Overview
This policy supplements our Privacy Policy. While the Privacy Policy explains what we collect and why, this policy explains how long we keep each class of data and what triggers deletion.
Account data
Account record (name, email, profile fields): retained for the lifetime of your account. If you self-delete via Account → Settings → Danger zone, your record is anonymised immediately and PII is replaced with placeholders within the same database transaction.
Inactive accounts: an account with no sign-in for 36 consecutive months is flagged for review. You receive an email warning at month 30; if you do not sign in by month 36 we anonymise the account using the same flow as a self-initiated deletion.
Payment records
Order, refund, and invoice records are retained for a minimum of 7 years after the transaction, in line with UAE VAT recordkeeping rules and UK / EU tax record retention. These records are retained even when you delete your account, the row stays but is anonymised, so accounting integrity is preserved without keeping your PII attached.
Course progress + certificates
Course enrolments, lesson progress, quiz attempts, and certificate records are retained for the lifetime of the account so your certificate verification links keep working. Certificate verification URLs you have shared publicly continue to resolve even after account deletion, the cert record is preserved with the holder name replaced by a placeholder.
Support tickets
Helpdesk tickets + messages are retained for 3 years after the ticket is closed. Tickets older than that are anonymised: the body is preserved (for internal training value) but the customer identifier is replaced with a placeholder.
Email + marketing
Newsletter subscription state is retained until you unsubscribe. Once you unsubscribe, the subscription state flips to "unsubscribed" but the email row is retained on a suppression list so we do not re-import you against your will from a future contact source.
Logs + analytics
Application logs (authentication events, security events, audit log entries) are retained for 12 months in the operational store and indefinitely in cold archive for security forensics. Product analytics events (page views, feature usage) are retained for 24 months at full fidelity and indefinitely as anonymised aggregates.
Webhook + audit logs
Webhook delivery records are retained for 12 months. Audit-log entries (every privileged action by staff against a learner record) are retained for the lifetime of the platform.
Your rights
Even within these windows, you can request export or deletion of data we hold about you at any time via Account → Settings, or by writing to the contact address on our Privacy Policy. Export covers everything we can return to you; deletion follows the schedule above with statutory carve-outs called out per category.
Changes
When we shorten or lengthen a retention window we update this page and announce the change via the platform changelog. If a change reduces the rights you currently have, we notify affected users by email before the change takes effect.