This Privacy Policy sets out how LexiPath UK Ltd ("we", "us", "our") collects, uses, stores and safeguards your personal data when you visit lexipath.co.uk. We are fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

LexiPath UK Ltd
Company No. 13456789 · VAT: GB 234 567 890
22 King's Cross Road, London, WC1X 9DS
Email: [email protected]
ICO Registration No. ZB234567

2. What data we collect

• Registration data: full name, email address, telephone number;
• Profile data: chosen language, current proficiency level, learning objectives;
• Technical data: IP address, browser type, operating system, pages visited, session timestamps;
• Payment data: processed securely by our third-party payment provider — we do not store card details.

3. Purposes of processing

• Providing access to our language learning platform and associated services;
• Creating, managing and maintaining your account;
• Personalising and adapting your learning experience;
• Processing payments and issuing invoices or receipts;
• Sending service notifications and marketing communications (with your consent);
• Delivering customer support and resolving queries;
• Improving and developing the quality of our platform;
• Meeting our legal and regulatory obligations under UK law.

4. Lawful bases for processing

• Contract — to deliver the educational services you have signed up for;
• Consent — for marketing communications (which you may withdraw at any time);
• Legitimate interests — to improve our platform, detect fraud and ensure platform security;
• Legal obligation — to comply with applicable UK legislation.

5. Sharing your data

We do not sell your personal data under any circumstances. We may share it with:

• Tutors — only to the extent necessary to deliver your scheduled lessons;
• Payment processors — Stripe and PayPal (both PCI-DSS compliant);
• IT and infrastructure providers — hosting, analytics and email services (bound by data processing agreements);
• Regulatory authorities — where required by law, regulation or valid court order.

6. Cookies

We use essential cookies (required for core platform functionality), analytics cookies (Google Analytics, Hotjar — to understand how the platform is used) and marketing cookies (activated only with your explicit consent). You can manage or withdraw consent via your browser settings or our cookie preference centre at any time.

7. Retention & security

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. We protect your data through TLS encryption, strict access controls and regular independent security audits. In the event of a data breach that carries a risk to your rights, we will notify both you and the ICO within the timeframes required by UK GDPR.

8. Your rights

Under UK GDPR you have the right to:

• Access a copy of your personal data (Subject Access Request);
• Rectify inaccurate or incomplete data;
• Request erasure of your data ("right to be forgotten");
• Restrict or object to certain types of processing;
• Receive your data in a portable format;
• Withdraw consent at any time without affecting prior processing;
• Lodge a complaint with the ICO at ico.org.uk.

To exercise any of these rights, please write to [email protected]. We will respond within 30 calendar days.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law or our data practices. We will notify you of significant changes by email or via a prominent notice on our website. Continued use of our services after notification constitutes your acceptance of the revised policy.

10. Contact

LexiPath UK Ltd
22 King's Cross Road, London, WC1X 9DS
Email: [email protected]
Freephone: 0800 987 6543