— Your data
Privacy notice
The short version
We do not sell your data
Not to advertisers, not to data brokers, not to anyone. There is no marketing list we pass you to.
We collect only what runs the course
Enough to give you an account, record your progress, take payment and issue a certificate.
You stay in control
Ask for a copy, a correction or deletion at any time, under Jamaica's Data Protection Act, 2020.
Who holds your information
FirstClick Digital Skills is a business name of Liguanea Advisory Group Limited, a company registered in Jamaica. Your information is held by Liguanea Advisory Group Limited, 8 Lakehurst Drive, Kingston 8, Jamaica. We are completing our registration as a data controller with the Office of the Information Commissioner (OIC) under the Data Protection Act, 2020, and will confirm it here once it is in place. Contact details for data requests are below.
What we collect
When you create an account
Your name, email address, mobile number and the 6-digit PIN you choose (and a username or password later, if you add one). The PIN and any password are stored scrambled and cannot be read back by anyone here.
If you choose to give it
Your mobile number, and a Taxpayer Registration Number (TRN) used only to check that one person does not hold two accounts.
As you learn
Which lessons you opened, your quiz results, and which courses you completed.
When you pay
A record that payment was made, and the receipt. We never collect or keep card numbers, bank account numbers, bank logins or PINs; card payments are handled by PayPal. If someone pays for you through your payment link, PayPal gives us their name, email address and the payment’s status, which we keep with the payment record. For a bank transfer by arrangement, our bank statement shows the payer’s name, the amount, the date and the reference, used only to match the payment. When you buy a gift, we keep your name and email address and the name, email address and message for the person receiving it, to send the gift and keep the payment record; the person receiving it can see your name and message, and a copy of each gift certificate goes to our office. Gift details are kept while the code is valid (12 months from purchase) and afterwards with our payment records.
Why we hold it
To run your account, record your progress, issue and confirm certificates, take payment, answer your questions, and keep the service secure. Nothing else.
Who else sees it
Only the suppliers who make the service work: our payment provider, our web host and our email provider, each seeing only what their job requires.
Visits to the site also pass through Cloudflare, which protects it from attacks and runs the security check on our forms. Cloudflare sees technical details of each visit, such as your internet address and browser type, and uses them to keep the site safe. It does not receive your account, lesson or payment details. See how the site is protected.
We do not sell your information, and we do not share it with third parties for marketing. We would disclose information only where the law requires it.
Your certificate
Someone can confirm your certificate only with the certificate number printed on it, or by scanning the code beside it. They see your name, the course and the date, and nothing more, and nobody can search for you by name. You can switch checking off, and back on, from My certificates in your account. Each check is recorded, and you can see it in your sign-in activity.
How long we keep it
If you start creating an account but do not finish (confirm your email and choose your PIN), we delete what you typed after 7 days. Account information while your account is open. Certificate records are kept longer so certificates stay checkable. Account details are removed within 12 months of an account being closed, except certificate records. The record of sign-ins and changes on your account (our audit record) is kept for two years, lesson ideas you send us for two years, and payment records for seven years, as tax and accounting rules require. Each is then deleted automatically.
Examples used in the lessons
The people, businesses and messages shown as examples in our lessons and printed material are invented. They are not drawn from any learner's account, message or personal information, and any resemblance to a real person or business is coincidental.
Your rights under the Data Protection Act, 2020
- Ask for a copy of the information we hold about you
- Ask us to correct anything that is wrong
- Ask us to delete your information, subject to records we must keep
- Complain to the Office of the Information Commissioner (OIC)
Cookies. FirstClick uses only the cookies needed to keep you signed in and to protect the site from attacks. When a student account from the Student Program is signed in, a small cookie that says only “kids” or “teens” lets the site show pictures for their age group; it is removed when they sign out or close the browser. If you say a phone or computer is your own when you sign in, we keep a cookie on it so that it can sign in with your PIN. It lasts up to a year and is renewed each time you use it. We store only a scrambled copy of it, with a plain name for the device (for example iPhone · Safari) and when it was approved and last used, so you can see and remove it under Your devices. Removing a device, or five wrong PINs on it, cancels it. Your browser also keeps a few small settings that never leave it: your Light, Dark or System appearance choice, your Easier to read choice (text size and high contrast), and, while a tab is open, a note that the tab is in your learning area, so we can sign you out if you leave it, and the time you last moved the mouse or typed, so every open tab knows when to sign you out (neither holds anything about you).
Children and students under 18. FirstClick is for adults and for students. Adults, 18 or older, create their own accounts on our sign-up page; we do not knowingly collect information from children in any other way. Students under 18 use FirstClick only through a school in the FirstClick Student Program, after a parent or legal guardian signs our Parent or Guardian Consent Form. For those students we collect only their name, date of birth, school, grade or form, an email address for sign-in codes (a school address is fine), and their lesson progress and quiz results, plus the parent or guardian's name, relationship to the student and contact details, and the date the consent form was signed. Students who sign up in class with a class code from their teacher give less: their first and last name, their age group (8 to 11 or 12 to 17, chosen with their teacher), a username and a PIN of 4 numbers (ages 8 to 11) or 6 numbers (ages 12 to 17), stored only in scrambled form, plus their school and class, lesson progress, quiz results and sign-in activity; no email address, no date of birth and no parent details reach us, because the school keeps the signed consent forms. Their teachers can see each student's name, username, age group, progress and when they last signed in, and can add students (name, age group and username), reset an account so the student chooses a new PIN, unlock, pause, move or terminate it. A teacher and the school lead get a notice when a student finishes a course. When a teacher terminates an account, it stops signing in; we keep the progress and the activity log, and delete the student’s personal details one year later. For teachers we keep their name, email address, school and the classes they manage. We do not collect a student's phone number, identification number, photograph or payment details; students receive no newsletters or marketing and cannot use the AI helpers. We tell the school's program lead how the student is doing. We keep this information while the student is enrolled and for one year after they leave the program, then delete it. If consent is withdrawn, we delete it straight away and keep only a note that consent was given and withdrawn, with the dates, for one year. A parent or guardian can ask to see, correct or delete it, or withdraw consent at any time, through the school or by emailing [email protected]. The program is not open yet; this applies from the day it opens. See section 14 of our terms.
AI helpers. Signed-in learners can use three AI helpers: Is this a scam?, where you paste a message you are unsure about; Ask about this lesson, where you type a question on a lesson page; and the Help assistant on the Help page, which answers from the Help page only (long numbers and email addresses are removed from your question before it is sent). What you paste or type is sent to our AI service provider, Anthropic, to write the answer, together with the lesson's own text (or, for the Help assistant, the Help page's text). Before a message is sent, we remove long numbers such as card, account and TRN numbers, and replace any link with just the website name, so the link itself is never sent or shown; please also take out your name and any code you were sent. We do not send your name, email or account details, and we do not keep what you pasted or typed: we record only the date, what the helper was used for, and its size and cost. As we understand Anthropic's terms, it does not use this information to train its AI. Answers come from an AI, can be wrong, and are never used to make decisions about your account, your certificate or your payments. Using the helpers is up to you; every lesson works without them. The helpers are for adult learners, and are switched off on student accounts.
Reviewed answers (not offered yet). We may later offer adult learners a way to ask a question about money, health or the law, answered by a qualified person on our team. If we do, we keep your question, the answer, who reviewed it and when, so the reviewer can read it and you can come back to it. The reviewer may send your question, without your name or account details, to our AI service provider, Anthropic, for a first draft; long numbers such as card, account and TRN numbers are removed first. Only our staff see your question. We delete the question and answer 90 days after the answer, or sooner if you delete your account. The service is not available on student accounts, and it is switched off today; we will tell you here before it opens. See section 8 of our terms.
Offering computers for schools. If you offer computers through our Community page, we keep the company name, your name, email address, phone number, the parish, and what you told us about the computers, so we can contact you and arrange collection. We send you a copy by email. We keep it for two years after the offer was last updated, then delete it automatically, unless you ask us to delete it sooner. Only our staff can see it. The rest of the arrangement is in section 13 of our terms.
Tips and course news by email. We ask once whether you would like "Did you know" tips and emails about new short courses. Both boxes start empty, and we send them only if you tick them. We keep your choice and when you made it. Every one of these emails has an Unsubscribe link that works without signing in, and you can change your choice any time in My profile. Emails about your own account, such as sign-in codes and receipts, are not affected. We use the same email service as for all our emails, and never share your address with anyone to market to you.
Face or fingerprint. If you turn on face or fingerprint sign-in for a device, your device makes a pair of keys. We keep only the public key, a number that lets us check your device, with the date it was turned on and last used. Your face, fingerprint or screen lock is checked by your own device and is never sent to us; we do not collect or store any biometric information. Removing the device, or turning face or fingerprint off, deletes the public key. We do not use advertising or tracking cookies, and we do not use analytics services. If you choose Light or Dark under Appearance, that choice is saved only in your own browser, on that device, and is never sent to us. When you are signed in, we keep short notifications for you under the bell, such as a reminder after three days without a lesson, or word that a lesson you asked for is ready. They are kept for 90 days, then deleted.
Sign-in security. We record failed sign-in attempts against your account, with the time and connection, to pause sign-in after repeated wrong passwords and to spot attempts to break in. These records are kept with our security logs.
Respectful use checks. The name you sign up with, the username you choose, and what you send through our contact and Suggest a lesson forms are checked automatically on our own server for abusive or hateful language, threats, scam links and requests for passwords or card details. Nothing is sent to any outside service for this. A match is never acted on by the computer alone: a member of our team looks at it and decides. Anything marked, and what we decided, is kept for 12 months after the decision.
Backups. We keep encrypted backup copies of our records for up to 90 days, so we can recover from errors or system failure. You can delete your account and personal information yourself at any time from My profile, or ask us to do it. Either way, we remove it from our live system straight away, and email you to confirm. Copies in our backups are deleted as those backups expire, within 90 days, and are never used for any other purpose. If we ever have to restore from a backup, we delete your information again before the system goes back into use.