PRIVACY POLICY

Last Updated: 17 October, 2024

At Wedme School Ltd ("Company," "we," "us," or "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website wedme.school and our Learning Management System (LMS) platform learn.wedme.school (collectively, the "Services"). It also outlines your rights under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Australian Privacy Principles (APPs), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable laws.
By accessing or using our Services, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

1. Definitions
"Personal Data" means any information relating to an identified or identifiable natural person.
"Processing" means any operation performed on Personal Data, such as collection, storage, use, disclosure, etc.
"Data Controller" means the entity that determines the purposes and means of the Processing of Personal Data.
"User," "you," or "your" refers to any individual accessing our Services.

2. Data Controller Information
Company Name: Wedme School Ltd
Registered Address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
Company Number: 15975439
Contact Email: info@wedme.school

3. Information We Collect
3.1. Personal Data
We may collect the following types of Personal Data:
Identification Information: Name, date of birth, gender.
Contact Information: Email address, telephone number, mailing address.
Account Information: Username, password, profile picture.
Payment Information: While we do not collect or store your payment card details directly, we receive transaction confirmations and related data from our payment processor (Stripe).
Transaction Information: Details about payments to and from you, including purchase history.
Course Interaction Data: Course progress, quiz results, certifications earned.
Communications: Feedback, comments, messages sent to customer support.
Marketing Preferences: Your preferences in receiving marketing communications from us.
3.2. Non-Personal Data
We may collect non-personal data that cannot be used to identify you, such as:
Technical Information: IP address, browser type, operating system, device information.
Usage Data: Pages viewed, time spent on pages, clicks, scrolling information.
Analytics Data: Statistical data collected via analytics tools.

3.3. Cookies and Similar Technologies
We use cookies and similar tracking technologies to collect information about your interactions with our Services.

4. How We Use Your Information
We use your information for the following purposes:
Service Delivery: To provide, maintain, and improve our Services.
Account Management: To create and manage your user account.
Customer Support: To respond to your inquiries and provide support.
Payment Processing: To process transactions and send notifications about your purchases.
Communication: To send administrative information, updates, and promotional materials (with your consent).
Personalization: To customize your experience and deliver content relevant to your interests.
Analytics and Performance: To monitor and analyze usage and trends to improve user experience, using tools like Google Analytics, Facebook Pixel, and Microsoft Clarity.
Marketing and Retargeting: To deliver targeted marketing communications within our company, without selling or sharing your information with third parties for their marketing purposes.
Legal Compliance: To comply with legal obligations and protect our legal rights.

5. Legal Basis for Processing Personal Data
Under GDPR and other applicable laws, we rely on the following legal grounds for processing your Personal Data:
Consent: When you have given clear consent for us to process your Personal Data for specific purposes (e.g., receiving marketing communications).
Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party (e.g., providing access to purchased courses).
Legal Obligation: Processing is necessary for compliance with a legal obligation.
Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our Services), provided your rights do not override these interests.

6. Disclosure of Your Information
6.1. Third-Party Service Providers
We may share your Personal Data with third-party service providers who perform services on our behalf, such as:
Payment Processor: Stripe for payment transactions. We receive transaction confirmations and related data but do not collect or store your payment card details.
Email Service Provider: SendPulse for sending transactional and promotional emails.
Analytics Providers: Google Analytics, Facebook Pixel, and Microsoft Clarity for analyzing website usage and improving our Services.
These third parties are obligated to protect your information and use it only for the services they provide to us.
6.2. Legal Obligations
We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
6.3. Business Transfers
In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity.

7. International Data Transfers
Your Personal Data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area (EEA), including the United States, Canada, and Australia. We ensure that such transfers are conducted in compliance with applicable laws by implementing appropriate safeguards, such as:
Standard Contractual Clauses: Using contractual provisions approved by relevant authorities.
Adequacy Decisions: Transferring data to countries recognized as providing an adequate level of data protection.

8. Data Retention
We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including:
Active Accounts: As long as your account remains active.
Legal Compliance: To comply with legal obligations or resolve disputes.
Data Retention Period: We retain data for a minimum of 12 months after your last interaction with us unless a longer retention period is required or permitted by law.
After the retention period, your Personal Data will be securely deleted or anonymized.

9. Your Rights Under Applicable Laws
9.1. European Union (GDPR)
Under the GDPR, you have the following rights:
Right to Access: Request a copy of the Personal Data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data under certain conditions.
Right to Restrict Processing: Request limitation of how we process your data.
Right to Data Portability: Receive your Personal Data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data.
9.2. California Residents (CCPA)
Under the CCPA, California residents have the right to:
Know: Request disclosure of the categories and specific pieces of Personal Data we have collected about you.
Delete: Request deletion of your Personal Data.
Opt-Out: Opt-out of the sale of Personal Data (Note: We do not sell Personal Data).
Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights.
9.3. Australia (APPs)
Under the Australian Privacy Principles, you have the right to:
Access: Request access to the Personal Data we hold about you.
Correction: Request correction of your Personal Data.
Anonymity: Interact with us anonymously where practicable.
9.4. Canada (PIPEDA)
Under PIPEDA, you have the right to:
Access: Request access to the Personal Data we hold about you.
Correction: Request correction of your Personal Data.
Withdraw Consent: Withdraw consent for the collection, use, or disclosure of your Personal Data.
To exercise any of these rights, please contact us at info@wedme.school. We will respond to your request within one month, as required by applicable laws.

10. Cookies Policy
10.1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are used to make websites work more efficiently and provide information to the site owners.
10.2. Types of Cookies We Use
Essential Cookies: Necessary for the functioning of the website (e.g., authentication cookies).
Performance Cookies: Collect information about how visitors use the website (e.g., pages visited).
Functionality Cookies: Remember choices you make to improve your experience (e.g., language preferences).
Targeting/Advertising Cookies: Collect information about your browsing habits to deliver targeted advertising.
10.3. Managing Cookies
We display a cookie banner to inform you about the use of cookies and obtain your consent where required. You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our Services.
Internet Explorer: Manage Cookies
Firefox: Manage Cookies
Chrome: Manage Cookies
Safari: Manage Cookies

11. Security of Your Information
We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:
Encryption: SSL/TLS protocols for secure data transmission.
Access Controls: Restricted access to Personal Data based on role-based permissions.
Regular Audits: Security assessments and vulnerability scans.
Despite our efforts, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

12. Children's Privacy
Our Services are intended for individuals who are at least 18 years old. We do not knowingly collect Personal Data from children under the age of 18. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us at info@wedme.school. We will take steps to delete such information promptly.

13. Third-Party Links
Our Services may contain links to third-party websites. We have no control over and are not responsible for the content or privacy practices of such websites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting the revised policy on our website. The "Last Updated" date at the top indicates when the policy was last revised. Your continued use of the Services signifies your acceptance of the updated policy.

15. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: info@wedme.school
Address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX

16. Additional Information
16.1. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR and other applicable laws. We will also inform affected individuals without undue delay.
16.2. Social Media Features
Our Services may include social media features, such as the Facebook "Like" button or other widgets. These features may collect your IP address and set cookies to function properly. Your interactions with these features are governed by the privacy policy of the company providing them.
16.3. User-Generated Content
While we do not host user-generated content on our platform, users may engage in discussions or share content on third-party services linked through our platform. We are not responsible for the privacy practices or content of these third-party services. We encourage you to review their privacy policies before participating.

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.