Privacy Policy

1. Who we are

Financial Learning Academy is an educational platform providing UK financial education to personal finance learners, sole traders, and micro limited company directors. We are not a regulated financial advice firm, a bank, or a tax filing service.

2. What data we collect

We collect only the minimum data needed to provide the service: your email address (for login), a display name (shown on certificates), your learning progress and assessment results, and your privacy preferences. We do not collect bank account details, National Insurance numbers, real tax data, or any financial information about your actual personal or business finances.

3. How we use your data

Your data is used to: authenticate your account, track your learning progress across devices, issue and verify certificates, provide aggregate (anonymised) learning analytics, and comply with UK GDPR obligations. We do not sell or share your data with third parties for marketing purposes.

4. Your rights under UK GDPR

You have the right to: access your data (request a copy), rectify inaccurate data, erase your data (right to be forgotten), restrict processing, and data portability. You can exercise these rights from the Settings page or by contacting us. We respond to requests within 30 days.

5. Data retention

We retain your learning progress and certificates for as long as your account is active. If you request account deletion, we will permanently remove your data within 30 days. Certificate verification records may be retained in anonymised form to maintain the integrity of the verification system.

6. Security

All data is encrypted in transit. Authentication uses secure password hashing. Row-level security policies enforce that you can only access your own data. Admin actions are logged in an audit trail. Service role keys are never exposed in frontend code.

7. Certificate verification

Public certificate verification only shows the certificate ID, module title, status, and (only if you have opted in) your display name. It does not expose your email address or any other personal information. It is not possible to enumerate users through the verification system.

8. Contact

For privacy questions or data requests, use the Settings page or contact us through the platform.