TeachUp
Log in

Legal

Privacy policy

Last updated 1 October 2026

NOTE Draft — this document is an outline of the disclosures TeachUp must make under the GDPR and is pending review by qualified legal counsel. It should be replaced with approved wording before launch.

  1. 1. Who controls your data

    The operating company acting as data controller under the GDPR, with its contact and DPO details.

  2. 2. What we collect

    Account details, purchase and billing records, course progress, assessment attempts, and technical/usage data.

  3. 3. Why we collect it

    The lawful basis for each purpose: performing your contract, legitimate interests, legal obligations, and consent.

  4. 4. Cookies and similar technologies

    Covered in detail in the cookie policy, including which categories require consent.

  5. 5. Who we share it with

    Payment processors, hosting and email providers, and analytics — each acting as a processor under contract.

  6. 6. International transfers

    Where data leaves the EEA and the safeguards relied on for those transfers.

  7. 7. How long we keep it

    Retention periods for account, billing, progress and certificate records.

  8. 8. Your rights

    Access, rectification, erasure, restriction, portability, objection, and withdrawing consent.

  9. 9. Automated decision-making

    Whether any decision affecting you is made solely by automated means.

  10. 10. Security

    The technical and organisational measures protecting your data, and how breaches are handled.

  11. 11. Children

    The minimum age for an account and how under-age registrations are handled.

  12. 12. Complaints

    How to complain to us, and your right to complain to the national supervisory authority (ANSPDCP).

Exercising your rights today

Two of the rights above are self-service and take effect immediately — you do not need to write to anyone. From Settings → Privacy you can:

  • Download your data (access and portability, Art. 15 and 20) — a JSON file with your profile, enrolments, progress, notes, assessment answers, certificates, orders and notifications.

  • Delete your account (erasure, Art. 17) — your name, email and sign-in details are erased at once, along with your notes, reviews, assessment attempts, wishlist and notifications. Enrolment records, orders and issued certificates are kept with no name attached: certificates stay verifiable for anyone you have already shown them to, and orders are accounting documents with their own statutory retention period.

For the remaining rights — rectification, restriction and objection — contact us and we will respond within one month.

See also the cookie policy and the terms of service.