Privacy Notice

This notice explains how we collect, use, share, and protect personal data when you use the Service.

We may collect:

1. Account Data: name, email, phone (optional), profile details
2. Verification Data: OTP delivery/verification logs (timestamps/status)
3. Transaction Data: orders, payment status, references, receipts/invoices (we do not store full card numbers when using a payment provider)
4. Learning Data: enrolled courses, progress, quiz results/scores, assignment submissions (metadata and uploads if applicable)
5. Community Data (UGC): comments/questions/files you post (if community features exist)
6. Technical/Usage Data: session identifiers, device/browser info, log data, IP address (maybe truncated/hashed), security/audit logs
7. Preferences & Consents: language, notification preferences, cookie preferences, acceptance/consent records

We use data to:

• Provide and administer your Account and verify identity
• Process payments, orders, and deliver receipts/invoices
• Deliver learning services: course access, progress tracking, assessments, certificates
• Provide support and handle requests/complaints
• Maintain security, prevent fraud/abuse, and audit activity
• Send essential transactional/security notifications
• Send learning/marketing messages only according to your preferences/consent

Depending on the context, we rely on:

• Contract: to provide the Service you request (account, access, purchases)
• Legitimate interests: security, fraud prevention, service improvement (balanced against your rights)
• Consent: marketing communications and non-essential cookies (analytics/marketing)
• Legal obligation: accounting/tax/other legal compliance where applicable

We may share data with:

• Payment providers to process transactions
• Email/SMS/notification providers to deliver OTP, receipts, and messages
• Hosting and infrastructure providers to operate the Service
• Analytics/marketing partners only where you consent to relevant cookies/technologies
• Professional advisers / authorities where required by law or to protect legal rights

All processors act under contractual obligations to protect data.

If we transfer personal data outside the UK, we will use appropriate safeguards (such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, or another valid mechanism).

We keep data only as long as necessary:

• Account data: while your account is active + a necessary period after closure
• Transaction/receipt data: as required for accounting/tax/legal purposes
• Learning/certification data: as needed for learning records and verification
• Consent logs: to demonstrate what you accepted/consented to and when

Exact periods: Pending confirmation (TBD)

You may have rights to access, correct, delete, restrict processing, object, and withdraw consent (where consent is used).

Requests: Pending confirmation (TBD). We may need to verify your identity.

We use necessary cookies to operate the Service and (with your consent) analytics and marketing cookies. See Cookie Policy (POL-COOKIE).

We implement reasonable security measures including access controls, encryption in transit, monitoring, and audit logging.

If you are unhappy with how we handle your data, contact us first at Pending confirmation (TBD). You may also complain to the UK Information Commissioner's Office (ICO).

We may update this notice and will display the updated version/effective date. Material changes may require renewed acknowledgement.