This notice states the personal data the AIOT website actually collects, the purpose of each item, the technical controls in place, and the choices you have. It describes this release of the site, not an ideal.
Creating a learner account stores: a generated account code, first name, last name, email address, phone number, country, organisation, and a password hash. Phone and organisation are optional. Nothing beyond that is required to register.
Passwords are stored only as a one-way hash. The platform has no plain-text password to read, and staff do not have a shared or backup key that bypasses your own credential.
Account activity such as lesson progress, resource and worksheet downloads, and application status is recorded so that the learner record and dashboard can be produced. Application and enquiry submissions are stored so a person can review and answer them.
Where you arrive from a radio, partner or campaign link, the source code is stored with your record so that the right programme can follow up. A source code is not used to build a cross-site advertising profile.
This site sets one first-party session cookie. It is marked HttpOnly, is sent only over HTTPS when you reach the site over HTTPS, and uses SameSite=Strict. No advertising, social-platform or third-party marketing tracker is loaded on AIOT pages.
Learning-letter subscription needs an explicit opt-in and can be withdrawn. Declining communications does not prevent registration or access to lessons.
When a programme is delivered inside an institution's own deployment, that institution controls where its learner records are processed. Requests for such deployments ask for explicit permission before any cross-border processing is set up.
Your learner account is kept while it remains open. Evidence of completed learning is retained because it is the reason the record exists. Application material that is not progressed is held for a reasonable review period and then removed on request. You may ask for deletion at any time; see the data protection page for what can and cannot be erased.
AIOT staff and the responsible partner institution staff, for the purpose of running the programme you applied to. Personal data is not sold, and is not used to advertise other products.
Pages are served over HTTPS, access to administrative areas requires a signed-in role, personal fields are excluded from operational logs and event streams, and database access is parameterised. If you believe a barrier or a risk exists, write to [email protected].
Use the help library, your learner dashboard, or the institutional deployment request form on this site to reach a person. Security reports go to [email protected]. A dedicated privacy mailbox can be published here once it is assigned.
Last reviewed 2026-10-26. If anything on this page does not match what the website actually does, report it through the help library and it is treated as a defect.