1.Who we are
The Systeral Academy (this site, systeral.net) is a training platform operated by YOUCALL-IT.COM LTD (trading as YouCall-IT). Systeral is the software platform brand of YouCall-IT. YOUCALL-IT.COM LTD is the data controller for the personal data described in this notice and is registered with the UK Information Commissioner's Office (ICO) as a data protection fee payer under reference ZB518005 (which also covers the Systeral name).
We provide the Academy to your employer or organisation so its people can learn the Systeral platform. In doing so we also handle your training records on your organisation's behalf.
2.What personal data we hold
- Account details — your name, work email address, organisation, department, role and region. These are normally provided to us by your organisation when your account is created.
- Training records — which videos you have watched, module progress, quiz attempts, scores and answers, awards, and training sign-off status.
- Service records — when you last signed in, and a record of reminder emails sent to you.
- Correspondence — anything you send us when you ask for help.
We do not collect special category (sensitive) data, and the Academy is not intended for children.
3.Why we use it (and our lawful basis)
- To run your training — creating your account, unlocking modules, scoring quizzes, issuing awards (performance of our contract with your organisation / legitimate interests).
- To show progress to your organisation — your organisation's nominated administrators, team leads and managers can see the training progress of their own people, including yours (legitimate interests: training compliance and record-keeping for your employer).
- To email you — sign-in credentials, training reminders, and weekly progress summaries to managers (legitimate interests).
- To keep the service secure — sign-in checks, access controls and audit of administrative actions (legitimate interests / legal obligation).
We do not use your data for advertising, we do not profile you, and we never sell personal data.
4.Who can see your data
- Your organisation — its administrators and nominated managers see the training records of their own organisation only.
- YouCall-IT staff who administer the Academy.
- Our service providers (processors), listed below, who host the platform for us.
Access is enforced in the database itself (row-level security): each person sees their own records, managers see only their own team or organisation, and organisations cannot see each other.
5.Our service providers & where data lives
- Supabase — database, authentication and secure file storage, hosted on Amazon Web Services in the European Union (Ireland).
- Cloudflare — website hosting, content delivery and DNS.
- Resend — transactional email delivery (EU region, Ireland).
Each provider processes data under GDPR-compliant data processing terms. Your data is stored in the UK/EU. Where any provider processes data outside the UK or EEA, transfers are protected by UK International Data Transfer Agreements, EU Standard Contractual Clauses or an adequacy decision.
This site loads no third-party fonts, scripts, analytics or trackers — everything is served from systeral.net and our providers above, so your browsing here is not shared with anyone else.
6.Cookies & local storage
The Academy uses no advertising, analytics or tracking cookies. We use only strictly necessary browser storage:
- a sign-in token, so you stay signed in between visits;
- small preference flags (for example, remembering that you have dismissed the welcome video).
Because nothing beyond strictly necessary storage is used, no cookie consent banner is required.
7.How long we keep it
We keep your account and training records for as long as your organisation uses the Academy and your account remains active. When your account is deleted — at your request or when your organisation ends its use of the Academy — your account and training records are permanently removed from the live system, and residual copies age out of secure backups on a rolling basis shortly afterwards. Your employer may retain its own record of training completion independently of us.
8.Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, and to receive a copy in a portable format.
- See & export your data — use the “Download my data” button on your My Training page for an instant copy of everything the Academy holds about you.
- Correct or delete — contact your organisation's administrator or email us at academy@systeral.net. Verified deletion requests are actioned without undue delay and at the latest within one month.
- Anything else — you can also contact our Data Protection Officer directly at rob.martin@youcall-it.com.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to resolve it first.
9.Security & incidents
All data is encrypted in transit and at rest. Access is role-gated and enforced by database row-level security. Administrative actions require an authenticated administrator account. YouCall-IT also maintains cyber insurance cover for the business.
If a personal data breach ever occurs that risks your rights and freedoms, we will notify the ICO within 72 hours where required and tell affected people without undue delay.
10.Changes to this notice
If we make material changes to how we use your data we will update this page and show the new date at the top. Questions? academy@systeral.net.