Legal

Privacy policy

Last updated: [DATE]

Placeholder: this page is a template and must be reviewed by a qualified UK solicitor before launch.

Who we are

[Business legal name] is the data controller. Contact: [privacy@ email]. [ICO registration number].

What we collect

  • Account details (name, email)
  • Learning progress, quiz scores and practice journal entries
  • Payment records (processed by Stripe; we don't store card numbers)
  • Messages you send to the tutor (processed by our chat provider)
  • Marketing preferences

Why we use it (lawful basis under UK GDPR)

[Contract, legitimate interests, consent for marketing emails.]

Who we share it with

[Stripe (payments), Supabase (hosting/database), email provider, chat provider, hosting provider.]

Your rights

You can access, correct, delete or export your data, and object to or withdraw consent for marketing at any time. You can complain to the ICO (ico.org.uk).

Retention

[Retention periods.]