Privacy Policy

1. Data controller

VQ Solutions Ltd (“we”, “us” and “our”) is the data controller for personal data processed through Leader Study Pro. Leader Study Pro is a trading name of VQ Solutions Ltd, registered in England and Wales (Company No: 06504179), with registered office at Osborne House, 20 Victoria Avenue, Harrogate, North Yorkshire, England, HG1 5QY.

Privacy enquiries can be sent via our contact form.

2. Information we process

Depending on how you use the site and learner application, we may process your name, email address, account and authentication details, enrolment and pathway records, evidence submissions, assessor feedback, support correspondence, payment and transaction references, and technical information needed to secure and operate the service.

Evidence may contain personal or confidential workplace information. You should only upload material that you are authorised to use and should redact unnecessary personal details where appropriate.

If you take our free leadership style quiz, we process your answers and scores. These are stored anonymously and deleted after 90 days unless you request your emailed report, in which case we also process the name and email address you provide, and your answers are processed by an AI provider (OpenAI) to generate the personalised sections of your report. Marketing emails are sent only with your separate opt-in consent, which you can withdraw at any time.

3. How information is collected

• When you create or use an account.
• When you enrol, make a payment or contact us.
• When you upload evidence or receive assessment feedback.
• Through essential authentication, security, session and consent mechanisms.

Through essential authentication, security, hosting and consent mechanisms, and through optional analytics where you have given the relevant consent. See our Cookie Policy for the current categories and preference controls.

4. Why we use information

• To provide the account, learner journey and support requested.
• To administer enrolments, payments, evidence and assessment workflows.
• To protect accounts, scan uploads and investigate misuse.
• To communicate about your account, enrolment or support request.
• To meet applicable legal, qualification and quality requirements.

Where applicable to qualification administration or statutory reporting, relevant information may be shared under the procedures of the awarding organisation, the Department for Education (DfE) or another competent authority. This wording does not change the requirements of any particular qualification or reporting scheme.

5. Service providers

The application uses specialist providers for hosting, security, payments, authentication, email, storage, background processing, analytics, embedded content and learning-support workflows. The providers used may include:

• Neon Auth and Neon Postgres: authentication, account and application data.
• Stripe: payment processing and payment references. Full card details are handled by Stripe, not stored by us.
• OpenAI: limited AI-assisted evidence support where the application sends information for that purpose. This assistance does not make an assessment decision.
• GPTZero: AI-generated text detection or content checking support for submitted evidence where enabled.
• DigitalOcean Spaces: uploaded evidence files stored through its S3-compatible object storage service.
• MailerSend: transactional email such as account, enrolment and assessment notifications.
• Inngest: background job processing for workflows such as upload scanning, enrolment activation, email events and AI-assisted checks.
• Vercel: application hosting and deployment.
• Cloudflare: domain, DNS, CDN, security or traffic protection services where enabled.
• Sentry: operational error monitoring and diagnostics where enabled by the deployment.
• Plausible Analytics: privacy-focused public-site analytics where you have consented to analytics.
• YouTube: embedded video content where we choose to use YouTube-hosted course, tutor or testimonial videos.

Providers process information under their own terms and privacy notices. We do not use provider names to imply endorsement, accreditation or a qualification outcome.

6. International processing and retention

Some providers may process information outside the UK or European Economic Area. Where this happens, we use the safeguards required by applicable data protection law, such as appropriate contractual terms or transfer mechanisms. We retain information only for as long as needed for the purposes described here, the learner relationship, qualification and quality records, security, dispute handling and legal obligations.

7. Your rights

Subject to legal exceptions, you may ask for access, correction, deletion, restriction or portability of your personal data, or object to a processing activity. Where processing relies on consent, you may withdraw it. Contact us and include enough information for us to identify your request.

You can also complain to the Information Commissioner's Office (ICO). This policy is general information, not legal advice.

8. Changes and contact

We may update this policy when the application, providers or legal requirements change. The date above identifies the current version. For general learner questions, contact us.