Privacy Policy

1. Introduction

Study From Experts Ltd ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable UK data protection laws.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account with us, we collect:

• First name
• Last name
• Email address
• Password (stored securely using industry-standard encryption)

2.2 Automatically Collected Information

We use Google Analytics to collect:

• Usage data and browsing behavior
• Device information
• IP addresses
• Cookie data

2.3 Payment Information

Payment transactions are processed by our payment provider, Polar.sh. We do not store your complete payment card details on our servers. Polar.sh handles payment information in accordance with their own privacy policy and applicable payment card industry standards.

3. How We Use Your Information

We collect and use your personal information for the following purposes:

3.1 To Provide Our Services

• Create and manage your account
• Deliver online courses you have purchased
• Process transactions through Polar.sh
• Authenticate and secure your account

3.2 To Improve Customer Service

• Respond to your inquiries and support requests
• Troubleshoot technical issues
• Improve our course content and platform functionality

3.3 To Personalize User Experience

• Customize course recommendations
• Remember your preferences and settings
• Enhance your learning experience

3.4 To Send Transactional Emails

• Order confirmations
• Course access information
• Account-related notifications
• Password reset requests
• Important service updates

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Processing is necessary to fulfill our contract with you (providing online courses)
• Legitimate Interests: We have a legitimate interest in improving our services and ensuring platform security
• Consent: Where required, we obtain your consent for specific processing activities (such as analytics cookies)

5. Data Storage and Security

5.1 Data Location

Your personal data is stored on secure servers located within the European Union, ensuring compliance with GDPR data residency requirements.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Secure authentication systems
• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and monitoring

5.3 Data Retention

We retain your personal data for as long as you maintain an active account with us. If you delete your account, your personal data will be removed from our systems in accordance with your rights under GDPR.

6. Third-Party Services

We share your data with the following third-party service providers who process data on our behalf:

• Polar.sh: Payment processing
• Google Analytics: Website analytics and usage statistics

These third parties are contractually obligated to process your data only as instructed by us and in compliance with GDPR and other applicable data protection laws.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies, including Google Analytics, to:

• Understand how users interact with our website
• Analyze traffic patterns and improve user experience
• Remember your preferences

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of our website.

For more information about Google Analytics and how to opt out, please visit: https://tools.google.com/dlpage/gaoptout

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data, subject to certain legal obligations we may have to retain certain information.

8.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

8.5 Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances.

8.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time.

9. Data Protection

We do not:

• Sell your personal data to third parties
• Share your personal data with third parties for their marketing purposes
• Transfer your data outside the EU/EEA without appropriate safeguards

10. Age Restrictions

Our services are intended for users aged 16 and over. We do not knowingly collect personal data from individuals under the age of 16. If you are under 16, please do not use our services or provide any personal information. If we become aware that we have collected personal data from someone under 16, we will take steps to delete that information.

11. International Data Transfers

Your data is stored within the European Union. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically.

13. Complaints

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: