Privacy Policy
Last updated: 25 June 2026
1. Introduction
Welcome to EduCan ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store and share your personal data when you use our platform at educan.io (the "Platform"), whether you are an educator (a subscriber to our services) or a learner (a student purchasing and accessing courses through the Platform). Please read this policy carefully. If you have any questions, contact us at contact@cyberkiln.com.
2. Who We Are
CyberKiln is the data controller responsible for your personal data. For the purposes of UK GDPR, our contact details are: Email: contact@cyberkiln.com
3. What Data We Collect
We collect and process the following categories of personal data:
3.1 Account and Registration Data
- Full name
- Email address
- Password (stored in encrypted form)
- Account type (educator or learner)
3.2 Profile Data
- Profile photo (if provided)
- Biography or professional description (educators)
- Organisation or business name (if provided)
3.3 Transaction and Payment Data
- Purchase history and order details
- Subscription plan and billing cycle
- Payment confirmation records
We do not store your card details. All payment processing is handled securely by Stripe. Please refer to [Stripe's Privacy Policy](https://stripe.com/gb/privacy) for details of how your payment data is handled.
3.4 Course and Learning Data
- Courses created (educators)
- Courses purchased and enrolled in (learners)
- Course progress and completion data
- Content uploaded to the Platform (educators)
3.5 Communications Data
- Emails and messages sent to us
- Support requests and correspondence
3.6 Technical and Usage Data - IP address - Browser type and version - Device type and operating system - Pages visited and time spent on the Platform - Referral source - Cookie identifiers (see Section 8)
4. How We Collect Your Data
We collect personal data in the following ways:
Directly from you** — when you register, set up your profile, purchase a course, upload content, or contact us
Automatically** — through cookies and similar technologies when you use the Platform
From third parties** — from Stripe when a payment transaction is completed
5. How We Use Your Data
We use your personal data for the following purposes and on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract |
| Processing course purchases and subscriptions | Contract |
| Delivering course content to learners | Contract |
| Processing payments via Stripe | Contract |
| Sending transactional emails (receipts, account updates) | Contract |
| Providing customer support | Contract |
| Improving and developing the Platform | Legitimate interests |
| Monitoring Platform security and preventing fraud | Legitimate interests |
| Sending marketing emails (with opt-out) | Legitimate interests / Consent |
| Complying with legal obligations | Legal obligation |
| Analytics and performance monitoring | Legitimate interests / Consent (cookies) |
6. Marketing Communications
We may send you emails about new features, updates or offers relevant to EduCan. You can opt out at any time by:
Clicking the **unsubscribe** link in any marketing email
Emailing us at contact@cyberkiln.com
We will never sell your data to third parties for marketing purposes.
7. Who We Share Your Data With
We only share your personal data with trusted third parties where necessary:
Stripe — to process payments securely
Amazon Web Services (AWS) — for cloud hosting and file storage
Email service providers — to send transactional and marketing emails
Analytics providers — to understand how the Platform is used (see Section 8)
Legal authorities — where required to do so by law
All third-party providers are required to handle your data securely and in accordance with UK GDPR.
We do not sell, rent or trade your personal data to any third party.
8. Cookies and Analytics
We use cookies and similar tracking technologies to operate and improve the Platform.
Types of cookies we use:
| Cookie Type | Purpose |
|---|---|
| Essential cookies | Required for the Platform to function (login sessions, security) |
| Analytics cookies | Help us understand how users interact with the Platform |
| Preference cookies | Remember your settings and preferences |
We use analytics tools such as Google Analytics to collect anonymised usage data. This may involve transferring data outside the UK. Where this occurs, we ensure appropriate safeguards are in place.
You can manage your cookie preferences at any time via our cookie banner or your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform.
9. Data Retention
We retain your personal data only for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Account data | For the duration of your account, plus 2 years after closure |
| Transaction records | 7 years (legal and tax obligations) |
| Course content (educator uploads) | For the duration of your subscription |
| Analytics data | Up to 26 months |
| Support correspondence | 3 years |
When data is no longer required, we delete or anonymise it securely.
10. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures including:
Encrypted data storage and transmission (SSL/TLS)
Secure password hashing
Access controls limiting who can view personal data
Regular security reviews
While we take every precaution, no method of transmission over the internet is 100% secure. If you suspect any unauthorised access to your account, please contact us immediately.
11. International Data Transfers
Some of our third-party providers (including AWS and Google Analytics) may process data outside the United Kingdom. Where data is transferred internationally, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions.
12. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of access — request a copy of the data we hold about you
Right to rectification — ask us to correct inaccurate or incomplete data
Right to erasure — ask us to delete your data in certain circumstances
Right to restrict processing — ask us to limit how we use your data
Right to data portability — request your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, please contact us at contact@cyberkiln.com. We will respond within 30 days.
13. Right to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the **Information Commissioner's Office (ICO)**:
Website:[ico.org.uk](https://ico.org.uk)
We would, however, welcome the opportunity to address your concerns directly before you contact the ICO — please reach out to us first at contact@cyberkiln.com.
14. Children's Privacy
EduCan is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without parental consent, please contact us and we will delete it promptly.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or by displaying a prominent notice on the Platform. The date at the top of this policy indicates when it was last updated.
16. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your data, please contact us:
Email: contact@cyberkiln.com
*This Privacy Policy was last reviewed and updated on 25 June 2026.*
