Privacy policy

Updated 26 September 2026. This notice explains the public website, optional email-list subscriptions and private invitation-only member beta. Public account registration, paid membership checkout, community posting and photo uploads are not open. The later-use sections explain what a limited paid beta would need; they do not mean we already collect payment data from members.

Who is responsible

EwenFoundry Limited, registered in Scotland (SC732552), at 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN, is responsible for this website and member service. For privacy questions or rights requests, email daniel@ewenfoundry.com. We may ask for proportionate proof of identity before disclosing or changing account data; you can contact us even if you cannot access the account email.

What we use now

Public website and enquiries. Our hosting and email providers process IP addresses, request times, browser information, security events and delivery records to operate the site, answer enquiries and prevent abuse. We rely on our legitimate interests in a reliable, secure service and in responding to you. We do not use advertising pixels or optional analytics scripts on these pages; fonts and images are served from our website.

Email-list subscribers. The optional public list uses single opt-in with a separate marketing-consent box. Klaviyo holds email addresses, signup source, consent or confirmation records and suppression information for subscribers. We rely on their recorded consent for marketing and keep a minimal record of unsubscribes so we do not email them again. Joining the list does not create a learning account or paid membership. Use the unsubscribe link in a marketing email or contact us to stop marketing.

Invited beta accounts. We use your email address, account ID, verification and sign-in records, access permission, optional profile name or timezone, learning progress and feedback to provide and evaluate private access, support you and protect the service. Email and account credentials are needed for private access; a home address and payment details are not required for the free beta. Our current lawful basis is our legitimate interests in operating and securing the invitation-only beta, balanced against members' rights. We do not use beta learning records for employment assessment. Signing in or accepting an invitation does not subscribe you to marketing.

Public registration and paid membership, if opened

Member accounts, including invitations, and future paid purchases are intended for people aged 16 or over. Public registration and paid checkout are not open. Before opening registration, we must put a proportionate age check and clear, age-appropriate privacy information at the point of collection. We do not ask beta users for a full date of birth. Any later age-assurance information must be limited to what is necessary and explained at collection. Allowing 16- and 17-year-olds does not remove the need for extra safeguards for children.

If public accounts open, we expect to use the email address, login or verified Google identity, account ID, chosen profile details, plan and access status, lesson openings and progress, support requests and evidence of the terms version accepted. These details would be used to provide the account and lessons under the membership contract where applicable, secure access and resolve support or disputes under our legitimate interests, and meet legal duties. The precise age-assurance method, lawful basis and retention of any age evidence must be settled before registration and checkout open.

If paid checkout opens, Stripe would process payment-card details and provide us with customer, subscription, payment and invoice identifiers, billing status, amounts, discounts, refunds and dispute records. We would not ask you to give us full card numbers. We would use those records to take payment, grant or stop paid access, provide billing support, handle refunds and keep legally required accounting records. We expect to rely on the membership contract where appropriate, legal obligations for accounting, and legitimate interests in fraud prevention and resolving disputes. We will show any required billing fields and the exact final price before purchase. The registered account is not automatically added to an email-marketing list.

Optional Google sign-in and essential cookies

If you choose Google sign-in, Google supplies our authentication provider, Supabase, with your Google account identifier, verified email and available profile details such as name and profile picture. We use these to authenticate you. Supabase may link Google to an existing account with the same verified email; this does not grant extra permissions. We do not request Gmail, Drive, contacts or your Google password. Google's own privacy policy also applies to its sign-in service.

The member website uses an essential session cookie with a random reference, not a password or Google token. An active session lasts up to eight hours and can end sooner after inactivity. If you choose the optional remembered-device setting, a separate security cookie can resume a session on that device for up to seven days unless you sign out or revoke your sessions. A separate short-lived cookie binds a Google sign-in attempt to the browser for up to ten minutes. These cookies support authentication and security, not advertising. Google and Supabase may set their own sign-in security cookies on their pages.

Marketing and features not yet available

Account, security, payment and cancellation messages are service messages, not permission to send marketing. Any new marketing-email choice must be separate, optional and unticked, with an easy way to withdraw it. We do not treat a terms acceptance, account creation or payment as marketing consent.

Networking groups, posts, photos, member messaging, referral balances and behavioural analytics are not live. We will provide feature-specific privacy and visibility information before enabling them, including who can see a post or photo, moderation/reporting, retention and any new service providers. A group described as private is still visible to its members; do not include another person's personal information without permission.

Who handles data and where

Cloudflare hosts and protects the site and member sessions. Supabase handles authentication and member records; the member database is in its London region. Resend delivers account invitation and password-reset messages; Google Workspace handles our contact email; Google provides optional sign-in; Klaviyo manages the optional email list. Stripe would handle paid billing only if checkout opens. These providers may process information outside the UK even where primary storage is in London. Before new paid processing opens, we must confirm the applicable provider agreements and any required international-transfer safeguards; contact us for information about safeguards relevant to your data.

How long we keep information

We keep invited account and progress records while needed to provide the beta and deal with support, security or legal issues. Expiring access or signing out does not itself delete an account. Enquiries are kept while needed to resolve them and related issues. Marketing subscribers' records are kept while subscribed; after an unsubscribe, we retain the minimum suppression and consent evidence needed to honour the choice and answer compliance questions. Technical logs and backups follow provider schedules and are deleted or overwritten on their own cycles.

If paid membership opens, subscription, invoice and refund records would be kept for the period needed for accounting, tax, chargeback and legal obligations; account progress would be kept while needed to deliver access and address related requests. We must settle and publish a checked retention schedule or clearer criteria for each new category before taking payments. A deletion request will be assessed against any information we still need to retain lawfully.

Your rights and changes

You can withdraw marketing consent or object to direct marketing at any time, including by using an unsubscribe link. Depending on the circumstances, you can ask to access, correct, erase, restrict or transfer your information, or object to processing based on legitimate interests. Withdrawing consent does not undo earlier lawful processing. We do not currently make solely automated decisions about members with legal or similarly significant effects.

You can complain to the Information Commissioner's Office; contacting us first is welcome but not required. We will review this notice and tell people before materially new uses of their data begin, including public registration, paid billing, community features, photos or advertising tracking.