Registered name: Sociuseducation Ltd

We are the controller of your personal data. For more information on controllers and their responsibilities please see the ICO's guidance on data protection principles, definitions, and key terms.

This privacy notice tells you what to expect us to do with your personal information.
Contact details

Email
jack@socius.ws

Address
Flat 30, Lavender Court, Leatherhead, KT22 8LE
What information we collect, use, and why

We collect or use the following information for the operation of customer accounts and guarantees:

Payment details (including card or bank information for transfers and direct debits)
Account information, including registration details
Information used for security purposes


We collect or use the following information for service updates or marketing purposes:

Website and app user journey information


Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
Your right to withdraw consent - When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.


If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
The lawful bases we rely on

Under UK data protection law, we must have a lawful basis for using your personal information. The lawful bases we rely on are:

Contract: where we need to use your personal information to provide the service you have asked for, create and manage your account, authenticate you, process payments, and communicate with you about the operation of the service.
Legal obligation: where we need to keep or disclose personal information to comply with laws and regulations, including accounting, taxation, fraud prevention, and responding to lawful requests from authorities.
Legitimate interests: where it is necessary for our legitimate interests in operating, securing, improving, and supporting our website and app, provided those interests are not overridden by your rights and freedoms. This includes activities such as maintaining the security of our systems, preventing misuse, debugging, monitoring performance, responding to support enquiries, and sending essential service-related communications.
Consent: where the law requires consent, or where we choose to rely on consent. This may include non-essential cookies or similar technologies, certain analytics, and direct marketing communications where applicable. Where we rely on consent, you can withdraw it at any time.


What we use personal information for and our lawful basis

To create and manage your account, let you sign in, and provide access to the service: Contract
To process payments, billing, and related transaction records: Contract, and Legal obligation where we must keep records for tax, accounting, or regulatory purposes
To send essential service messages, such as account, security, or transactional communications: Contract or Legitimate interests
To keep our website and app secure, detect fraud or abuse, troubleshoot issues, and maintain logs: Legitimate interests, and Legal obligation where applicable
To provide customer support and respond to enquiries: Legitimate interests, or Contract where the support is part of providing the service you asked for
To allow you to sign in using Google or Facebook where you choose to do so: Contract, and Consent to the extent you choose to connect and use that login method
To understand how people use our website and app, improve features, and monitor performance: Legitimate interests for strictly necessary internal measurement and service monitoring, and Consent where analytics or similar technologies require it
To send marketing or promotional communications: Consent, unless another lawful basis is available under applicable law


Your rights

Your rights may vary depending on the lawful basis we rely on. For example, where we rely on legitimate interests, you have the right to object to that processing in certain circumstances. Where we rely on consent, you can withdraw your consent at any time. Where we rely on contract, you may have the right to data portability in certain cases.
Where we get personal information from

We get personal information:

directly from you
automatically from your use of our website and app, including technical and usage information
from third-party providers you choose to use to sign in or make payments, such as Google, Facebook, and Stripe


How long we keep information

We keep personal information only for as long as necessary for the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

In general:

Account information: for as long as your account is active and for up to 6 years after closure
Payment and transaction records: for up to 6 years
Security logs and related records: for up to 12 months, unless we need to keep them longer to investigate incidents or comply with legal obligations
Support or service enquiries: for up to 24 months after the issue is resolved
Analytics and product usage data: for up to 24 months
Marketing preferences: until you unsubscribe, and for a limited period afterwards to keep a suppression record so we respect your choice


Who we share information with

We share personal information with service providers that help us operate our website and app.
Data processors

Stripe, Inc. - payment processing and related billing/taxation services
Hetzner - cloud hosting and server infrastructure
Google - email services, authentication, and analytics where used
Meta / Facebook - authentication where you choose to sign in with Facebook
PostHog - product analytics, monitoring, and diagnostics


We may also share personal information where necessary to comply with legal obligations, enforce our terms, or protect our rights, users, or services.
International transfers

Some of our service providers may process personal information outside the UK. Where personal information is transferred outside the UK, we ensure that appropriate safeguards are in place, such as transfers to countries that benefit from UK adequacy regulations, or contracts incorporating the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses where required. You can contact us using the details in this notice if you would like more information about the safeguards we use.
Cookies and similar technologies

We use cookies and similar technologies to operate our website and app, keep users signed in, remember preferences, understand how people use our services, and improve performance. Where required, we ask for consent before using non-essential cookies or similar technologies. You can manage cookies through your browser settings and, where available, our cookie preferences tool.
Children’s information

Our service is intended for educational use and may be accessed by teenagers. We aim to present privacy information in clear and accessible language. If our service is likely to be accessed by children under 18, we will take this into account in how we design the service and how we use personal information.
How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated: 20 March 2026