EdquisEdquis

Privacy Policy

Last updated: 1 August 2026

1. Who We Are

Edquis ("we", "our", "us") operates the Edquis learning platform. We are the data controller for personal data collected through the platform. For GDPR purposes, our registered address is in England and Wales.

2. Data We Collect

  • Account data: name, email address, password (hashed), role.
  • Payment data: transaction amounts and dates. We do not store card details — these are handled by Stripe.
  • Learning data: course progress, lecture completion, certificates earned.
  • Usage data: pages visited, time spent, device type, IP address.
  • Communications: messages you send to our support team.

3. How We Use Your Data

  • To provide and improve the platform and your learning experience.
  • To process payments and issue refunds.
  • To send transactional emails (purchase confirmations, certificates, password resets).
  • To comply with legal obligations.

4. Legal Basis (GDPR)

We process your data on the basis of contract performance (to deliver the service you purchased), legitimate interests (platform security and improvement), and legal compliance. For marketing communications, we rely on your explicit consent.

5. Data Sharing

We share data only with trusted third-party processors:

  • Stripe — payment processing (PCI DSS compliant).
  • Cloudinary — video and image hosting.
  • Resend — transactional email delivery.
  • Neon / PostgreSQL — database hosting.

We never sell your personal data to third parties.

6. Your Rights

Under GDPR and UK data protection law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Object to processing or request restriction.
  • Data portability — receive your data in a machine-readable format.

To exercise any of these rights, contact privacy@suftnet.com.

7. Data Retention

We retain account data for the duration of your account plus 3 years for legal and financial compliance. Payment records are retained for 7 years as required by HMRC. You may request deletion at any time for non-financial data.

8. Cookies

We use essential cookies for authentication and session management. See our Cookie Policy for details.

9. Contact & Complaints

Contact our Data Protection Officer at privacy@suftnet.com. You also have the right to lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk.