This Privacy Policy applies to the personal data of our customers, suppliers, employees and the learners and administrators who use the JLMSCLOUD platform. Under the UK GDPR, the EU GDPR and the Data Protection Act 2018, an organisation that holds and processes personal information about its clients, employees or suppliers is legally obliged to protect that information. In doing so we must:
We at JZero recognise the importance of protecting the privacy of our customers and other visitors to the JLMSCLOUD website, while permitting us to conduct legitimate business by providing services and information.
JZero acts in two distinct capacities, and it is important to understand which applies to you:
As a data controller: in respect of information we collect directly about our own customers, prospects, suppliers and website visitors — for example contact details captured on registration or enquiry. We determine the purposes and means of that processing.
As a data processor: in respect of learner and administrator personal data held within a customer’s JLMSCLOUD tenancy. Here our customer is the controller, we process the data solely on their documented instructions, and the terms of the applicable Data Processing Agreement (DPA) take precedence over this Policy in the event of conflict.
The sub-processors listed in Section 10 support us in both capacities.
We will collect certain personal information, including your name, address, telephone numbers and e-mail address, when you register for our services or purchase our products. We maintain this information in our customer or application database. We may also collect additional information:
If you provide us with any personal information, you should inform us immediately of any changes to that information by updating your personal details by e-mail to data@jzero.com.
In some cases, when you connect to our website we may automatically (that is, not via registration) collect technical information that is not personally identifiable. Examples include the type of Internet browser you are using, the type of computer operating system you are using and the domain name of the website from which you linked to our site.
Online social media resources are interactive tools that typically enable you to collaborate and share information with others. Examples include social networks, discussion boards, bulletin boards, blogs, wikis, and referral functions to share website content with a friend or colleague. JZero may collect personal information from you to enable you to use online social media resources we offer from time to time, and may also enable you to use these resources to post or share personal information with others. You should consider carefully what information about yourself you choose to share. JZero provides additional notice and choices about how personal information is collected, used and disclosed on those websites and online resources that offer social media.
Some JZero websites and online resources are designed specifically for use on mobile computing devices, and some mobile versions may require that you log in with your user account. Information about your use of the mobile version of the website will be associated with your user account. Some of our websites and online resources enable you to download an application, widget or other tool for use on your mobile or other computing device; some of these tools may store information on your device, may transmit personal information to us to enable account access and usage tracking, and may enable you to e-mail reports and other information. JZero may use personal or non-identifiable information transmitted to us to enhance these tools, to develop new tools, for quality improvement and as otherwise described in this Policy.
When you view our website, we may store some information on your computer in the form of a "cookie" or similar file. For example, cookies allow us to tailor our website to better match your interests and preferences. With most internet browsers you can erase cookies from your device, block all cookies, or receive a warning before a cookie is stored — please refer to your browser instructions or help screen.
Analytical / performance cookies: these cookies allow us to recognise and count the number of visitors and to see how visitors move around the site, which helps us improve the way it works.
Functionality cookies: these cookies enable you to personalise the content of JZero’s websites and allow the site to remember your preferences such as font size, text colour and, where relevant, user ID / login details.
Further information about the types of cookies is available at www.allaboutcookies.org. To find out how to control or remove cookies, visit www.aboutcookies.org.
This information is used to deliver the service or product you requested; to enable billing; to provide you with information about related products and services; to improve our website and platform; and to better administer and troubleshoot our systems.
We do not sell your personal information, and we do not disclose it to third parties for their own independent marketing purposes. Information concerning an individual’s use of our sites will not be disclosed to third parties except in aggregate form, such that the information is not personally identifiable.
In order to deliver the JLMSCLOUD service we do, however, engage a limited number of third-party sub-processors and service providers. These entities may host, process or store customer data, or support certain features, functionalities and services that we make available to our customers. Each is engaged under a written contract imposing obligations equivalent to those required by Article 28 of the UK and EU GDPR, including confidentiality, security and audit obligations, and each processes personal data only on our documented instructions. The current list is set out in Section 10.
We may additionally disclose personal data where we are required to do so by law, regulation, court order or a competent regulatory authority.
Personal data processed within the JLMSCLOUD platform is hosted on Microsoft Azure infrastructure located in the United Kingdom and/or the European Economic Area, and is managed by JZero and its affiliates.
Certain sub-processors listed in Section 10 process personal data outside the UK and EEA — in particular our support desk provider, which is hosted in the United States. Where such a transfer takes place, we ensure an appropriate safeguard is in place — this will be a UK adequacy regulation or EU adequacy decision where one applies, or otherwise the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, supported by a transfer risk assessment. Details of the safeguards applied to a specific transfer are available on request from data@jzero.com.
You may review and approve the information about you collected upon registration in our customer database. Subject to the exemptions available in law, you have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and to object to processing. Upon request we will remove information from our database or correct personal information that you state is erroneous. You should understand that information about you in our database may come from a number of sources, including orders placed by you and third-party lists.
Where JZero acts as processor on behalf of a customer, requests from learners should be directed in the first instance to the customer organisation that operates the relevant JLMSCLOUD tenancy; we will support our customer in responding. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority.
As a service to you, our site may feature links to external websites. JZero is not responsible for the privacy practices or the content of any external website. Accordingly, we recommend that you review the privacy policy of any external website that you enter from our site.
In certain circumstances we are required to obtain your consent to the processing of your personal data in relation to certain activities. Depending on exactly what we are doing with your information, this consent will be opt-in consent or soft opt-in consent.
Article 4(11) of the GDPR defines consent as a freely given, specific, informed and unambiguous indication of the data subject’s wishes, by which they signify agreement to the processing of personal data relating to them by a statement or clear affirmative action. In plain language, this means that:
There is an exception known as the "soft opt-in". Specific consent is not required if we are sending marketing messages about similar products and services to our existing customers or those with whom we have negotiated to provide products or services, as long as we give you the opportunity to opt out when we receive your contact information, and again when we send you subsequent messages.
We may use sub-processors, subsidiaries and support and service providers to provide our service. Listed below are the entities with whom we may share customer data.
The entities listed below may host, process or store customer data, or support certain features, functionalities and services that we make available to our customers.
JZero’s AI-assisted features operate on course and class content only — that is, learning materials, course structure and associated metadata. Learner records, user accounts, assessment results, progress data and other personal data held in the JLMSCLOUD platform are not transmitted to OpenAI or Anthropic.
Customers should note that where their own course content itself contains personal data — for example a named author, a case study describing an identifiable individual, or an image of a person — that content will be processed by the relevant AI provider on the terms described in the table above. Customers retain control over the content they upload and over whether AI-assisted features are enabled within their tenancy.
We keep this list under review and will update it whenever a sub-processor is added, replaced or removed. Where JZero acts as processor, we will give affected customers no less than 30 days’ written notice before appointing a new or replacement sub-processor, in accordance with the applicable Data Processing Agreement. Customers may object on reasonable data protection grounds within that notice period, and we will work in good faith to resolve any objection raised.
To be notified of changes to this list, please contact data@jzero.com.
JZero Solutions Ltd may share personal data with its own affiliates and subsidiaries where necessary to deliver, support and administer the JLMSCLOUD service. Such sharing is subject to the same contractual, security and confidentiality controls described in this Policy.
JZero operates an Information Security Management System certified to ISO/IEC 27001:2022 and a Quality Management System certified to ISO 9001:2015. Technical and organisational measures include encryption in transit and at rest, role-based access control, logical tenant separation, audit logging, vulnerability management and regular backup and recovery testing. Our sub-processors are assessed against equivalent standards before appointment and periodically thereafter.
Questions regarding this Policy, requests to exercise your rights, or requests for details of the safeguards applied to international transfers should be directed to JZero at data@jzero.com.
For problems or suggestions concerning this service, please e-mail data@jzero.com.