Last updated: 13/11/2024
1. Introduction
Lena Learning (“we”, “us”, “our”) is committed to protecting the privacy of our users. This Privacy Policy outlines how we collect, use, and safeguard your personal information in compliance with UK and GDPR standards.
2. Information We Collect
- User Data: Email address, IP address, Stripe Customer ID, and sign-in preferences.
- Child Profiles: First name and school year (used to determine key stage).
- Payment Data: Payment details are handled directly by Stripe, which manages your name, billing address, and financial information.
3. Purpose of Data Collection
- Email Address: Used for sign-in, account communications, and future marketing (opt-in).
- IP Address: Used to monitor for suspicious activity.
- Stripe Customer ID: Used to manage subscriptions and payments.
- Child Data: The child’s first name personalizes worksheets, and the school year aligns content to the relevant educational stage.
4. Data Sharing
Third-Party Sharing: We share data with Stripe for payment processing. Users may choose to sign in with Google through OAuth, which will securely link your Google account to our platform.
No Further Data Sharing: We do not sell or share your information with third parties beyond the purposes described here.
5. Cookies
Essential Cookies: We use cookies that are essential for the functionality of our platform, such as maintaining your session and ensuring security.
6. Data Security
Security Measures: We take appropriate technical measures to secure personal data, including encryption for data both in transit and at rest. Payment information and sensitive data are managed by Stripe, a PCI-compliant processor.
7. Retention and Deletion
- Account Data: We retain user data for as long as you hold an active subscription. Upon cancellation, your data will be anonymized and any personal data deleted as required by law.
- Worksheet Data: Generated worksheets and associated data will be anonymized upon account deletion.
8. User Rights (GDPR Compliance)
You have rights regarding your personal data under GDPR, including:
- Access: You may request a copy of the data we hold.
- Rectification: You may request corrections to inaccurate data.
- Deletion: You may request data deletion, which will result in the termination of your account.
- Portability: You may request your data in a structured, commonly-used format.
9. Updates to Privacy Policy
We may update this Privacy Policy as our practices evolve or as required by law. Changes will be communicated through your account email or on our platform.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our support team at [email protected].