Privacy Notice
Last updated: April 2026
1. Who we are
Promote Ready System is operated by SF Education Group ("we", "us", "our"). We are the data controller for the personal information described below. You can contact us at support@solidfoundations.co.uk.
2. Personal data we collect
- Account data — name, email, password (hashed), profile photo, role/pathway.
- Usage data — diagnostic responses, journal entries, actions, module progress, AI tool inputs and outputs you create.
- Support data — messages you send to support and the responses we give.
- Technical data — IP address, device type, browser, log timestamps for security and abuse prevention.
- Cookie data — see our Cookie Policy.
3. Why we use your data and our legal basis
- Provide the service (contract): create your account, deliver modules and AI tools, save your work.
- Personalise your pathway (contract): use your diagnostic results to recommend modules.
- Security and fraud prevention (legitimate interests): detect abuse, protect accounts.
- Improve the platform (legitimate interests): aggregate, anonymised analytics on how features are used.
- Customer support (contract / legitimate interests): respond to your enquiries.
- Service updates (legitimate interests): essential transactional emails about your account.
- Compliance (legal obligation): meet tax, accounting, or legal requirements.
4. AI features
When you use the AI Toolkit, your inputs are sent to a third-party AI model provider (currently Google and OpenAI via the Lovable AI Gateway) to generate a response. We do not use your inputs to train models. Outputs are saved to your account so you can revisit them.
5. Who we share your data with
- Paddle.com — our Merchant of Record. Paddle handles checkout, billing, tax, invoicing and customer service for orders. Paddle is the controller for your payment data.
- Hosting and backend (Lovable Cloud / Supabase) — securely stores your account and content.
- AI providers (Google, OpenAI via Lovable AI Gateway) — process your prompts to generate output.
- Email delivery providers — send transactional and authentication emails.
- Professional advisers — accountants and lawyers, where strictly necessary.
- Authorities — where legally required.
6. International transfers
Some providers process data outside the UK/EEA. Where this happens we rely on UK International Data Transfer Agreements, EU Standard Contractual Clauses, or adequacy decisions to safeguard your data.
7. How long we keep your data
We keep account data while your account is active and for up to 12 months after closure for security, audit and legal reasons. Anonymised analytics may be kept indefinitely. You can delete your account at any time from your profile page.
8. Your rights
Under UK GDPR you have the right to: access your data, correct it, delete it, restrict or object to processing, withdraw consent, port your data, and complain to the UK Information Commissioner's Office (ico.org.uk). To exercise any of these rights, email support@solidfoundations.co.uk. We will respond within one month.
9. Security
We use industry-standard technical and organisational measures including encryption in transit (TLS), encryption at rest, access controls and audit logging. No system is 100% secure — please use a strong, unique password.
10. Children
Promote Ready System is for adults working in education. It is not intended for users under 18.
11. Changes
We may update this notice. Material changes will be communicated by email or in-app notice.
12. Contact
Questions or requests: support@solidfoundations.co.uk.