1. Who we are
This Privacy Policy explains how Investment Courses ("we", "us", "our"), registered at High Holborn 12, BS1 5LJ Bristol, United Kingdom, collects and uses personal data when you visit our website or use our Services. We act as the data controller for the personal data described in this policy. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
2. Personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Identity and contact details, such as your name, email address and telephone number.
- Account data, such as your username, password hash and preferences.
- Transaction and billing data, such as payment status and invoice history. We do not store full card numbers; these are handled by our payment processors.
- Technical data, such as IP address, browser type, device identifiers and approximate location derived from your IP address.
- Usage data, such as pages viewed, features used and time spent on the Services.
- Communications, such as messages you send to our support team.
We do not intentionally collect special category data. Please do not send us sensitive information unless we specifically request it.
3. How we use your data
We use personal data to create and manage your Account, provide the Services, process payments, respond to enquiries, improve and secure our platform, prevent fraud and money laundering, comply with legal obligations, and send service-related communications. Where you have given consent, we may also send marketing messages, which you can withdraw at any time.
4. Lawful bases
We rely on the following lawful bases under Article 6 of the UK GDPR: performance of a contract with you; compliance with legal obligations; our legitimate interests in running and securing a safe platform, provided these do not override your rights; and your consent where we ask for it, for example for certain cookies or marketing emails.
5. Cookies and similar technologies
We use cookies and similar technologies to operate the website, remember your preferences and understand how the Services are used. Further details, including how to manage your choices, are set out in our cookie information. Non-essential cookies are placed only with your consent where required by the Privacy and Electronic Communications Regulations.
6. Sharing your data
We do not sell your personal data. We may share it with trusted service providers who process data on our behalf, including hosting providers, analytics providers, customer support tools and payment processors. These providers are bound by written contracts and may only act on our documented instructions. We may also disclose data where required by law, by a court order, or to protect the rights, safety or property of our users or others.
7. International transfers
Some of our service providers may process data outside the United Kingdom. Where this happens, we ensure that appropriate safeguards are in place, such as UK-approved international data transfer agreements or adequacy regulations, as required by UK GDPR.
8. Retention
We keep personal data only for as long as necessary for the purposes described in this policy. Account data is generally retained for the life of your Account and for a reasonable period afterwards. Financial records are retained for the period required by UK tax and accounting law. Once no longer needed, data is securely deleted or anonymised.
9. Security
We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration and disclosure. These include encryption in transit, access controls, and regular reviews of our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Your rights
Under the UK GDPR you have the right to access your personal data, request rectification, request erasure in certain circumstances, restrict or object to processing, request data portability, and withdraw consent at any time. You may also object to direct marketing. To exercise these rights, contact us using the details below. We will respond within one month, although we may extend this period where the law allows.
11. Children
The Services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.
12. Complaints
If you have a concern about how we handle your data, please contact us first so that we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in law or our practices. The latest version will always be published on this page, with the "Last updated" date revised accordingly.
14. Contact us
Data protection enquiries can be sent to High Holborn 12, BS1 5LJ Bristol, GB, or by email to [email protected].