Privacy Policy

This Privacy Policy explains how Digital Accounting Evolution® Ltd ("DAE", "we", "us", "our") collects, uses, stores and protects personal data when you visit our website, register for our platform, enrol on a course, become an Authorised Partner, or otherwise engage with our services.

We are committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1. What Personal Data We Collect

We collect personal data in the following categories:

1.1 Information you provide directly

• Name, business name, job title and contact details (email address, telephone number, postal address)
• Account credentials (username, password — passwords stored hashed)
• Payment information (processed via third-party payment providers; we do not store full card details on our systems)
• Information you provide when registering interest as a partner firm, including firm details and client volumes
• Content you submit through forms, surveys, feedback, or community discussion within the platform
• Communications you send to us by email, telephone or other channels

1.2 Information collected automatically

• Device and browser information (type, operating system, IP address)
• Usage data (pages visited, time spent, course progress, lesson completion, quiz results)
• Cookies and similar tracking technologies (see Section 7)

1.3 Information from third parties

• Information from your accountancy practice if you access DAE through a Partner firm referral
• Information from analytics, payment, marketing or hosting platforms we use to deliver services

2. How We Use Your Personal Data

We use your personal data for the following purposes:

• To create and manage your account and provide access to our courses, content and platform features
• To process payments and manage subscriptions or one-off purchases
• To deliver customer support and respond to your enquiries
• To manage the Authorised Partner programme, including commission tracking and reporting
• To send service-related communications (confirmations, receipts, course updates, security notices)
• To send marketing communications where you have given consent or where we are otherwise permitted to do so under applicable law
• To improve our courses, platform and services through usage analytics
• To comply with legal and regulatory obligations
• To protect our legal rights and prevent fraud or misuse of the platform

3. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

• Contract: Processing necessary to perform our contract with you (for example, providing course access following purchase)
• Legitimate interests: Processing necessary for our legitimate business interests (such as improving our services, securing our platform, and pursuing partner commission arrangements), where these interests do not override your rights
• Consent: Where you have given clear, specific consent (for example, to receive marketing communications)
• Legal obligation: Processing required to comply with legal or regulatory obligations

4. Sharing of Personal Data

We do not sell your personal data to third parties. We may share your personal data with:

• Service providers: Trusted third parties that help us operate the platform, including hosting (Kajabi, Netlify), payment processors, email service providers, customer support tools, and analytics providers. These providers are contractually required to protect your data and use it only for the purposes we specify.
• Partner firms: If you access DAE through an Authorised Partner accountancy firm, limited account information may be shared with that firm to administer your access and commission arrangements.
• Professional advisers: Lawyers, accountants and other advisers where necessary to manage our business.
• Regulators and authorities: Where required by law, court order, or to respond to a legitimate regulatory request.
• Successors in interest: In the event of a sale, merger, or transfer of our business, personal data may transfer to the successor entity subject to equivalent protections.

5. International Transfers

Some of our service providers are based outside the United Kingdom, including in the European Economic Area, the United States and other jurisdictions. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR, including the use of Standard Contractual Clauses, adequacy decisions, or equivalent protections.

6. How Long We Keep Your Personal Data

We retain personal data only for as long as necessary for the purposes set out in this policy, including:

• Active account data: for the duration of your account plus a reasonable period thereafter
• Financial records: for a minimum of six years following the end of the financial year, in line with HMRC requirements
• Marketing data: until you withdraw consent or unsubscribe, plus a reasonable retention period for record-keeping
• Course progress and engagement data: for the duration of your course access plus a reasonable period for analytics and continuous improvement

When personal data is no longer required, it is securely deleted or anonymised.

7. Cookies and Tracking

Our website and platform use cookies and similar technologies to provide and improve services. Cookies fall into the following categories:

• Strictly necessary: Required for the platform to function (for example, authentication, session management). These cannot be disabled.
• Analytics: Help us understand how users engage with our content so we can improve the experience.
• Marketing: Where used, only with your consent.

You can manage cookie preferences through your browser settings or via any cookie consent banner provided on the platform.

8. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Request a copy of your data in a structured, machine-readable format
• Right to object: Object to certain types of processing, including direct marketing
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint: Contact the Information Commissioner's Office (ico.org.uk) if you believe your rights have been infringed

To exercise any of these rights, please contact us at samantha@daevolution.co.uk. We will respond within one month of receiving your request.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encryption in transit, access controls, regular security review and the use of reputable service providers with their own robust security standards.

No system can be guaranteed completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours where required, and notify affected individuals without undue delay where appropriate.

10. Children's Data

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without verified parental consent, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "last updated" date at the top of this policy indicates when it was most recently revised. Material changes will be communicated to you through the platform or by email where appropriate.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: