EXOT / INFORMATION
Privacy Policy
Last updated: 2026-10-08
1. Controller and contact
The controller of personal data collected through this website is , , registration number . Privacy requests: .
2. Data we process
When you register, we process your email address, display name, password hash and account verification status. When you buy a course, we process your purchased course, order reference, payment amount, currency, transaction status, purchase dates and entitlement. We also process basic security information such as IP addresses and request metadata in server logs, and the last opened lesson needed to show your place in the course.
3. Purposes and legal bases
We process account and purchase details to perform the contract; payment and transaction records where necessary for legal obligations; and security logs to protect the service and prevent abuse, based on legitimate interests where lawful. Where consent is required for optional processing, we will request it separately before enabling that processing.
4. Recipients and international transfers
Relevant data may be processed by our website hosting provider, email delivery service, WayForPay payment services and Google where you actively choose Google sign-in. Their processing and locations depend on the services configured by the operator. We do not sell personal data. Where applicable law requires safeguards for transfers outside your country, we will apply the required safeguards.
5. Retention
Account data are kept while the account remains active and for a reasonable period needed to address disputes or legal claims. Payment and accounting records are retained for periods required by applicable law. Security logs are kept only as long as needed for security and operations. To request applicable retention details or deletion, contact .
6. Cookies
We use strictly necessary session and security cookies. We do not enable advertising, analytics or social-tracking cookies by default. Read the Cookie Policy for details.
7. Your rights
Subject to the law that applies to you, you may request access to, correction or deletion of personal data, restriction of processing, portability, or object to certain processing. Where processing is based on consent, you may withdraw it. You may also have a right to complain to an appropriate data protection authority. Send requests to ; we may need to verify your identity.
8. Security
We use password hashing, HTTPS in production, access control, session protections and security monitoring. No online system can guarantee absolute security. Contact us if you have a privacy or security concern.
9. Changes
We may revise this policy as the platform and its service providers change. The updated version and effective date will be published here. Significant changes will be communicated where required by law.
Questions? Contact .