Privacy Policy

Version: 1.0.0

Effective date: 8 September 2025

This Privacy Policy explains how Skillpatch.ai (“we”, “us”, “our”) operated by Viz Data Ltd (UK) collects, uses and protects your information when you use our website and services.

Who is the data controller?

Viz Data Ltd, United Kingdom. If you have questions, contact: support@skillpatch.ai.

What information we collect and where it's from

  • Account details you provide when registering (name, email). Possibly birth year in future.
  • Authentication data from you (your password is stored only as a secure cryptographic hash; we cannot view the plain text).
  • Technical data from your device or browser (IP address, device type, OS, browser)
  • Content you submit to the service (e.g., skills, goals, length of course, feedback)
  • Communications you send to us (support emails, bug reports)
  • Payment-related metadata if/when paid features are used (handled by our payment processor; we do not store full card details)
  • There might be third party data collected, e.g. from Google Analytics, which we might never access or analyse, and which we do not directly hold.

How we use your information

  • To create and manage your account and authenticate you
  • To provide, maintain and improve the service and personalise content
  • To communicate with you about updates, security alerts and administrative messages
  • To monitor, prevent and detect fraud, abuse and security incidents
  • To analyse aggregate usage to improve performance and features
  • To comply with legal obligations and enforce our Terms of Use

Legal bases (UK/EU GDPR)

GDPR lists lawful bases on which we can gather data.

  • For Account & Service delivery, the legal basis is Contract
  • For Invoices & Records, the legal basis is Legal Obligation
  • For Marketing and non-essential cookies, the legal basis is withdrawable Consent
  • For email traffic with users, the basis is Legitimate Interest
  • For Security & Analytics such as analysing the countries from which most users access skillpatch, which we might perform in future, the legal basis would be Legitimate Interest

Sub-processors

We use a small number of trusted third-party providers to deliver the Skillpatch service. These organisations process limited personal data on our behalf:
  • Amazon Web Services (AWS) – hosting and database services used to store account, course, and payment record data.
  • Amazon Simple Email Service (SES) – used to send outbound account and support emails (no inbound storage).
  • Microsoft Exchange (Office 365) – email inbox for support enquiries, where message content is stored.
  • Stripe – payment processor, handling billing and transaction data.

We keep this list under review and will update it if additional sub-processors are introduced.

Cookies and similar technologies

We use essential cookies to operate the site and may use analytics cookies to understand usage. Where required, we will request your consent for non-essential cookies. You can control cookies in your browser settings.

How we share information

We do not sell your personal information to third parties. We may share data with: (a) service providers who help us operate the service (e.g., cloud hosting, email, analytics) under contracts that require appropriate safeguards; (b) authorities where required by law or to protect rights and safety; (c) another organisation in connection with a merger, acquisition, or sale of assets or as a going concern—your information may be transferred as part of the transaction and will remain subject to this policy or a policy that is at least as protective.

Where we store your data

We host customer data in Amazon Web Services (AWS) in the United Kingdom, in the London Region (eu-west-2). For resilience, AWS may replicate data across multiple availability zones within this Region. We do not enable cross-Region replication by default. If any transfer outside the UK/EEA is necessary (for example, when using specific global services), we apply appropriate safeguards such as Standard Contractual Clauses.

Security

We use technical and organisational measures to protect your information, including encryption in transit (HTTPS) and hashed passwords. No method of transmission or storage is 100% secure, but we continually work to protect your data.

Data retention

We keep personal data only as long as necessary for the purposes described above, to fulfil legal or reporting obligations, and to resolve disputes. If you close your account, we will delete or anonymise your data within a reasonable period unless we must retain it by law.

Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. You can also withdraw consent where processing is based on consent. To exercise these rights, contact support@skillpatch.ai. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

Children

Our service aimed at adults and, where used by children, intended for those aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, please contact us and we will take appropriate steps.

Third-party links

Our site may contain links to third-party sites. We are not responsible for their privacy practices; please review their policies.

Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a new “Effective date”. If changes are material, we will provide additional notice.

Contact

Questions or requests: support@skillpatch.ai