Privacy Policy
MasterUnlimited.com
This Privacy Policy explains how MasterUnlimited.com collects, uses, stores, and shares personal data. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). By using our website, you agree to the practices set out below.
Who we are
MasterUnlimited.com is operated by Nested Learning Ltd, a UK-registered company. For all data-protection matters, Nested Learning Ltd acts as the Data Controller.
Website: https://masterunlimited.com
Email: support@masterunlimited.com
Personal data we collect
- Comments
When visitors leave comments, we collect the information entered into the comments form, the visitor’s IP address, and browser user-agent string to help detect spam.
An anonymised hash of your email may be sent to the Gravatar service to check if you use it. Their privacy policy is at https://automattic.com/privacy/. After approval, your profile picture is visible next to your comment. - Offer matching and contact forms
When users provide contact information (name, email, phone number, location, course preferences), we use this data to match individuals to suitable courses and products offered by MasterUnlimited.com or by carefully selected third-party providers. Where third-party providers receive data, they act as independent Data Controllers and must comply with UK GDPR. - Media uploads
If you upload images, you should avoid uploading images with embedded location data (EXIF). Visitors may extract such information. - Technical and usage data
We may collect IP addresses, device information, browser types, and usage patterns. This supports site security, performance, fraud prevention, and service improvements. - Cookies and similar technologies
We use essential and non-essential cookies.
Essential cookies are necessary for security, site stability, log-in functionality, and content management. These do not require consent.
Non-essential cookies (analytics, performance, and advertising cookies) are only activated after the user has given explicit consent in accordance with PECR. Consent is collected through a tool that allows users to accept, reject, or customise cookie settings. Users may change or withdraw cookie preferences at any time.
Detailed cookie information:
Essential cookies
• Temporary login-check cookie: set on login-page visits to determine whether the browser accepts cookies. Deleted when the browser is closed.
• Login cookies: store login information for two days (or two weeks if “Remember Me” is chosen). Removed when logging out.
• Display-option cookies: store screen-display settings for one year.
• Editor cookies: identify the post ID of recently edited articles. Expire after one day.
Non-essential cookies (set only with consent)
• Analytics cookies: help us understand how visitors use the site.
• Performance cookies: help improve page load times.
• Advertising and referral cookies: used only if explicitly permitted, and only in compliance with PECR rules.
We do not load non-essential cookies without consent. We do not use implied consent.
- Embedded content
Pages may include embedded videos, images, or articles from other sites. Embedded content behaves as if you have visited the external site. These sites may gather data, use cookies, and track your interactions independently of us. We recommend reviewing their privacy policies.
Lawful bases for processing
We rely on the following lawful bases:
• Consent: for marketing communications, analytics cookies, and optional data provided by users.
• Contract or pre-contract steps: when users ask us to match them to suitable training, products, or request information about our services.
• Legitimate interests: for safeguarding website security, preventing abuse, improving services, and ensuring a smooth user experience.
• Legal obligation: where required by UK law.
Marketing communications under PECR
We may send marketing messages:
• With your explicit consent; or
• Under the “soft opt-in” where you have obtained a service from us and we offer similar training or resources.
Users can withdraw consent or unsubscribe at any time.
How we use personal data
We process data for the following purposes:
• Matching individuals with relevant training opportunities
• Providing sample lessons or requested resources
• Responding to enquiries and service requests
• Delivering marketing communications where permitted
• Enhancing website functionality and security
• Performing analytics and service improvements (with consent)
• Meeting legal and regulatory duties
Sharing personal data
We may share data with:
• Third-party training providers when you request course-matching
• Email, CRM, and analytics systems
• Payment processors when buying a course
• Web-hosting, security, and technical suppliers
• Regulators or law-enforcement bodies where required
• Automated spam-detection services (for comments)
We do not sell personal data.
International transfers
If personal data is transferred outside the UK, we ensure appropriate safeguards such as UK adequacy regulations, International Data Transfer Agreements, or standard contractual clauses.
Retention period
• Comments: stored indefinitely for moderation and continuity.
• User account information: retained while the account remains active.
• Course-matching enquiries: retained for up to 24 months.
• Marketing data: retained until consent is withdrawn or inactivity continues for an extended period.
• Technical logs: retained according to security needs.
• Financial and legal records: retained for statutory periods.
User rights under UK GDPR
Users have the right to:
• Access their data
• Request correction of inaccurate data
• Request deletion of data
• Restrict processing
• Move their data (portability)
• Object to processing
• Withdraw consent at any time
• Make a complaint to the Information Commissioner’s Office (ICO)
If you have an account or have left comments, you may request a copy of your data. You may also request deletion of personal data except where we must keep information for legal or security purposes.
Where your data is sent
Visitor comments may be checked by automated spam-detection services.
Data entered into course-matching or enquiry forms may be sent to trusted service providers and training partners for the purpose of delivering the service requested.
Security measures
We use technical and organisational measures including encryption, secure servers, controlled access, malware protection, and regular security reviews.
Changes to this policy
We may update this policy to reflect changes in law or our operations. The latest version will always appear on this page.
Contact
support@masterunlimited.com
