Privacy policy

Last updated : 23 August 2026

This document says what data we process, why, who it is shared with and how long it is kept. It covers the sales page as well as the learning area.

Data controller

MyDigipal Ltd, 26 Hightrees House, Nightingale Lane, London SW12 8AQ, United Kingdom, registered under number 13520068.

For any question about your data: academy@mydigipal.com.

The data we process

Identity and contact: first and last name, email address, company and VAT number where given, country of residence.

Order: tier purchased, amount, currency, date, transaction reference. Card details never reach us: they are handled by Revolut.

Account and learning: lessons completed, quiz answers, notes written in the notebook, exercises submitted, saved prompts, declared sector and role, language and display settings, points and day streak.

Technical usage: pages viewed, device, browser, IP address truncated by our measurement tools, sign-in dates.

Correspondence: emails you send us and our replies.

Why, and on what basis

Performing the contract: creating and running your account, giving access to the purchased content, recording your progress, reviewing your exercises, writing to you about your course.

Meeting a legal obligation: issuing and keeping invoices, reporting VAT.

Legitimate interest: securing the service, measuring audience in aggregate, improving the content based on what is actually read and done.

Consent: the newsletter and commercial messages, the streak reminder emails, and the measurement and advertising cookies. Consent can be withdrawn at any time, with no effect on access to the course.

Who else has access

We do not sell or rent any data. We use technical providers acting on our behalf:

Google Cloud Platform and Firebase (application hosting, authentication, database), region us-central1, United States.

Revolut (card payment processing), United Kingdom and European Union.

Bunny.net (video delivery), European Union.

Google Tag Manager and Google Analytics (audience measurement), subject to your consent.

Google Workspace (service emails) and Zoho Books (invoicing).

Anthropic (the Academy assistant), only for accounts where that function is enabled, and only on the content of the question asked and the lessons concerned.

Some of these providers process data in the United States. Those transfers rely on the European Commission’s standard contractual clauses and, where applicable, on the EU-US Data Privacy Framework.

How long

Account and progress: for as long as the account exists. An account can be deleted on request, and it is then deleted permanently, progress included.

Invoices and accounting records: six years, as UK law requires.

Audience measurement: fourteen months at most.

Emails: three years after the last exchange.

Your rights

You may ask for access to your data, its correction or erasure, the restriction of its processing, its portability, and you may object to processing based on our legitimate interest. Write to academy@mydigipal.com: we reply within one month.

You may also complain to a supervisory authority: the ICO in the United Kingdom (ico.org.uk), the CNIL in France (cnil.fr), or the authority of your country of residence.

Cookies

Strictly necessary cookies (sign-in session, chosen language, security) are set without consent: without them the service does not work.

Measurement and advertising cookies are only set after you agree, which is asked on your first visit and can be changed at any time from the banner. Refusing changes nothing about your access to the content.

The other documents