Privacy Policy

Key Information

Before reading the full policy, here's what you need to know:

• Prentora Ltd is the data controller of the personal data we collect about you, except recordings of live classes, which we host for the instructor (Section 5.4).
• We collect personal data you provide (name, email, payment information), data about how you use our platform (video courses viewed, time watched), and data from third parties (payment processors).
• We use your personal data to provide our services, process payments, improve our platform, communicate with you, and ensure platform security.
• If you attend a live class, its instructor also receives some of your personal data and is responsible for their own use of it (Section 5).
• You have rights regarding your personal data, including the right to access, correct, delete, and download your information.

1. Introduction

This Privacy Policy describes how Prentora Ltd, a company registered in England and Wales with company number 16785749 ("Prentora," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website and related services (collectively, the "Services").

2. Information We Collect

You must give us your email address, a username, a password and your country to create an account. You must give us your payment details to make a purchase. We can't create your account or complete a purchase without them. Other information is optional. Some features can't be used without it.

2.1 Information You Provide to Us

2.2 Information Collected Automatically

2.3 Information from Third Parties

• Payment Processors: We receive transaction confirmation and limited payment information (last 4 digits of card, card brand, a card fingerprint, transaction status) from Stripe and other payment providers.
• Security Services: We work with fraud prevention and security providers to protect our platform and users.
• Discord: your Discord user ID and username, when you link Discord.
• Instructors: your attendance, removals from their live classes and the reasons they give.
• Other users: reports about content you posted.
• Website security provider: the result of its security check on your browser.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Provide and Improve Our Services

• Create and manage your account
• Process video course purchases and deliver video course content
• Track your learning progress
• Provide customer support and respond to your inquiries
• Enable video course and live class reviews
• Act as instructors' booking agent for live classes: handle applications and bookings, arrange payments to instructors and process refunds
• Host and stream live class recordings for instructors

3.2 Platform Operation and Security

• Monitor and analyze platform usage and performance
• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service
• Handle reports about content, restrictions, statements of reasons and appeals
• Record your confirmation that you're 18 or over, and act on reasons to believe an account belongs to someone under 18
• Debug technical issues and improve platform stability

3.3 Communications

• Send transactional emails (purchase confirmations, video course updates, password resets)
• Send promotional emails about new video courses, features, and special offers (you can opt out)
• Notify you about changes to our services or policies
• Request feedback through surveys
• Invite you to review a live class you took part in, and ask you to review Prentora on Trustpilot. You can turn these emails off

3.4 Legal Compliance

• Comply with legal obligations and respond to legal requests
• Protect our rights, property, and safety, and that of our users
• Enforce our agreements and policies

3.5 Device and Network Identification

When you interact with key parts of our platform, such as creating an account, logging in, making purchases, accessing video course content, and streaming or downloading live class recordings, we collect device identification data and your IP address. This data is used for:

• Fraud prevention: detecting and preventing unauthorized access and fraudulent transactions
• Dispute resolution: providing evidence in the event of payment disputes or chargebacks
• Defense of legal claims: protecting our rights and the rights of our instructors

We process this data under Legitimate Interests (UK GDPR Article 6(1)(f)). Our legitimate interest is protecting the platform, its users, and instructors from fraud and fraudulent chargeback claims.

3.6 Legal Basis for Processing (UK GDPR)

We process your personal information under the following legal bases:

Your right to object. You can object at any time to our use of your data for our legitimate interests, shown in the table above, including your student record, our fraud and dispute records and our analytics. You can also tell us at any time to stop sending you marketing, and we will always stop. Contact [email protected].

4. How We Share Your Information

4.1 Video Course Instructors

When you buy a video course, its instructor can view aggregate, anonymized analytics about video course performance (enrollment numbers, average completion rates, popular sections). Video course instructors cannot access individual student names, email addresses, or personal information.

Live class instructors receive personal data about the students who apply to and join their classes (Section 5).

4.2 Service Providers

We share your information with third-party service providers who perform services on our behalf, including:

• Payment processing (Stripe, Wise)
• Cloud hosting and storage
• Email delivery services
• Customer support tools
• Server-side analytics and performance monitoring
• Video hosting and streaming, including live class recordings
• Website delivery and security checks
• Browser notification services, if you turn notifications on
• AI translation services

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.3 Public Information

When you interact with public features of the platform, certain information becomes visible to other users:

• Reviews: Your username, your review, including any rating or whether you recommend it, the date you posted it and, for a live class, the semester are publicly visible

4.4 Legal Requirements

We may disclose your information when required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Governmental requests
• Protection of our rights and property
• Investigation of fraud or security issues
• Protection of user safety

4.5 Business Transfers

If Prentora is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4.6 Aggregated Data

We may share aggregated, anonymized data that does not identify you personally (e.g., "50% of users completed this video course").

5. Live Classes

5.1 Who is responsible for your data

Instructors sell their live classes themselves, and Prentora acts as their agent. Prentora is the controller of your account, your applications and memberships as held on Prentora, payment records, attendance records and your student record (Section 5.3). Each instructor is a separate controller of the personal data they receive from us about you, and of anything they hold outside Prentora.

5.2 What instructors receive

When you apply to or join a live class, its instructor receives your username and email address, your application (the semesters you chose and your answers, including any images), your membership and its payments, your attendance, the date you first joined the class's interest list if you did, the details you enter at checkout, such as the name on your card, and, if the class uses Discord, your Discord username. Your checkout details are held on the instructor's own Stripe account. They stay there if your Prentora account is closed.

Under the Live Class Agreement, instructors may use this data only to teach their classes, to correspond with you, to tell you about their other teaching where the law allows, to deal with disputes, complaints and claims about their classes, and to establish or defend legal claims. They must keep it secure, must not sell it, and must delete it when they no longer need it for those purposes. Contact the instructor to ask about the copies they hold.

Instructors can live in any country where Prentora offers live classes, including the United States, Australia and Hong Kong. Section 10 says how these transfers are protected.

5.3 Your student record

When you apply to a live class, the instructor sees a summary of your record over the past 12 months, across every class on Prentora: how many semesters you completed and paid for in full, did not pay for, or left early, and how many times an instructor removed you for your conduct. Instructors may use it only to decide applications to their own classes.

You can ask us for a copy of your record, and to correct an entry you think is wrong. You can also object to your record being shown: tell us why at [email protected]. We will stop showing it unless we have compelling reasons in your particular case that outweigh your interests. We will tell you our decision and why.

5.4 Recordings

Sessions may be recorded by the instructor and shared with the students of the semester on Prentora. The instructor is the controller of the personal data in a recording, and Prentora hosts and streams it for them as their processor, using our video hosting provider. You can keep your camera off at any time. Students of the semester can download recordings for their own learning. The copies they download are not deleted with the recording. We may review or remove a recording ourselves to comply with the law or our Terms of Service, or to deal with a complaint or dispute, and we are then the controller for that purpose.

5.5 Recording access log

We use the recording access log (Section 2.2) to show, if you dispute a payment with your bank, that you used what you paid for. Section 7 says how long we keep it.

5.6 Payment disputes

If you dispute a payment for a live class with your bank, the instructor responds to the dispute. We give them an evidence pack for this. It contains your name and email address, the version of the Live Class Booking Terms you accepted and the acknowledgements you gave, the semester's schedule and session dates, your payments and refunds, the emails we sent you, your attendance, your recording access log, and your card's brand and last 4 digits. The instructor may use it only to respond to the dispute. They send it to Stripe and to your card issuer as their response.

5.7 Discord

Some classes use a Discord server. If you link your Discord account, we store your Discord user ID, your username and an access token. We use them to add you to the class's server and manage your roles there. You can unlink Discord at any time. Discord processes your data under its own privacy policy.

6. Instructors and Partners

If you apply to teach, teach on Prentora or join our affiliate program, we also process the following.

• Your application to teach: what you tell us about your teaching and experience, the links you give us, your country and our decision. We use it to decide your application, as a step you ask us to take before a contract.
• Payout and identity details: for payouts through Wise, your name, date of birth, address and bank details; for Stripe, the details Stripe shares with us about your account, such as your name, email address, business type and country. We use them to pay you under our agreement with you. Stripe and Wise run their own identity checks as separate controllers. If we paid you as an affiliate, we keep your legal name and country with our payout records for 6 years, even if your account is closed.
• Seller tax details, for live classes: your name, address, date of birth and tax identification number and, for a business, its registration number, with the payments and fees on your classes. The law requires us to collect and check these and to report them each year to HM Revenue & Customs, which may share them with the tax authority of your country (The Platform Operators (Due Diligence and Reporting Requirements) Regulations 2023). We keep them for as long as those Regulations require.
• What students see about you: your instructor profile and, for live classes, your name as seller, your contact email and, if you sell as a business, your business address, company details and any VAT number. Students who view or book your classes receive these, including in a dispute evidence pack (Section 5.6).
• Fee statements, earnings and payouts: kept for 6 years after the end of the financial year they relate to, including after your agreement ends.
• Suspensions and restrictions: the statement of reasons and any appeal, kept as Section 7 describes for reports, restrictions and appeals.
• Translation and dubbing: we translate your video courses, live class details, proposals and our messages to you using an AI translation service in the United States (Section 10). The service processes your words only to translate them for us. We transcribe and dub the videos in your video courses on our own systems.

7. Data Retention

We retain different categories of personal information for different periods based on legal requirements and business needs:

If you ask us to close your account while you still have a live class membership, a payment, refund or dispute that isn't settled, or partner earnings we owe you, we tell you what has to finish first. We close the account once it has. When your account is closed, we delete your account details and keep only the records listed above, linked to an ID that no longer shows your name or email, except where the table above says otherwise. Reviews you have posted are deleted.

If your account is subject to an ongoing legal dispute, investigation, or regulatory inquiry, we may retain relevant data until the matter is resolved.

8. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. Our notification will include:

• The nature of the personal data breach
• The likely consequences of the breach
• The measures we have taken or propose to take to address the breach and mitigate potential adverse effects
• Contact details where you can obtain more information

We will also notify the Information Commissioner's Office (ICO) and, where people in the EU are affected, the supervisory authorities of the EU countries concerned, within 72 hours of becoming aware of a breach that poses a risk to individuals' rights and freedoms, as required by UK GDPR.

If you have concerns about a potential security issue, please contact us immediately at [email protected].

10. International Data Transfers

Prentora is based in the United Kingdom. We may transfer personal data to the recipients below located outside the UK:

Safeguards for International Transfers

When we transfer personal data outside the UK to countries without adequacy decisions, we implement appropriate safeguards:

• Standard Contractual Clauses: We use the EU Standard Contractual Clauses adopted by the European Commission, with the International Data Transfer Addendum issued by the UK Information Commissioner, or the UK International Data Transfer Agreement
• Data Privacy Framework: For transfers to the United States, we rely on the EU-U.S. Data Privacy Framework and its UK Extension where the provider is certified under it. For other providers in the United States, we rely on the Standard Contractual Clauses, with the UK Addendum, in our agreement with them.
• Instructors: The EU Standard Contractual Clauses and the UK International Data Transfer Addendum apply between Prentora and an instructor in a country without an adequacy decision. They are part of the Live Class Agreement. You can bring a claim under those clauses in the courts of the UK or EU country where you live.
• Technical Measures: All data transfers are encrypted in transit using HTTPS/TLS

You can request copies of the Standard Contractual Clauses and Data Processing Agreements by contacting [email protected].

11. Your Rights and Choices

We will respond to all requests to exercise your data rights within one month of receipt, unless otherwise specified. In complex cases, we may extend this period by up to two further months and will notify you of any extension.

11.1 Access and Portability

You can see most of your information in your account. For a full copy, or a copy to take to another service, email [email protected].

11.2 Correction and Updates

You can update your account information directly in your profile settings. If you need assistance, contact us.

11.3 Closing Your Account

You can close your account by contacting [email protected]. We close it within one month, unless something has to finish first (Section 7). Section 7 also says what we keep after your account is closed.

11.4 Marketing Opt-Out

You can unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email or updating your email preferences in your account settings.

11.5 Cookie Management

We use essential cookies necessary for authentication, security, and core platform functionality. The only optional storage we use is a referral identifier; where the law requires consent we store it only if you agree, and you can decline or remove it at any time without affecting your use of the platform (see "Referral and Affiliate Tracking"). These cookies are required for our Services to operate properly. While you can configure your browser to reject cookies, doing so will prevent you from using key features of our platform, including logging in and accessing purchased video courses.

Device checks. To create the device identifier described in Section 3.5, our site reads your browser's settings and characteristics. Our website security provider also checks your browser on some forms, such as sign-up and sign-in. We use these only to keep accounts secure, to prevent fraud and to answer payment disputes, and never for advertising.

11.6 Referral and Affiliate Tracking

Some of our partners promote Prentora video courses using a unique referral link. When you arrive through such a link, we store a referral identifier in your browser (using local storage, a technology similar to cookies) so that, if you go on to purchase a video course, the partner who referred you can receive their share of the sale.

• Where we ask first: in regions where the law requires your consent (including the United Kingdom and the European Economic Area) we ask before storing the referral identifier and store it only if you agree. Declining has no effect on the price you pay or your access to any video course.
• Elsewhere: in regions where consent is not legally required, we may store the identifier without a separate prompt, on the basis of our legitimate interest in operating our partner program.
• Purpose: to attribute a purchase to the partner who referred you, so that we can pay their commission.
• Duration: the identifier is stored for up to 30 days. You can remove it at any time by clearing your browser's site data.
• What we store: a short partner referral code. We do not use this identifier for advertising or to build a profile of you.
• Legal basis: your consent (UK GDPR Article 6(1)(a)) where required by the Privacy and Electronic Communications Regulations (PECR) or the EU ePrivacy Directive; otherwise our legitimate interests (Article 6(1)(f)) in operating our partner program.

12. Children's Privacy

Our Services are only for people aged 18 or over. When you sign up, you confirm you are 18 or over. We do not knowingly collect personal information from anyone under 18. If we have reason to believe an account belongs to someone under 18, we may ask for information that shows their age. We use it only to decide, and delete it once we have decided. If we believe they're under 18, we remove them from any live class they're enrolled in. If you believe someone under 18 has given us their personal information, please contact us at [email protected].

13. Third-Party Links and Services

Our platform may contain links to third-party websites, services, or resources that are not operated by Prentora. This Privacy Policy does not apply to those third-party sites.

We are not responsible for the privacy practices or content of third-party websites. When you click on a link to a third-party site (such as an instructor's personal website, social media profile, or payment processor), you will be subject to that third party's privacy policy. We encourage you to review the privacy policies of any third-party sites you visit.

14. Region-Specific Rights

14.1 UK Residents (UK GDPR)

If you are a UK resident, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Not be subject to a decision based solely on automated processing that significantly affects you, and ask for a person to review it
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, contact [email protected].

14.2 EEA and Switzerland Residents (GDPR)

If you are located in the European Economic Area or Switzerland, you have the same rights as UK residents under the GDPR or, in Switzerland, the Federal Act on Data Protection. To exercise these rights, contact [email protected]. You can also complain to the data protection authority of the country where you live.

14.3 California Residents (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect, use, and share
• Request deletion of personal information
• Opt out of the "sale" or "sharing" of personal information ( we do not sell personal information, or share it for cross-context behavioral advertising)
• Correct inaccurate personal information
• Limit the use of sensitive personal information
• Not be discriminated against for exercising these rights

To exercise these rights, email [email protected].

14.4 Other US State Residents

Residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia have similar rights to California residents under their respective state privacy laws. Contact [email protected] to exercise these rights.

14.5 Nevada Residents

Nevada residents may opt out of the sale of certain covered information. We do not currently sell covered information. To make a request, contact [email protected].

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:

• Posting a notice on our website
• Updating the "Last Updated" date at the top of this policy

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Prentora Ltd
Company Number: 16785749
Registered in England and Wales
15 Peregrine Crescent
Manchester
M43 7TA
United Kingdom
Email: [email protected]

UK Supervisory Authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk