Privacy Notice

Branxl Ltd (“we”, “our”, “us”) is committed to protecting your personal data. This notice explains what data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR).

1. Who we are

Branxl Ltd is the data controller for personal data collected through Branxl Academy. Contact: contact@branxlacademy.com.

2. Data we collect

We collect the following categories of personal data:

• Identity data: name, date of birth
• Contact data: email address, phone number, postal address
• Payment data: billing information (processed by Stripe — we do not store card details)
• Technical data: IP address, browser type, device identifiers
• Usage data: pages visited, session attendance, platform interactions
• Communications: messages sent via the platform or to our support team

3. How we use your data

We use your data to:

• Deliver and administer your programme enrolment
• Process payments and issue receipts
• Communicate cohort updates, session reminders, and support messages
• Improve our platform and services
• Comply with legal obligations
• Send marketing communications (only with your consent, opt-out available at any time)

4. Legal basis for processing

We process your data on the following legal bases: contract performance (to deliver your programme), legitimate interests (platform improvement, fraud prevention), legal obligation (tax and financial records), and consent (marketing communications).

5. Data sharing

We share your data with trusted third-party providers who help us deliver our services, including Supabase (database and authentication), Stripe (payment processing), Resend (email delivery), LiveKit (video sessions), and PostHog (analytics — EU servers only). We do not sell your data.

6. Data retention

We retain personal data for as long as necessary to fulfil the purposes described in this notice, or as required by law. Enrolled student records are retained for 7 years after course completion for legal and regulatory purposes.

7. Your rights

Under UK GDPR, you have the right to access, correct, delete, or restrict processing of your personal data. You also have the right to data portability and to withdraw consent at any time. To exercise your rights, contact us at contact@branxlacademy.com.

8. Cookies

We use essential cookies to maintain your session and preferences. We also use analytics cookies (PostHog) to understand how the platform is used. You can manage cookie preferences in your browser settings.

9. Changes to this notice

We may update this privacy notice from time to time. We will notify enrolled students of material changes by email. The current version is always available at this page.

10. Complaints

If you have a concern about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.