Privacy Policy

*The Bainbridge Institute* Owned and operated by First Cohort Incorporated Ltd
Version 1.0
Effective Date: 3 August 2026
Last Reviewed: 27 July 2026

1. Introduction

Welcome to The Bainbridge Institute. The Bainbridge Institute is an online education, training and professional development platform owned and operated by First Cohort Incorporated Ltd ('we', 'our', 'us'). We are committed to protecting your privacy and handling your personal information responsibly, securely and transparently. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with and the rights you have under UK data protection law. This policy applies to our website, learning platform, employer subscription services, consultancy, classroom and online training, downloadable resources and future AI-powered services. By using our services you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

First Cohort Incorporated Ltd is the Data Controller for the purposes of UK GDPR. Company Registration Number: 15812438. Registered Office: The Business Innovation Centre, Wearfield Enterprise Park East, Sunderland, SR5 2TA. Contact: support@thebainbridgeinstitute.com.

3. Our Commitment to Privacy

We process personal information lawfully, fairly and transparently, collect only information necessary to provide our services, keep it accurate, protect it using appropriate technical and organisational measures, never sell personal information and respect your rights under the UK GDPR, the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations.

4. Information We Collect

We may collect your name, email address, telephone number, company name, job title, billing details and communication preferences. Where you use our learning platform we also collect course enrolments, progress, assessment results, certificates, login history and evidence uploads where applicable. For employer accounts we process organisation details, learner allocations and organisational reporting. Payments are securely processed by Stripe and we do not store full payment card details. We also collect technical information such as IP addresses, browser type, cookies, device information and security logs, together with correspondence you send to us.

5. Why We Use Your Information

We use personal information to create user accounts, deliver training, allocate employer-funded learning, issue certificates, process payments, provide consultancy, respond to enquiries, improve our platform, maintain security and comply with legal obligations.

6. Legal Basis

Our lawful bases include performance of a contract, legitimate interests, compliance with legal obligations and consent where required. You may withdraw consent at any time where consent is the legal basis relied upon.

7. Employer Sponsored Learning

If your employer purchases training for you, authorised employer administrators may access information relating to course allocation, learning progress, completion status and certificates where necessary to administer workplace learning. Access is limited to information required for that purpose.

8. Workplace Services

Where First Cohort Incorporated Ltd provides consultancy, workplace substance misuse services, audits, policy development or training outside the learning platform, additional contractual privacy provisions may apply.

9. AI Services

The Bainbridge Institute intends to introduce AI-assisted learning tools. AI-generated information is provided for educational purposes only and is not legal, medical or clinical advice. AI may process conversations to improve quality and safety in accordance with this Privacy Policy.

10. Marketing

We may send information about courses, events and services where permitted by law or where you have consented. You may unsubscribe at any time.

11. Sharing Information

We only share information where necessary with technology providers, payment processors such as Stripe, employer administrators where appropriate, professional advisers and public authorities where legally required. We never sell personal information.

12. International Transfers

Where personal information is transferred outside the UK, appropriate safeguards will be implemented in accordance with UK GDPR.

13. Data Retention

We retain personal information only for as long as necessary. Financial records are generally retained for at least six years to comply with tax legislation. Training records and certificates are normally retained for up to seven years to assist employers and learners with verification. Support enquiries are generally retained for up to three years. Inactive learner accounts may be anonymised or deleted after three years of inactivity unless a longer retention period is required by law or contract. Once retention periods expire, information is securely deleted or anonymised.

14. Security

We protect personal information using encryption, secure hosting, role-based access controls, software updates, monitoring, backups and staff awareness measures. Although no online service can guarantee absolute security, we take reasonable steps to safeguard all information.

15. Cookies

We use cookies to maintain platform functionality, improve performance, analyse usage and enhance security. Further details are available in our Cookie Policy.

16. Your Rights

You have the right to access, correct, erase, restrict or object to processing of your personal information, request portability where applicable, withdraw consent and complain to the Information Commissioner's Office. We aim to respond to valid requests within one calendar month.

17. Automated Decision Making

We do not make decisions producing legal or similarly significant effects solely by automated means. Automation may be used to manage learning progress, certificates and course recommendations.

18. Children's Privacy

Our services are primarily intended for adults. Where learners under 18 are enrolled by an organisation, appropriate authorisation must be obtained.

19. External Websites

Our website may link to external websites which operate under their own privacy policies. We are not responsible for their content or practices.

20. Personal Data Breaches

If a personal data breach occurs that is likely to result in a risk to the rights and freedoms of individuals, First Cohort Incorporated Ltd will investigate the incident promptly and comply with its obligations under UK GDPR. Where required, we will notify the Information Commissioner's Office within the statutory timescales and, where legally required, notify affected individuals without undue delay together with information about the nature of the breach and any recommended protective actions.

21. Changes

We may update this Privacy Policy to reflect changes in legislation, technology or our services. The latest version will always be published on our website.

22. Complaints

If you have concerns about how your information is handled, please contact us first at support@thebainbridgeinstitute.com. You also have the right to complain to the Information Commissioner's Office.

23. Contact

First Cohort Incorporated Ltd, The Business Innovation Centre, Wearfield Enterprise Park East, Sunderland, SR5 2TA. Company No. 15812438. Email: support@thebainbridgeinstitute.com.

Privacy Summary

At The Bainbridge Institute we believe trust is built through openness, fairness and responsible handling of personal information. We will never sell your personal information, will always seek to use it fairly and transparently and will continue to review our practices to maintain compliance with UK data protection law.