Privacy Policy

1. Who we are

Reskill.now ("we", "us", "our") operates the website at reskill.now. We are the data controller for personal data collected through our platform. If you have questions about this policy, contact us at privacy@reskill.now.

2. Data we collect

We collect the following categories of personal data:

• Account data: name, email address, and authentication tokens when you create an account or sign in via magic link.
• Assessment data: job role, experience level, and responses you provide when completing any assessments or applications.
• Payment data: if paid features are introduced in the future, billing details will be processed by Stripe. We do not and will not store full card numbers on our servers.
• Learning data: lesson progress, quiz results, and pathway enrolment status.
• Usage data: pages visited, features used, and interaction patterns collected via PostHog analytics.
• Communication data: email address for transactional and marketing emails sent via Resend.

3. How we use your data

We use your personal data to:

• Provide and maintain the Reskill.now platform and services.
• Authenticate you and manage your account.
• Process payments if paid features are introduced in the future.
• Deliver programme content and track your learning progress.
• Process your programme application and enrolment.
• Send transactional emails (account confirmations, application updates, learning progress).
• Send marketing emails if you have opted in (e.g., onboarding drip sequences).
• Improve the platform through analytics and usage insights.

4. Legal basis for processing (GDPR)

We process your data under the following legal bases:

• Contract: processing necessary to provide our services (account management, learning content delivery).
• Consent: marketing emails and non-essential analytics cookies. You can withdraw consent at any time.
• Legitimate interest: improving our platform, preventing fraud, and ensuring security.

5. Third-party services

We share data with the following third-party processors:

• Stripe (payments): will process payments if paid features are introduced. Currently no payment data is collected. See Stripe's Privacy Policy.
• PostHog (analytics): collects anonymised usage data to help us improve the platform. See PostHog's Privacy Policy.
• Resend (email): delivers transactional and marketing emails. See Resend's Privacy Policy.
• Anthropic (AI): powers AI coaching features. Conversation data may be processed by Anthropic's API. See Anthropic's Privacy Policy.
• Vercel (hosting): hosts the platform. See Vercel's Privacy Policy.

6. Cookies

We use the following cookies:

Essential cookies

Required for the site to function. These cannot be disabled.

Analytics cookies

Only set with your explicit consent via the cookie banner.

You can manage your cookie preferences at any time using the cookie consent banner, or by clearing cookies in your browser settings.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes, which are retained for 7 years).

8. Your rights

Under applicable data protection law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Restriction: request that we limit processing of your data.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: withdraw consent for marketing emails at any time via the unsubscribe link in any email.

To exercise any of these rights, email us at privacy@reskill.now. We will respond within 30 days.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), secure authentication (magic links, no passwords stored), and access controls. However, no method of transmission over the internet is 100% secure.

10. International data transfers

Some of our third-party processors (Stripe, Anthropic, Vercel) may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children's privacy

Our platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our platform. The "last updated" date at the top of this page indicates when the policy was last revised.

13. Contact and complaints

If you have questions or concerns about this policy or our data practices, contact us at privacy@reskill.now.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.