Privacy Policy

Last updated: 17 September 2026

1. Who We Are

CySafe is a trading name of NXTL Ltd, registered in Scotland (Company No. SC876720). We are the data controller for personal data collected through this Service. You can reach us at contact@cysafe.online.

2. What Data We Collect

We collect the following personal data when you use the Service:

  • Account data: name, email address, password (hashed)
  • Purchase data: billing details, transaction history (payment card details are handled by Stripe and never stored by us)
  • Usage data: course progress, completion records, login timestamps
  • Technical data: IP address, browser type, cookies (see our Cookie Policy)

3. How We Use Your Data

We use your personal data to:

  • Provide and manage your access to purchased courses
  • Process payments securely via Stripe
  • Send transactional emails (receipts, password resets)
  • Maintain the security and performance of the Service
  • Comply with our legal obligations

4. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR:

  • Contract: to deliver the services you have purchased
  • Legitimate interests: to maintain security and improve the Service
  • Legal obligation: to comply with applicable law
  • Consent: for non-essential cookies (where applicable)

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe Inc. — payment processing
  • Our hosting provider — server infrastructure
  • Law enforcement or regulatory bodies where required by law

6. Data Retention

We retain your account data for as long as your account is active, plus 7 years for financial records as required by law. You may request deletion of your account at any time (subject to legal retention obligations).

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request erasure of your data
  • Object to or restrict processing
  • Data portability
  • Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact us at contact@cysafe.online.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact

For privacy enquiries, contact us at contact@cysafe.online.