Privacy Policy

Who we are

EduSpace Learning Ltd is the data controller for processing described in this Privacy Policy. Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. You can contact us at [email protected] or by phone at +44 20 3807 4388.

Data we collect

We collect information that you provide directly (for example, account details, profile name, email, password, age range for child accounts, messages sent through forms) and data collected automatically (such as device information, approximate location derived from IP, pages viewed, and interaction data). If you purchase a paid course, our payment partners process card data; we receive limited billing details such as transaction identifiers and the last four digits for receipts.

How we use data

We use personal data to deliver and improve services, personalize content, provide customer support, send service notifications, process payments, prevent fraud, and comply with legal obligations. With your consent, we may send newsletters and product updates. You can unsubscribe at any time via the link in each message.

Legal bases

We rely on the following legal bases under UK GDPR: performance of a contract (to provide courses and account features), legitimate interests (to keep services secure, understand usage, and improve content), consent (for optional cookies and marketing emails), and compliance with legal obligations.

Cookies and analytics

We use essential cookies to keep you signed in and remember preferences. With consent, we use analytics cookies to measure engagement and improve the site. For details, see our Cookie Policy. You can change cookie choices using your browser settings or by revisiting the cookie controls on our site.

Children’s privacy

EduSpace includes content for children. Child accounts should be created and managed by a parent, guardian, or school representative. We limit data collection to what is necessary to provide the service and encourage supervision. If you believe a child has provided personal data without appropriate consent, contact us and we will take prompt steps to remove it.

Data sharing

We share personal data with trusted service providers who help us operate the platform, such as hosting, customer support tools, email delivery, analytics (subject to consent), and payment processors. These partners process data under contracts that require confidentiality and appropriate security. We do not sell personal data.

International transfers

Where data is transferred outside the UK, we use appropriate safeguards such as UK International Data Transfer Addendums or other valid transfer mechanisms to protect your information.

Data security

We apply technical and organizational measures including encryption in transit, access controls, least‑privilege policies, and regular reviews. No online service can be completely secure, but we work continuously to reduce risk and respond quickly to issues.

Retention

We keep data only as long as needed for the purposes described or as required by law. Typical retention periods: account data for the life of the account, support messages for up to 24 months, and analytics data for up to 26 months. You may request deletion earlier where applicable.

Your rights

Under UK data protection law, you may have the right to access, correct, delete, or port your data, and to object to or restrict certain processing. Where processing is based on consent, you can withdraw consent at any time. To exercise your rights, contact [email protected]. We may need to confirm your identity before responding.

Third‑party links

Our site may include links to third‑party resources. Those sites have their own privacy practices. We encourage you to review their policies before providing personal data.

Contact and complaints

Questions or concerns? Email [email protected] or write to our London address above. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). Visit ico.org.uk for guidance.

Changes to this policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. We will indicate the “Effective date” below and, where appropriate, notify you through the service.

Effective date: 19 February 2026