Loading page
Legal
This policy explains how Camera Point Knowledge Centre (CPKC) handles personal information when you use our website, learning platform and mobile app.
Effective 27 August 2026
We collect information needed to create and protect your account, provide education services and maintain accurate learner records. This may include your legal and preferred names, email address, telephone number, date of birth, gender selection, address, guardian details, course and attendance records, assessments, certificates, portfolio content, support requests and security logs.
If you choose Continue with Google, Google provides the basic account details needed to sign you in, such as your Google account identifier, name, email address and profile image. We do not request access to your Google Drive, contacts or email contents.
We use personal information to authenticate users, complete enrolment, deliver courses, manage attendance and assessments, issue and verify certificates, provide support, prevent abuse, operate approved learner services and meet applicable educational, contractual, security and legal obligations.
Access is limited by role and purpose. Learners can view their own profile and their own support tickets. Authorised administrators can maintain learner records. Lecturers receive only information required for assigned teaching responsibilities; private demographic fields such as date of birth and gender are not included in lecturer access.
We use service providers to operate the platform, including Supabase for authentication, protected support attachments and database services, Vercel for website hosting, Google for optional Google sign-in, Resend for transactional email and PostHog for product analytics. Cloudflare Turnstile protects public registration and password-recovery forms from bots. Turnstile may process limited security signals such as IP address, TLS fingerprint, browser user-agent, sitekey and website origin; it does not receive the details entered in those forms from CPKC. CPKC does not retain the short-lived Turnstile token. Cloudflare's processing is described in its Turnstile Privacy Addendum. Providers process information only for the services they supply. We do not sell personal information.
Website and mobile-app support requests are stored in one protected Camera Point queue with the requester's name, reply email, category, impact, message, ticket history and any optional attachment. PostHog may receive the ticket reference and limited category information for support context, but Camera Point's support record remains the authoritative ticket. Do not submit passwords, recovery codes or unnecessary identity documents.
We retain account and learning records while they are needed to provide services, preserve legitimate academic or certification evidence, resolve disputes, maintain security and satisfy applicable obligations. Records that are no longer required are deleted or anonymised according to the approved retention process for that record type.
We use access controls, encrypted connections, audit records and restricted administrative functions to protect information. No online service can guarantee absolute security, so users should protect their passwords and report suspected account misuse promptly.
CPKC may provide education services to younger learners. A parent or guardian should assist where consent or support is required. CPKC may request guardian information for safeguarding or programme administration. Questions about a learner's circumstances can be raised before registration through our contact channel.
You may ask to access or correct your information, close your account, or raise a privacy concern. Some academic, certification, financial, security or legal records may need to be retained even after an account is closed. We will explain any applicable limitation when responding.
The account deletion guideexplains how to submit an identity-verified request in the Camera Point app, retain its ADR reference, track its status, or cancel it while it remains reversible.
The contact page records the current support channel status. The approved public mailbox is not yet operational, so do not send personal information to unofficial or personal addresses. We may update this policy as the platform, providers or legal requirements change. The effective date above identifies the current version.