Last updated: 11 September 2025
Who We Are (Data Controller)
Lsaan (lsaan.net) is the data controller for the processing of your personal data on our services.
- Address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Email: [email protected]
- Phone: 02038972233
This policy applies to lsaan.net and all related products and services.
Data We Collect
- Account Data: first name, last name, email address, password (encrypted), phone number (if provided), profile photo (optional).
- Order & Payment Data: billing address, payment method (securely processed by our payment provider), transaction records.
- Device & Usage Data: IP address, browser type, time zone, cookies and their identifiers, pages you visit and how you interact with them.
- Communications & Support: your messages, support tickets, and relevant feedback.
- Cookies & Similar Technologies: essential cookies to run the site; analytics/marketing cookies with your consent.
Purposes of Processing & Legal Bases
| Purpose | Examples | Legal Basis |
|---|---|---|
| Provide the service & manage accounts | Account creation, login, access to courses/features | Performance of a contract |
| Process payments & billing | Subscriptions and purchases | Performance of a contract |
| Display first/last name & profile photo | Showing to other users in communities/groups/comments | Explicit consent |
| Operational communications | Receipts, security alerts | Legitimate interests / Performance of a contract |
| Analytics & performance | Usage measurement, experience improvements | Consent (analytics cookies) |
| Direct marketing | Newsletters, optional offers | Consent |
| Security & fraud prevention | Detecting harmful behavior | Legitimate interests |
| Legal compliance | Tax/accounting obligations | Legal obligation |
Displaying Your Name & Photo (Explicit Consent)
When you create or update your account, we request clear consent to display your chosen first and last name and profile photo to other users within our products and communities (e.g., groups we operate, leaderboards, comments). You can disable display, choose a display name, replace your photo, or withdraw consent anytime in your privacy settings.
Data Sharing
- Processors: with service providers (hosting, consented analytics, payments, email, support). We sign data processing agreements requiring them to protect your data and act only on our instructions.
- Legal/rights protection: where needed to comply with law, enforce our terms, or protect our users and rights.
- We do not sell your personal data.
International Transfers
We may transfer data outside the UK/EEA to service providers that implement appropriate safeguards such as Standard Contractual Clauses (SCCs) and/or the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms as applicable. You can request information about these safeguards at [email protected].
Data Retention
- Account data: retained while your account is active, then deleted/de-identified after 24 months of inactivity (unless a longer period is required by law).
- Payment & invoicing records: retained for up to 7 years for accounting/tax purposes.
- Support tickets: retained for up to 24 months after closure.
- Cookies: retained according to type and your preferences in the cookie settings panel.
Cookies
- Essential: required to operate the site (do not require consent).
- Analytics/Performance & Marketing: used with your consent via our cookie preferences panel; you can change your choices at any time.
We currently do not respond to “Do Not Track” (DNT) signals.
Your Rights (GDPR/UK GDPR)
You have the right to access, rectify, erase, restrict processing, object, data portability, and to withdraw consent. You may also lodge a complaint with your data protection authority (e.g., the ICO in the UK or your local authority).
We respond within 30 days. To make a request, email [email protected] with the subject line “Privacy Request”.
Children
Our service is not directed to individuals under 16 in the EU/EEA (or under 13 where applicable) unless parental/guardian consent is obtained as required by law.
Security
We implement appropriate technical and organizational measures (e.g., encryption in transit/at rest for sensitive data, access controls, audit logs). However, no method of transmission or storage is completely secure.
Marketing
We send marketing communications only with your consent. You can unsubscribe at any time via the unsubscribe link in our emails or from your account settings.
Changes to This Policy
We may update this policy for operational, legal, or regulatory reasons. We will notify you of material changes before they take effect and will renew consent where required (e.g., if the purpose of displaying your name/photo changes).
Contact
- Email: [email protected]
- Address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Phone: 02038972233
