Privacy Policy

Information We Collect

Identity and contact details

Name, address, email address, phone number and where applicable, initials displayed on our platform leaderboard.

Professional details

Service related information

• Transaction details for services you've purchased from us or enquiries about our services
• Your preferences for our services and your marketing preferences and where relevant information related to loyalty programmes
• Feedback, complaints and compliments and survey responses

Financial and payment information

Payment details for products and services you've purchased from us, processed via Stripe, (including where relevant, credit reference information) and where relevant banking or payment card information.

Digital information

• IP address and general location information derived from your IP address
• Search and browsing behaviour and user journeys
• Website usage patterns
• Cookie preferences and tracking

Professional information (for job applicants and workers)

• Employment history
• Professional experience
• Required authorisations and licences
• Professional registrations
• Information about your right to work in the UK

How We Collect Personal Data

Directly from you when you:

Interact with us, contact us, fill out forms. Create an account or sign up to our services or sign in using your Google, Facebook or Apple account or by registering directly with your email address via Clerk.

Automatically when you:

Visit our website, use our technologies, interact with our online services.

From third parties:

Authentication and account providers (Clerk), payment processors (Stripe), error monitoring services (Sentry), bot protection services (Cloudflare), service providers, business partners, previous employers, government organisations and organisations or people authorised by you.

From publicly available sources:

Such as Companies House and professional networking sites such as LinkedIn.

How We Use Your Information

Data protection law requires us to have proper legal reasons for using your personal data. We can only use your information when we have one or more of these legal bases:

• Consent — You have clearly agreed to us using your personal data for a specific purpose.
• Performance of a contract — We need to use your information to fulfil a contract with you, or because you've asked us to do something before entering into a contract.
• Legal duty — We must use your information to comply with the law.
• Vital interests — We need to use your information to protect someone's life.
• Public interest — We need to use your information to perform a task in the public interest or carry out official functions that have a clear legal basis.
• Legitimate interests — We have a genuine business reason to use your information, or a third party does, but only if this doesn't unfairly override your rights and interests.

Where we rely on legitimate interests as our legal basis, we have conducted balancing tests to ensure our interests do not override your fundamental rights and freedoms.

Automated Decision Making and Profiling

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where we use automated decision-making, we will:

• Inform you of the logic involved
• Explain the significance and envisaged consequences
• Provide you with the right to human intervention
• Allow you to express your point of view
• Enable you to contest the decision

Our Disclosures of Personal Data to Third Parties

We may disclose personal data to:

Service providers

• IT service providers including Sentry (error and performance monitoring) and Upstash (rate limiting and abuse prevention)
• Data storage providers including AWS
• Web hosting and server providers including Vercel
• Payment processors including Stripe
• Authentication and sign-up providers including Clerk
• Marketing and advertising providers
• Transactional email providers including Resend
• Bot protection providers including Cloudflare (Turnstile)

Professional advisers

• Bankers
• Auditors
• Insurers and insurance brokers
• Legal advisers

Business partners

• Our existing or potential agents
• Our business partners or contractors

Corporate transactions

If we merge with or are acquired by another company, or sell our business assets, your information may be disclosed to our advisers, the potential purchaser's advisers, or included in the transferred assets.

Legal and regulatory bodies

• Courts and tribunals
• Regulatory authorities including as required for reporting obligations
• Law enforcement officers

Other parties

• Third parties you have authorised
• Emergency services when necessary
• Any other parties as required or permitted by law

Overseas Transfers

We store your personal data in the United Kingdom. However, your information may be transferred to locations outside the United Kingdom in these circumstances:

• When our service providers are located overseas
• When we work with overseas business partners
• When using cloud-based services or data storage solutions
• When required by law or legal proceedings

Our approach to overseas transfers

When we transfer your personal data outside the United Kingdom, we ensure it receives appropriate protection by:

• Only transferring your information to countries that UK data protection law recognises as providing adequate protection
• Putting in place a contract with the third party that means they must protect personal data to the same standards as the UK
• Transferring personal data to organisations that are part of specific agreements on cross-border data transfers with the UK

What this means for you

We only transfer the minimum amount of personal data necessary and require all recipients to protect your information to the same standards required by UK law, use your information only for the purposes we've agreed, allow us to monitor how they handle your information, and provide you with the same rights over your information that you have under UK law.

Children's Personal Data

We do not knowingly collect or process personal data from children under 13 years of age without appropriate parental or guardian consent.

If you are under 13, please do not provide personal data to us without first asking your parent or guardian for permission.

If we become aware that we have collected personal data from a child under 13 without verified parental consent, we will take steps to delete that information as quickly as possible.

Parents and guardians have the right to:

• Review any personal data we hold about their child
• Request correction or deletion of their child's personal data
• Refuse or withdraw consent for further collection or use of their child's data
• Contact us with any concerns about their child's privacy

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately using the details provided in this policy.

Data Retention

How long we keep your information

We only keep your personal data for as long as we need it to:

• Provide our services to you
• Meet our legal, tax, accounting or regulatory obligations
• Handle any complaints or legal issues that may arise

We may keep your information for longer periods if:

• You make a complaint that we need to investigate or respond to
• We reasonably believe legal action involving our relationship with you might occur
• The law requires us to keep it for specific timeframes

How we decide retention periods

When determining how long to keep your information, we consider:

• How much information we have and how sensitive it is
• The risk of harm if the information was accessed without permission
• Whether we can achieve our purposes in other ways
• What legal, regulatory, tax or accounting rules require
• The nature of our relationship with you and the services we provide

What happens when we no longer need your information

Once we no longer need your personal data, we will securely delete or destroy it in accordance with our data retention policies and legal requirements.

Your Privacy Rights and Choices

Providing information

You can choose whether to provide personal data to us, however, if you don't provide certain information, we may not be able to provide some services.

Right of Access

You have the right to ask us for copies of your personal data. You can request other information such as details about where we get personal data from and who we share personal data with.

Right to Rectification

You have the right to ask us to correct or delete personal data you think is inaccurate or incomplete.

Right to Erasure ("Right to be forgotten")

You can request deletion of your personal data in certain limited circumstances as set out in data protection law. This right is not absolute, and we may be required or entitled to retain your data for legal, regulatory or legitimate business reasons.

Right to Restrict Processing

You can ask us to suspend processing where:

• You contest the accuracy of the data
• Processing is unlawful but you don't want erasure
• We no longer need the data, but you need it for legal claims
• You've objected to processing pending verification of our legitimate grounds

Right to opt-out of marketing communications

You can opt-out of receiving marketing communications at any time. Each marketing communication will include an unsubscribe option.

Right to Data Portability

Where technically feasible, you can receive your personal data in a structured, commonly used format or have it transmitted to another controller where processing is based on consent or contract and processing is automated.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

How to Exercise Your Rights

To exercise any of these rights, contact us at support@learnstocks.ai. We may ask for proof of identity and will respond within one month (extendable to three months for complex requests).

Making a Complaint

If you're unhappy with how we've used your personal data, please get in touch with us first using the contact details at the end of this policy. When you contact us, give us full details about your complaint and we'll investigate your concerns promptly.

Your right to complain to the regulator

You can also make a complaint directly to the Information Commissioner's Office (ICO), the UK's data protection regulator, at any time.

Protecting Your Information

We use multiple layers of security to protect your information.

Technical safeguards

• Enterprise-grade encryption for data storage and transmission
• Regular security testing and monitoring
• Automated threat detection systems
• Error and performance monitoring via Sentry, with access to error logs restricted to authorised personnel only

Operational security

• Staff training on security and privacy
• Strict access controls based on job requirements
• Regular security audits and incident response procedures testing

Physical security

• Secure premises with controlled access
• Secure disposal of physical documents
• Equipment security protocols

Please note that any information you choose to share publicly on online platforms can be accessed and used by others. We cannot control or protect information that you make publicly available.

Cookies and Analytics

Cookies and pixels

We use cookies and similar tracking technologies on our website to enhance your browsing experience and improve our services.

What are cookies?

Cookies are small text files that are stored on your device when you visit our website. They help us remember your preferences and understand how you use our site.

Types of cookies we use

• Essential cookies: Necessary for the website to function properly
• Performance cookies: Help us understand how visitors interact with our website
• Functionality cookies: Remember your preferences and settings
• Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness

Cookie consent

When you first visit our website, you will see a cookie notice explaining our use of cookies. You can choose which types of cookies to accept through our cookie preference centre.

Managing your preferences

You can change your cookie preferences at any time by:

• Using our cookie preference centre on the website
• Adjusting your browser settings to refuse or delete cookies
• Visiting our cookie policy for detailed information about specific cookies

Please note that disabling certain cookies may affect the functionality of our website and your user experience.

Google Analytics

We use Google Analytics to understand how people use our website. You can opt out of Google's advertising features through your Google account settings, browser add-ons, or your device's privacy settings.

Meta advertising tools

We use Meta's advertising tools (such as Meta Pixel) to understand how our ads perform and to show you more relevant advertisements on Meta platforms like Facebook and Instagram. You can manage these preferences within your Meta account settings.

When You Sign In with Another Account

When you use single sign-on to connect with us (facilitated through Clerk) to create or access your account, we'll receive personal data from that provider based on your privacy settings with them. This may include your name, username, profile picture, and other details you've chosen to share.

We use this information to create your profile on our platform and give you access to our services.

If you connected through Google, Facebook or Apple, you can ask us to delete the personal data we received. To do this, email us at support@learnstocks.ai and tell us what information you'd like deleted.

Artificial Intelligence (AI) Technologies

Overview

We use artificial intelligence and machine learning technologies in our business operations and services, including AI tools provided by third parties. We only use these technologies when legally permitted and necessary for our business.

How we use AI

We may use AI technologies to:

• Conduct analysis and data processing
• Generate and modify content and coding
• Improve and optimise our services and operation
• Automate routine tasks and communications
• Personalise your experience with our services
• Support quality assurance processes
• Assist with customer support and queries
• Personalise your experience through preference-based content filtering, whereby you select areas of interest and our system filters relevant educational content accordingly

Data protection and security

When we work with third-party AI providers, we ensure they handle your personal data in accordance with privacy laws through contractual requirements and appropriate safeguards.

Your rights and our commitments

Any information generated or inferred about you by AI technologies is treated as personal data, and you maintain all the rights outlined in this privacy policy. When using AI with your personal data, we commit to:

Amendments

We may update this policy at any time by posting the revised version on our website. We recommend that you review our website regularly to stay current with any policy changes.