (we do not store full card details)
Communication preferences: Whether you’ve opted in to receive our insights email
Technical information: IP address, browser type, device information (via essential cookies only)
3. How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Legal Basis |
| Providing access to your purchased courses | Contract performance |
| Processing payments | Contract performance |
| Sending course-related communications (e.g., access details, updates) | Contract performance |
| Sending insights emails (if you opted in) | Consent |
| Sharing completion data with your employer/organisation (for organisational purchases) | Contract performance / Legitimate interest |
| Recommending relevant courses based on your job role | Legitimate interest (profiling) |
| Responding to your enquiries | Legitimate interest |
| Improving our platform and courses | Legitimate interest |
| Complying with legal obligations | Legal obligation |
Profiling
We use automated profiling based on your job role to suggest relevant courses and content. You have the right to object to this profiling at any time by contacting us.
4. Who We Share Your Data With
We share your information only in the following circumstances:
Payment processing:
Stripe (payment processor) – processes payment information securely
Platform services: Systems Hub is hosted on infrastructure provided by Linode LLC. The Systems Hub platform is hosted on Linode servers located in the United Kingdom.
Data processed through Systems Hub is stored and handled within this UK-based infrastructure and is subject to Linode’s technical and organisational security measures, as well as Linode’s own terms of service and privacy policies.
Linode acts as a data processor for the purposes of hosting and infrastructure provision only. Linode does not access, use, or process personal data for its own purposes.
Where Linode (or its approved sub-processors) provides infrastructure or support services, appropriate contractual safeguards are in place to ensure compliance with UK GDPR and other applicable data protection legislation.
Candle Learning Ltd, as the operator and maintainer of the Systems Hub platform, may access personal data held within Systems Hub solely where necessary to provide technical support, system administration, maintenance, troubleshooting, security monitoring, or to resolve platform issues.
Such access is strictly limited to authorised personnel and is carried out in accordance with documented procedures, appropriate access controls, and confidentiality obligations. Candle Learning Ltd does not access or use personal data for any purposes other than the operation, support, and maintenance of Systems Hub, or where required by law.
Organisational purchasers: If your course access was purchased by your employer or organisation, we share your course completion data and certificate status with them. We do not share assessment results or detailed learning analytics without your explicit consent.
Legal requirements: We may disclose your information if required by law or to protect our rights.
All third-party providers are required to maintain appropriate security measures and process data only as instructed by us.
5. International Data Transfers
We do not transfer your data outside the UK/EEA.
6. How Long We Keep Your Data
We retain your personal data for the duration of your access to Systems Hub. This includes:
Active access period: For the length of your purchased access (typically 12 months)
After access expires: We retain your account data for 6 months to allow you to renew access,
after which it is deleted unless you have ongoing access
You can request deletion of your data at any time (see Your Rights below).
7. Cookies
We use essential cookies only to:
Keep you logged in to your account
Remember your preferences
Ensure the platform functions correctly
We do not use analytics, advertising, or tracking cookies. You can manage cookie settings in your browser, but disabling essential cookies may affect platform functionality.
8. Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Rectify inaccurate data
Erase your data (“right to be forgotten”)
Restrict processing of your data
Object to processing (including profiling)
Data portability – receive your data in a portable format
Withdraw consent (e.g., for marketing emails) at any time
Complain to the Information Commissioner’s Office (ICO)
To exercise any of these rights, contact our Data Protection Officer at [email protected]
9. Security
We implement appropriate technical and organisational measures to protect your data, including:
Encryption of sensitive data
Secure password storage
Regular security reviews
Limited access to personal data on a need-to-know basis
10. Age Restriction
You must be at least 16 years old to use Systems Hub. We do not knowingly collect data from individuals under 16.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on the platform.
12. Contact Us
If you have questions about this privacy policy or how we handle your data:
Data Protection Officer: Olivia Jones
Email: [email protected]
Address: 1 Brassey Road, Old Potts Way, Shrewsbury, SY3 7FA
ICO Registration: ZB064265 (renewal date: 15 May 2026)