How Soffy Academy uses your information
We use a small amount of information to take payment, remember your learning, and provide support.
Who is responsible for your information
SOFFY ACADEMY LTD is the data controller. It is registered in England and Wales, company number 16827737. Registered office, business address and complaints address: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE. For privacy questions or requests, email support@soffyacademy.co.uk.
Privacy notice version: 2026-09-02-draft-2 — not yet effective.
What we use
- Your email and account identifier for passwordless access and recovery.
- Your confirmation that you currently live in the United Kingdom for the UK-only launch.
- SumUp payment references, purchase and refund status to provide or remove paid access.
- Your course progress and completion to save your place and provide a certificate.
- If you create a Completion Certificate, the name you choose to print, the certificate identifier and issue date, and its email delivery status.
- Support messages and your separate marketing choice.
We never collect your ChatGPT prompts or inspect your activity inside the separate ChatGPT app.
Information needed to provide the course
We need your email and confirmation that you currently live in the United Kingdom to process and confirm a purchase, create your Learner Account, and send secure access links during this UK-only launch. SumUp needs the payment information required by its checkout. If you do not provide that information, we cannot take payment or give you paid access. Your certificate name is optional unless you choose to create a certificate. Marketing consent is always optional.
Why and where it is processed
| Information | Why we use it | Legal basis |
|---|---|---|
| Account and learning records | Provide your account, save your place, unlock paid levels and issue your certificate. | Contract. |
| Purchase, UK-residence declaration and refund records | Apply the UK-only launch rule, verify payment, provide or remove paid access, handle refunds and keep required financial records. | Contract and legal obligation. |
| Support messages | Answer questions, resolve complaints and administer the Money-Back Guarantee. | Contract and legitimate interests. |
| Security and technical logs | Keep the service secure, prevent fraud or misuse and diagnose failures. | Legitimate interests. |
| Course measurement | Count anonymous course milestones in daily totals so we can understand and improve the learning journey. | Legitimate interests. |
| Marketing contact details and preferences | Send optional updates you have chosen to receive and remember your choice. | Consent. |
Our legitimate interests are keeping the service secure, preventing fraud or misuse, answering or resolving enquiries, and understanding and improving the learning journey. We use them only where your rights and interests do not override ours.
SumUp handles payment details, Supabase provides accounts and course records, Resend delivers Course Emails, and Vercel hosts the website. We do not store your payment card number.
We are completing a provider-by-provider check of processing locations and transfer safeguards before publishing this notice. The effective version will name the safeguards that actually apply. Email support@soffyacademy.co.uk for information about, or a copy of, the relevant safeguard once this notice is published.
Cookies and storage
Essential account and checkout cookies keep you signed in, protect payment returns and help keep the service secure. Your phone or browser also stores course progress so the Free Preview can remember your place. These are needed to provide the features you request.
Course measurement counts a small set of milestones as anonymous daily totals so we can improve the course. It does not record your email, ChatGPT prompts, lesson answers or activity inside ChatGPT. A temporary 24-hour cookie and your current browser tab prevent the same milestone being counted repeatedly; neither is used for advertising or cross-site tracking.
To protect the measurement endpoint from misuse, we keep a short-lived opaque network rate-limit key rather than a raw IP address. It expires after 10 minutes and is removed automatically shortly afterwards by a scheduled cleanup.
You can object free of charge by turning browser course measurement off below. Your choice applies to this browser and does not affect course access, progress, payment or support. A completed purchase may still be included in an anonymous daily total because that count comes from the purchase record required to provide access and is not linked to browser measurement.
Course measurement is on.
How long we keep it
- Purchase, refund and related accounting records are kept for six years from the end of the company financial year they relate to, or longer where the law requires it.
- Your Learner Account, course progress and certificate records are kept while your course access remains active. You can ask us to delete eligible information, but some purchase and refund records may still need to be retained.
- Support messages are normally kept for two years after the issue is resolved.
- Security logs are normally kept for 12 months.
- Your marketing choice is kept until you withdraw it. After withdrawal, we keep only the minimal suppression record needed to prevent further marketing.
Your choices and rights
You can ask for access to your data, corrections, deletion or restriction where applicable, portability where applicable, or object to some uses. Email support@soffyacademy.co.uk. You can also complain to the UK Information Commissioner’s Office.
Change your marketing choice without affecting course access or essential Course Emails. Withdrawing consent does not affect processing carried out lawfully before withdrawal.
Your right to object
You can object to processing based on our legitimate interests by emailing support@soffyacademy.co.uk. You can also use the free course-measurement control on this page. We will consider an objection under data protection law. Direct marketing will stop when you opt out.
Data protection complaints
Email support@soffyacademy.co.uk with “Data protection complaint” in the subject line. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed where appropriate, and tell you the outcome. You may also complain to the Information Commissioner’s Office.