Privacy Policy

Information we collect

Depending on how you use the service, we may collect:

• Your account email address and authentication details.
• Course progress, completed sections, checkpoint results and grades.
• Profile preferences, including learning preferences and accessibility settings.
• Purchase and access status. Complete payment-card details are not stored by Prompt Psychology.
• Basic technical and usage information needed to operate, secure and understand use of the website.
• Anonymous or pseudonymous page-view and session information used for basic site analytics.

Why we use this information

• Create and maintain your account.
• Provide course access and save learning progress.
• Record grades and course completion.
• Process and verify purchases.
• Provide support and resolve account or access problems.
• Maintain the security and reliability of the service.
• Understand how the public website and course are being used.

Legal basis

Where UK data protection law applies, our main legal bases are:

• Contract: where processing is necessary to provide an account, course access or a purchase you have requested.
• Legitimate interests: to operate, secure, maintain and improve Prompt Psychology, provided those interests do not override your rights.
• Legal obligation: where records must be retained for accounting, tax, fraud prevention or other legal requirements.
• Consent: where consent is required for any optional feature or non-essential tracking introduced in future.

Cookies and local storage

Prompt Psychology may use essential cookies or browser storage for authentication, session handling, interface preferences, saved course state and anonymous analytics identifiers. These technologies are used to make the service function correctly rather than for third-party advertising.

Stripe may use its own cookies or similar technologies when you visit Stripe-hosted payment pages.

Service providers

Prompt Psychology relies on specialist providers to operate the service, including:

• Vercel for website hosting and delivery.
• Neon for database and authentication infrastructure.
• Stripe for payment processing.

These providers process information under their own security and privacy arrangements. Data may be processed outside the United Kingdom where the provider uses appropriate legal safeguards.

Retention

Account, profile and learning information is retained while your account remains active and for a reasonable period afterwards where required for support, recovery, security or legal purposes.

Purchase and accounting records may be retained for up to six years where required for tax, accounting or legal purposes. Data that is no longer reasonably required will be deleted or anonymised where practicable.

Your rights

Depending on the circumstances, you may have the right to request access, correction, deletion, restriction or portability of your personal information, object to certain processing, withdraw consent where processing depends on consent, and complain to the UK Information Commissioner's Office.

Some information may need to be retained where there is a legal requirement to do so.

Contact

For privacy requests or questions, contact [CONTACT EMAIL].

Data controller: Damian Gozzett, operator of Prompt Psychology.