Privacy notice

Who controls your data

Pheon Agency Ltd is the data controller for Academy customer and account information. Contact us at help@pheonagency.co.uk.

Information we collect

Depending on how you use the Academy, we collect:

• your name and email address
• account, login and password-reset information
• Stripe Checkout, purchase and payment reference information
• course progress, quiz attempts and results
• protected download activity
• support or contact messages
• technical, security and audit logs

How and why we use it

We use account and purchase information because it is necessary to deliver our contract with you: authenticating your account, providing the purchased course, retaining progress, making protected downloads available, administering payment and sending transactional messages.

We use proportionate technical, security, fraud-prevention and service-administration records for our legitimate interests in protecting and operating the Academy. We retain records needed for tax, accounting or other legal duties under legal obligation. We rely on consent only where it is genuinely required, such as optional marketing.

Payments

Stripe processes card and payment details as an independent payment service provider. Pheon does not receive or store your full card number, card security code or other complete card details. We retain the payment and Checkout references needed to administer access and answer purchase queries.

Who receives information

We share only what is reasonably necessary with:

• Hetzner, which hosts the Academy application and database
• Stripe, which provides payment processing and hosted checkout
• IONOS, which provides transactional email
• professional advisers, regulators, authorities or other service providers where legitimately required

Retention

We keep personal information only for as long as reasonably required for the purpose described, to provide an active account, resolve disputes, protect the service, and meet legal or accounting obligations. We review records and delete or anonymise them when they are no longer needed. Different categories may therefore be retained for different periods.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict your information, receive portable information, or object to certain processing. Where processing depends on consent, you can withdraw that consent without affecting earlier lawful processing. These rights are not absolute in every case.

Email help@pheonagency.co.uk to make a request. You can also complain to the Information Commissioner's Office. We encourage you to contact us first so we can try to resolve the issue.