Privacy Policy

1. Controller

Weekend Academy, [Registered office address], is the data controller. ICO registration: [ICO registration number]. Contact: [support@your-domain.com].

2. What we collect and why

• Account data (name, email, hashed password) — to provide the service. Legal basis: contract.
• Purchase records (product, dates, order reference) — to provide access and keep accounts. Legal basis: contract; legal obligation (tax records). Card details are handled by Lemon Squeezy and never reach us.
• Usage data (questions viewed, answers, scores, timestamps) — to show your progress. Legal basis: contract.
• Security data (IP address, device identifier, browser type, access patterns) — to protect our content and detect account sharing or automated access. Legal basis: legitimate interests.

3. Who we share data with

Supabase (database and authentication hosting), Vercel (web hosting), and Lemon Squeezy (payments and VAT). Each acts under a data-processing agreement. We do not sell personal data and do not use advertising trackers.

4. International transfers

Some processors store data outside the UK/EEA under standard contractual clauses or an adequacy decision.

5. Retention

Account and usage data are kept while your account is open and for 12 months afterwards; purchase records are kept for 6 years for tax purposes; security logs for 12 months.

6. Your rights

You may ask for access, correction, deletion, restriction or portability of your data, and may object to processing based on legitimate interests, by emailing [support@your-domain.com]. You may complain to the Information Commissioner's Office (ico.org.uk) or, if you are in Ireland, the Data Protection Commission.

7. Cookies

We use only strictly necessary cookies (login session). No consent banner is required for these.