1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

The personal information we collect depends on the context of your interactions with us and may include names and email addresses. All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

We do not process sensitive personal information.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, approximate location, and information about how and when you use the Services.

We use this information primarily to maintain the security and operation of our Services and for internal operational reporting. Our current use of cookies and similar technologies is explained in our Cookie Policy.

• Log and usage data: service-related diagnostic, usage, and performance information, such as IP address, browser type, device information, pages and files viewed, timestamps, searches, feature use, system activity, and error reports.
• Location data: location information inferred from your device or IP address, subject to your device and browser settings.

2. How do we process your information?

We process personal information to provide, improve, and administer our Services, communicate with you, support security and fraud prevention, comply with law, and for other purposes with your consent. We may also process information where necessary to save or protect an individual's vital interests, such as to prevent harm.

3. What legal bases do we rely on to process your personal information?

We only process personal information when we believe it is necessary and we have a valid legal basis to do so under applicable law. If you are located in the EU or UK, we may rely on the following legal bases:

• Consent: where you have given permission to use your information for a specific purpose. You can withdraw consent at any time.
• Legal obligations: where processing is necessary to comply with law, cooperate with a regulator or law enforcement body, or exercise or defend legal rights.
• Vital interests: where processing is necessary to protect your vital interests or those of a third party.

We are generally the data controller under European data protection laws for the personal information described in this notice. This notice does not apply where we process personal information as a data processor on behalf of a customer. In those circumstances, that customer is the data controller and we process information according to its instructions and our agreement with it.

4. When and with whom do we share your personal information?

We may share information in the situations described below and with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to the information to do that work.

Our agreements with third parties are designed to safeguard your personal information. Third parties may only handle information according to our instructions, must protect information held on our behalf, and must retain it only for the period we instruct.

We may also share or transfer information in connection with, or during negotiations for, a merger, sale of company assets, financing, or acquisition of all or part of our business.

5. Do we use cookies and other tracking technologies?

We use Vercel Web Analytics to collect anonymous, aggregated information about website traffic and performance. It does not use cookies or identify visitors across different websites. We use these insights to understand which pages are useful and to improve the Website. We do not use advertising, personalisation, or behavioural profiling technology. The third-party Brevo booking calendar is loaded only after you choose to allow it. For current details and browser controls, read our Cookie Policy.

6. How long do we keep your information?

We keep personal information for as long as necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law, such as for tax, accounting, or other legal requirements.

When we have no ongoing legitimate business need to process personal information, we will delete or anonymise it. If this is not immediately possible, for example because information is held in backup archives, we will securely store and isolate it from further processing until deletion is possible.

7. How do we keep your information safe?

We have implemented appropriate and reasonable technical and organisational measures designed to protect personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be fully secure.

Although we do our best to protect personal information, transmission to and from the Services is at your own risk. You should access the Services only within a secure environment.

8. Do we collect information from minors?

We do not knowingly collect data from or market to children under 18 years of age. If we learn that personal information from a person under 18 has been collected, we will take reasonable measures to delete it promptly. If you become aware of any such information, contact us at info@hackeracademy.uk.

9. What are your privacy rights?

In regions including the EEA and UK, applicable data protection laws may give you rights to request access to and a copy of your personal information, request rectification or erasure, restrict processing, request data portability, or object to processing in certain circumstances.

We will consider and act on requests according to applicable data protection laws. If you believe we are processing your information unlawfully, you may also complain to your local data protection supervisory authority. UK residents may contact the Information Commissioner's Office.

Withdrawing consent

Where we rely on consent, you may withdraw it at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal or processing based on other lawful grounds.

Marketing and promotional communications

You can unsubscribe from marketing communications using the unsubscribe link in our emails or by contacting us. We may still send service-related messages, respond to service requests, and communicate for other non-marketing purposes.

10. Controls for Do-Not-Track features

Some browsers, operating systems, and applications include a Do-Not-Track setting. No uniform standard for recognising and implementing these signals has been finalised, so we do not currently respond to them. If a standard is adopted that we must follow, we will describe that practice in an updated notice.

11. Do California residents have specific privacy rights?

California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes and the names and addresses of those third parties. Requests should be submitted using the contact information below.

California residents under 18 with a registered account may request removal of data they publicly post on the Services. Some information may remain in backups or other systems even after it is no longer publicly displayed.

12. Do we make updates to this notice?

We may update this privacy notice from time to time to stay compliant with relevant laws. The updated version will show a revised date and will be effective when it becomes accessible. We may notify you of material changes by posting a prominent notice or sending a direct notification.

13. How can you contact us about this notice?

Hacker Academy Ltd is the data controller for personal information covered by this notice. If you have questions or comments, contact us by email or post:

14. How can you review, update, or delete the data we collect from you?

Depending on the laws that apply to you, you may have the right to request access to the personal information we collect, ask us to change it, or ask us to delete it. Submit a request by emailing info@hackeracademy.uk or through our contact page.