1. Data Controller Information
Lessonvale (https://lessonvale.com) operates as the Data Controller responsible for your personal information. We operate in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
For any questions regarding your data or to exercise your statutory rights, email our Data Protection Lead at: [email protected].
2. What Personal Data We Collect
- Identity & Contact Data: Name and email address provided during checkout or support correspondence.
- Transaction Data: Date/time of purchase, order amount, currency, and transaction reference numbers. (Credit/debit card numbers are handled exclusively by PCI-compliant merchant processors and are never stored on Lessonvale servers).
- Technical Data: IP address, device type, and anonymised analytics to safeguard site security and ensure correct digital product delivery.
3. Lawful Bases for Processing
Under Article 6 of the UK GDPR, we process personal information under the following legal bases:
- Contractual Performance: To process your order, deliver your digital download links, and service our 30-day refund guarantee.
- Legal Obligation: To maintain mandatory corporate accounting and tax records for HMRC (retained for 6 years).
- Legitimate Interests: To detect fraud, defend server integrity, and ensure smooth digital delivery.
4. No Sale of Personal Data
We do not sell, rent, lease, or trade your personal data to any marketing brokers or third parties. We share data strictly with operational processors bound by statutory confidentiality agreements (cloud hosting, payment gateways, and transactional email deliverability systems).
5. Your Statutory Rights Under UK GDPR
You have the right to:
- Request access to your personal data held by us.
- Request rectification of any inaccurate information.
- Request erasure of your personal data ('right to be forgotten'), subject to statutory accounting retention rules.
- Object to or restrict the processing of your data.
To exercise any of these rights, email [email protected]. You also hold the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.