Last updated: 11 September 2025
Lsaan (lsaan.net) is the data controller for the processing of your personal data on our services.
This policy applies to lsaan.net and all related products and services.
| Purpose | Examples | Legal Basis |
|---|---|---|
| Provide the service & manage accounts | Account creation, login, access to courses/features | Performance of a contract |
| Process payments & billing | Subscriptions and purchases | Performance of a contract |
| Display first/last name & profile photo | Showing to other users in communities/groups/comments | Explicit consent |
| Operational communications | Receipts, security alerts | Legitimate interests / Performance of a contract |
| Analytics & performance | Usage measurement, experience improvements | Consent (analytics cookies) |
| Direct marketing | Newsletters, optional offers | Consent |
| Security & fraud prevention | Detecting harmful behavior | Legitimate interests |
| Legal compliance | Tax/accounting obligations | Legal obligation |
When you create or update your account, we request clear consent to display your chosen first and last name and profile photo to other users within our products and communities (e.g., groups we operate, leaderboards, comments). You can disable display, choose a display name, replace your photo, or withdraw consent anytime in your privacy settings.
We may transfer data outside the UK/EEA to service providers that implement appropriate safeguards such as Standard Contractual Clauses (SCCs) and/or the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms as applicable. You can request information about these safeguards at [email protected].
We currently do not respond to “Do Not Track” (DNT) signals.
You have the right to access, rectify, erase, restrict processing, object, data portability, and to withdraw consent. You may also lodge a complaint with your data protection authority (e.g., the ICO in the UK or your local authority).
We respond within 30 days. To make a request, email [email protected] with the subject line “Privacy Request”.
Our service is not directed to individuals under 16 in the EU/EEA (or under 13 where applicable) unless parental/guardian consent is obtained as required by law.
We implement appropriate technical and organizational measures (e.g., encryption in transit/at rest for sensitive data, access controls, audit logs). However, no method of transmission or storage is completely secure.
We send marketing communications only with your consent. You can unsubscribe at any time via the unsubscribe link in our emails or from your account settings.
We may update this policy for operational, legal, or regulatory reasons. We will notify you of material changes before they take effect and will renew consent where required (e.g., if the purpose of displaying your name/photo changes).