Privacy notice

UpThink, trading as LearnStatistics, decides what is collected here and why. Questions, requests and complaints go to support@learnstatistics.org, or through our contact page.

This is the complete list of what we hold about a student in our own records.

• Your account. Your name, your email address, and your password stored as a scrambled value we cannot read back. If you study at a partner university, we keep that and your student id there, because that is what credit is filed against. Most students have no partner, and that is normal. A phone number only if you give us one.
• Your registrations. Which course and start date you bought, when, and whether the place is held, paid or enrolled. Your name and email as they were on the day, so your receipt keeps matching what you saw.
• Your payments. The amount, the currency, the status, and the identifiers our payment processor gives the transaction. We never see or store card numbers, expiry dates or security codes. Those are typed on our payment processor’s own secure pages and never reach us.
• What buying a course set granted you. Which courses you own but have not yet scheduled, and which start date each was eventually spent on.
• Records of completion. When you finish a course we record your grade, the credit hours, the date, and whether it was reported to a university. It is a fixed record, not a copy of your gradebook, because we have to be able to show what was filed for credit and when.
• Waiting lists. If you ask to be told when a full or closed run reopens: your email, the run, and optionally your name.
• Support chat conversations. If you use the assistant, we keep the conversation, the date, and a shortened form of your internet address. If it passes your question to a person, we also keep your email address and a summary.
• Our administrators’ activity. We log which member of our staff opened or changed a student record, and when. The log records who looked, never what the record said. It is how we can answer “who has seen my file?”.

There is no advertising and no profiling here, and nothing on this site follows you to another one. Section 5 covers cookies and measurement in full, including the one optional thing and how to refuse it.

We also count how many people open a price page and how many stop at the sign-in step. Those counts carry no name, no address and nothing that could be traced back to you.

You do not have to give us any of this. But without it we cannot create your account, enroll you or send your receipt, so we cannot sell you a course.

Teaching happens in your online classroom, on our learning platform. The classroom — not this store — holds your enrollment, your coursework, your submissions, your interactions with your instructor and your gradebook.

• You sign in with a password held here. Your password is stored only as a scrambled value that cannot be turned back into the password. If you ever sign in through the classroom instead, the key it gives us is used once to read your name and email, then thrown away.
• Your progress and grades on your account page are read from the classroom each time you look. We do not copy them into our records. The one exception is the completion record above, written once when a course ends.

The learning platform is our own installation, run by us with a cloud hosting provider in the United States. The company that makes the platform software does not operate it, so no data in it is shared with them.

We use a small number of trusted service providers. Each one gets only what it needs to do its job:

• Payment processor takes your payment. We never see your card details. It keeps its own record of the transaction.
• Email provider sends enrollment confirmations, receipts, password resets and waiting-list notices. It receives your name, your email address and the course title.
• Learning platform hosts your course, as described in section 3.
• AI provider powers the support chat, and only if you open it and send a message. It receives what you type, the page you were reading, and what the assistant looks up to answer you: course details and, if you are signed in, your grades or an order reference and amount. It never receives your name, email address, phone number or card details. It is not used to train models.
• Web analytics (Google Analytics 4, by Google) only if you allow analytics cookies (section 5). It receives the pages you visit on this site and on our course pages at tesu.learnstatistics.org, the site or link that sent you here, your approximate location (country and city, worked out from your IP address, which Google Analytics 4 does not store), your device, browser and screen size, and a random identifier kept in a cookie. On this site it also receives which course you looked at, when you start checkout and, after you pay, the order reference, the amount and the course. It never receives your name, email address, phone number, grades or card details. We do not use it for advertising.
• Support mailbox stores the emails you send us, and whatever you chose to put in them.
• Website hosting and database run this site and store the data listed in section 2.

We do not sell your personal information or share it for advertising. These providers act only on our instructions. A list of providers is available on request at support@learnstatistics.org.

One more recipient: if you study at a partner university, we file your completion — course, grade, credit hours and date — with that university so the credit counts toward your degree. If you have no partner university, which is the ordinary case, nothing is filed.

Most of the cookies here are ones the site cannot work without: they sign you in and keep you signed in. One thing is optional, and it is off until you allow it.

There is no advertising and no cross-site tracking on this site. We do not follow you to other websites, we do not build a profile of you, we do not sell anything about you, and no third party is permitted to do any of those things here.

Analytics is optional. We use Google Analytics 4 to count which pages people read, where they came from and where they give up, so we can fix the confusing ones. No analytics cookie is set and nothing is sent to Google unless you allow it. If you do, Google Analytics sets two cookies holding a random identifier, each lasting up to 2 years. Section 4 lists exactly what it receives.

You are asked the first time you visit. Refusing is one click, in the same place and at the same size as accepting, and costs you nothing. You can change your mind at any time on the cookie settings page, which also lists every cookie, what it does and how long it lasts. We set all of them ourselves; the only one whose data goes to another company is the optional analytics cookie, to Google.

To opt out, choose Reject all in the notice or on the cookie settings page. That stops Google Analytics straight away and deletes its cookies. To block it on every website, install Google’s opt-out browser add-on.

For students in the United States, coursework, grades and completion records may be education records under FERPA, the Family Educational Rights and Privacy Act. That law asks not only who changed a record but who read it, so we log both. Every member of staff has their own account, the log cannot be edited, and it is kept when someone leaves.

To see a record we hold about you, or to challenge one you think is wrong, email support@learnstatistics.org.

We keep account, registration, payment and completion records for as long as we need them to run your courses, to back up credit you have earned, and to meet our legal and financial obligations. Payment records have to be kept for a minimum period by law. To ask how long a particular record is kept, email support@learnstatistics.org.

Write to support@learnstatistics.org from the address on your account, or through the contact page, and say what you want. We will ask you to confirm it is you before we act on anything.

• See it. A copy of what we hold. Your own account page already shows most of it.
• Correct it. A wrong name or address in particular. Changing your details in the classroom does not change them here, so tell us too.
• Delete it. Use delete your account, or write to us if you cannot sign in. Section 9 explains what can and cannot be erased.
• Change your mind about cookies. Where we asked your permission, you can withdraw it at any time on the cookie settings page. Withdrawing is as easy as agreeing, and does not affect anything we did while you agreed.
• Object, or ask us to stop. Tell us and we will explain what we can do and what we are required to keep.
• The rights you have depend on where you live. Email support@learnstatistics.org and we will tell you which apply and how to use them.

Nothing here is decided about you by a computer alone. No automatic decision, and no profiling, affects your enrollment, your grade, your price or your credit. A person makes those decisions.

Your data is not in one place. A deletion request has to be done separately in each system that holds it:

• Our database — the account, registrations, entitlements, waiting-list entries and completion records described in section 2.
• The learning platform — your classroom account, your enrollments, your submitted work and your grades. It is a separate system with its own record of you.
• The payment processor — the payment record. Financial law requires this to be kept, so it usually cannot be erased in full.
• The email provider — delivery logs of the messages sent to you.

Two things we cannot erase:

• A completion already reported to a university. It is part of your record there, and our forgetting it does not remove it from them.
• The staff access log. It exists so that we can show who read your file, and editing it would destroy that protection.

We will respond within 30 days and tell you what was deleted and what had to be kept. Nothing is erased the moment you ask — a person does the work. You get an email confirming the request straight away, so if somebody asks in your name you have time to stop it.

• Our staff sign in individually, their sessions expire, and repeated failed sign-ins are locked out.
• Sign-in cookies cannot be read by scripts in your browser and carry no personal data.
• Passwords are never stored in a readable form, only as a scrambled value designed to be slow and expensive to attack.
• No system is perfectly secure. If you think your account has been used by somebody else, email support@learnstatistics.org straight away.

These are university-level courses intended for adults, and they are not offered to children.

When this notice changes materially we will change the date at the top of the page, and tell registered students where the change affects them.