Privacy Policy

1. Data Controller

The data controller for this system is:

If you have any questions about how your data is handled, please contact us using the details above.

2. What Data We Collect

Phoenix Rising collects minimal data, all of which is stored locally in your browser using localStorage. We do not surface insights on any remote server. The following information may be stored in your browser:

Lesson Progress and Completion Status

• Which lessons you have started, progressed through, or completed
• Scroll position and section completion markers within each lesson

Assessment Responses

• Pre-assessment and post-assessment scores and selected responses
• These are used to track your learning journey and generate your certificate

PCREF Evidence Notes

• Any reflective notes or evidence you enter against PCREF domains
• These are stored locally to support your professional development portfolio

Contact Form Submissions

• Name, email address, subject, and message content
• These are stored in your browser's localStorage only

Learning Agreement Details

• Name, email address, role, and organisation
• Entered when you sign the learning agreement at the start of the system

3. How Your Data Is Stored

All data collected by Phoenix Rising is stored locally in your web browser using the browser's built-in localStorage mechanism. This means:

• Your data remains on your device at all times
• No personal information is transmitted to any external server
• No database, cloud service, or third-party analytics platform receives your data
• Your data is accessible only from the browser and device on which it was created

We have chosen this approach deliberately to ensure maximum privacy for participants engaging with sensitive anti-racism learning content.

4. Data Retention

Because all data is stored in your browser's localStorage, it persists on your device until you choose to clear it. There is no server-side storage or automatic data expiry.

• Data will remain in your browser until you manually clear your browsing data or localStorage
• Uninstalling or resetting your browser will also remove all stored data
• We do not retain any copies of your data, as it never leaves your device

5. Your Rights under UK GDPR and the Data Protection Act 2018

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights in relation to your personal data:

Right of Access

You have the right to know what personal data is held about you. Because all data is stored in your own browser, you can access it at any time through your browser's developer tools.

Right to Rectification

You have the right to correct any inaccurate personal data. You may update your learning agreement details or other stored information directly within the system interface.

Right to Erasure

You have the right to have your personal data deleted. Because your data is stored locally, you can delete it at any time by clearing your browser's localStorage (see instructions below).

Right to Data Portability

You have the right to obtain your personal data in a portable format. Your localStorage data can be exported through your browser's developer tools as JSON.

6. How to Delete Your Data

Since all Phoenix Rising data is stored in your browser's localStorage, you have full control over deleting it. Here are the steps:

Option A: Clear All Site Data

1. Open your browser's Settings or Preferences
2. Navigate to Privacy & Security (or equivalent)
3. Select "Clear browsing data" or "Clear site data"
4. Ensure "Site data" or "Local storage" is selected
5. Confirm the deletion

Option B: Using Developer Tools

1. Open the Phoenix Rising system in your browser
2. Press F12 (or Cmd+Option+I on Mac) to open Developer Tools
3. Navigate to the Application tab (Chrome/Edge) or Storage tab (Firefox)
4. Select Local Storage in the left panel
5. Right-click the site entry and select Clear

Option C: Using the Browser Console

Open Developer Tools and enter the following command in the Console:

This will remove all Phoenix Rising data from your browser. Please note that this action cannot be undone and will reset all lesson progress, assessment scores, and stored details.

7. External Services

Phoenix Rising uses a small number of external services to deliver content. These services may set their own cookies or surface insights according to their own privacy policies:

Google Fonts

• We use Google Fonts to load the Playfair Display and DM Sans typefaces
• When you visit the system, your browser makes a request to Google's servers to download font files
• Google may log this request in accordance with their Privacy Policy

YouTube

• Selected lessons include embedded TED Talk videos hosted on YouTube
• When you view a page containing an embedded video, YouTube may set cookies and collect usage data
• We use privacy-enhanced mode (youtube-nocookie.com) where possible to limit tracking
• YouTube's data practices are governed by Google's Privacy Policy

8. Cookies

This site does not use cookies.

All learning progress, preferences, and user data are stored using your browser's localStorage mechanism, which is not a cookie and is not transmitted with HTTP requests.

However, third-party services embedded in this system (such as YouTube) may set their own cookies. Please refer to the External Services section above for details.

9. Third-Party Content

Phoenix Rising includes embedded TED Talk videos within certain lessons. These videos are embedded under TED's sharing licence, which permits non-commercial educational use.

We do not control the content, availability, or data practices of TED or YouTube. When you interact with an embedded video, you are also subject to TED's and YouTube's respective terms of service and privacy policies.

10. Children

The Phoenix Rising Anti-Racism Leadership Programme is designed exclusively for adult healthcare professionals and is not intended for use by children or young people under the age of 18.

We do not knowingly collect personal data from children. If you believe that a child has provided personal information through this system, please contact us so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated revision date.

We encourage you to review this policy periodically. Continued use of the system after changes are posted constitutes acceptance of the updated policy.

Last updated: March 2026

12. Contact for Data Queries

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact:

We aim to respond to all data-related enquiries within 30 calendar days, in accordance with UK GDPR requirements.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection.