Policy draft
Privacy notice
What we expect to collect, why it is needed, and the decisions still awaiting legal review.
Information we expect to process
- Registration details: name, email address, and phone number.
- Account, sign-in, session, and device-binding information.
- Payment evidence, transaction references, review status, and administrator notes.
- Resource access records and security/audit events.
Why it is used
- Create and secure student and administrator accounts.
- Verify a transfer and grant the correct resource access period.
- Prevent account sharing, investigate abuse, and maintain an audit trail.
- Respond to support requests and operate the service.
Retention
Payment receipts are planned to be retained for six months after the final payment-review state, then removed under the approved retention process unless a legal or dispute-related need requires longer retention. Final periods for other account and audit data remain subject to legal review.
Sharing and safeguards
Information should be available only to authorised staff and service providers needed to operate the platform. We will not describe data as completely secure; instead, access controls, encryption in transit, protected secrets, and review logs will be used to reduce risk.
Your requests
A verified privacy contact and process for access, correction, and deletion requests will be published before launch. Some records may need to be retained where required by law, security, or an active dispute.
