Last updated: [DATE]
1. Who is responsible for your data
[LEGAL BUSINESS NAME], [BUSINESS ADDRESS], Pakistan, operating EduNest LMS. Contact us at [SUPPORT EMAIL].
2. What we collect
- Account details — your name, email address and, if you provide them, phone and country.
- Learning activity — which courses you own, which lessons you have completed, and the certificates issued to you.
- Order details — what you bought, the amount, the payment method and a transaction reference. We never see or store your card number or wallet PIN; those go directly to the payment provider.
- Affiliate activity — clicks on referral links, including an IP address and the page you landed on, so commission can be attributed.
- Technical data — the IP address used when signing in, kept to protect accounts against brute-force attempts.
3. Why we use it
To give you access to what you bought, to issue and verify certificates, to run the affiliate programme and pay commission, to send service email (receipts, password resets, certificates), to keep accounts secure, and to meet our tax and accounting obligations.
4. Cookies
We use a session cookie to keep you signed in, and a referral cookie that remembers which affiliate sent you for [COOKIE DAYS] days. We do not use advertising cookies.
5. Who we share it with
Only where necessary: our payment providers (to take payment), our email provider (to deliver mail), and our hosting provider (to run the site). We do not sell your data. We may disclose data if the law requires it.
6. How long we keep it
Account and order records are kept while your account is open and afterwards for as long as tax law requires. Sign-in attempt logs are deleted after 24 hours.
7. Your choices
You can see and correct most of your data from your profile page. Write to [SUPPORT EMAIL] to request a copy of your data or ask us to delete your account. Note that we must keep certain order records even after an account is deleted.
8. Children
Our courses are intended for people aged 16 and over. We do not knowingly collect data from younger children.
9. Security
Passwords are stored hashed, the site is served over HTTPS, and access to our systems is limited. No system is perfectly secure, so please use a strong, unique password.
10. Changes
If we change this policy we will update the date above and, for significant changes, tell you by email.