Privacy Policy

Effective Date: February 6, 2026

At EDYOU, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our platform.

1. Who We Are

EDYOU ("we", "us", or "our") is the data controller responsible for your personal data. If you have any questions about this policy, please contact our Data Protection Lead at privacy@edyou.co.uk.

2. The Data We Collect

We collect and process various types of information, including:

• Identity Data: Name, username, and profile pictures.
• Contact Data: Email address and billing address.
• Financial Data: Payment card details (processed securely via third-party providers like Stripe or PayPal).
• Technical Data: IP address, login data, browser type, and location.
• Learning Data: Course progress, quiz scores, certificates earned, and interactions with instructors.

3. How We Use Your Data

We only use your data when the law allows us to. Most commonly, we use it for:

• Performance of a Contract: To provide the courses you have purchased.
• Legitimate Interests: To improve our platform, prevent fraud, and provide customer support.
• Consent: For marketing communications (which you can opt out of at any time).

4. Sharing Your Data

As a marketplace, your data may be shared with:

• Instructors: When you enroll in a course, the instructor receives your name and profile information to facilitate teaching.
• Service Providers: IT hosting, payment processing, and email delivery services.
• Legal Authorities: If required by law or to protect our legal rights.

5. International Transfers

We are a UK-based company. If we transfer your data outside the UK (e.g., to a server in the US), we ensure similar protection is afforded by using Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

6. Your Legal Rights

Under the UK GDPR, you have the following rights:

• Access: Request a copy of the data we hold about you.
• Correction: Ask us to fix inaccurate information.
• Erasure: Request that we delete your data (the "Right to be Forgotten").
• Objection: Object to processing for direct marketing.
• Portability: Request a transfer of your data to another service.

7. Data Retention

We keep your personal data only as long as necessary to provide our services and for legal, accounting, or reporting requirements. Typically, inactive accounts are deleted after [Insert Period, e.g., 6 years].

8. Security

We have put in place appropriate security measures (including SSL encryption and two-factor authentication) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

9. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.