Unreviewed draft — not for customers. This page has not been reviewed by a solicitor.
Privacy Policy
Last updated: {{date}}
Who is responsible
EDUSTRIM LTD, registered number 17375480, of {{registered address}}, is the data controller for personal data described here.
Contact for data protection matters: {{privacy email}} {{ICO registration number, if registered}}
What we collect
When you register: first name, last name, email address, phone number.
When you buy: billing address including city, region, postcode and country. Card details go directly to our payment provider and never reach us.
When you use the service: your simulated trades, the rationales you write, course progress and exercise answers, sign-in count and last sign-in time, and the type of device you use — phone, tablet or desktop only, with no device fingerprinting.
When we email you: whether a message was delivered and whether you opened it.
Why, and on what basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Providing your account and the service | Registration details, trades, progress | Performance of a contract |
| Taking payment and issuing receipts | Billing details, purchase records | Performance of a contract |
| Service emails — verification, receipts, password reset | Email address | Performance of a contract |
| Marketing emails | Email address, name | Consent, which you can withdraw at any time |
| Keeping records for accounting and tax | Purchase records | Legal obligation |
| Improving the platform | Aggregated usage, device type | Legitimate interests |
| Preventing abuse and fraud | Account and usage data | Legitimate interests |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Marketing
We only send marketing email if you have opted in. Service emails — account verification, receipts, password resets — are sent regardless, because they are necessary to provide what you asked for.
You can withdraw consent at any time, from the account area or the unsubscribe link in any marketing email. Withdrawal takes effect immediately.
Who we share it with
- {{Payment provider}} — to process payments
- {{Email provider}} — to send email
- {{Hosting and database provider}} — to run the service
- Professional advisers and authorities — where legally required
We do not sell your personal data and we do not share it with advertisers.
{{Note the location of each provider. Where personal data leaves the UK, name the transfer mechanism — UK adequacy regulations or the International Data Transfer Agreement.}}
How long we keep it
Account data for as long as your account exists, and {{period}} after closure. Purchase records for {{six years}} to meet accounting requirements — after account deletion, these are detached from your identity rather than deleted. Marketing consent records for as long as needed to show consent was given.
Your rights
Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to processing, and receive it in a portable format. You may also withdraw consent where consent is the basis.
You can export your data and request deletion from the account area. For anything else, contact {{privacy email}}. We respond within one month.
If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Data is encrypted in transit and at rest. Access is limited to those who need it. Card details never touch our systems.
Children
The service is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account.