Brand Bar

SKILLSTORE PRIVACY NOTICE

Last Updated: 2025-11-10
Effective Date: 2025-11-10

Jump to section:

1. INTRODUCTION

1.1 Who We Are

Skillstore is operated by SKILLSTORE LTD (Company Number: 16495005), a company registered in England and Wales with its registered office at 4th Floor, 205 Regent Street, London, England, W1B 4HB.

We operate a marketplace for educational content and services where Creators can share their expertise with Skill Builders through short-form videos, personalized content, and other educational offerings.

1.2 What This Policy Covers

This Privacy Notice explains:

  • What information we collect about you
  • How we use your information
  • Who we share it with
  • Your rights and choices
  • How we use cookies and similar technologies

1.3 Our Commitment

We are committed to protecting your privacy and being transparent about how we handle your data. This policy complies with:

  • UK GDPR (General Data Protection Regulation)
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations (PECR)
  • CAN-SPAM Act (for US users)

1.4 Scope

This policy applies to:

  • Our website at https://skill.store
  • Our mobile applications
  • Our services and platform features
  • Communications with you

2. INFORMATION WE COLLECT

We collect information in three ways: information you provide directly, information we collect automatically, and information from third parties.

2.1 Information You Provide Directly

Account Registration

When you create an account as a Creator or Skill Builder, we collect:

  • Basic Information: Full name, email address
  • Account Credentials: Password (encrypted), security settings
  • Communication Preferences: Email preferences, notification settings, skill interests and learning goals
  • Referral Information: How you heard about Skillstore (optional)

Creator-Specific Information

If you're a Creator, we also collect:

  • Creator Profile: Areas of expertise, credentials, social media links, content examples, experience level, and audience size (where provided)
  • Content Uploads: Videos, images, text descriptions, educational materials
  • Payment Information: Connected Stripe or PayPal account details (handled by payment processors)
  • Tax Information: Tax ID, VAT number (where applicable)

Transactions

When you purchase content or services:

  • Purchase Information: What you bought, when, and for how much
  • Payment Information: Handled by Stripe/PayPal (we don't store full card details)
  • Billing Address: For tax and payment processing

Communications

When you contact us:

  • Support Requests: Name, email, message content, attachments
  • Feedback & Surveys: Your responses to surveys, feedback forms, or research studies
  • Messages: Direct messages with Creators or our support team

2.2 Information We Collect Automatically

Usage Information

When you use Skillstore, we automatically collect:

  • Platform Activity: Videos watched, content purchased, searches, profiles visited
  • Engagement Data: Likes, follows, comments, shares, completion rates
  • Device Information: Device type, operating system, browser type and version
  • Location Data: IP address, country/region (not precise location)
  • Time Data: Timestamps of activity, time zone, session duration

Technical Information

  • IP Address: Your device's internet protocol address
  • Browser & Device Data: Browser type, device identifiers, screen resolution
  • Referral Sources: How you arrived at our platform (search engines, ads, links)
  • UTM Parameters: Marketing campaign tracking data

Cookies & Similar Technologies

We use cookies, pixels, and similar technologies. See Section 5 for detailed information.

2.3 Information from Third Parties

We may receive information about you from:

Social Media Platforms

  • If you connect social media accounts: Profile information, follower counts
  • If you interact with our social posts: Public profile information

Payment Processors

  • Stripe and PayPal provide transaction confirmation and fraud prevention data
  • We do not receive full payment card details

Analytics & Marketing Services

  • Google Analytics: Website usage data
  • Advertising platforms: Ad performance, conversion data

Business Tools

  • HighLevel: Marketing automation data
  • Slack: Team collaboration data (internal use)

3. HOW WE USE YOUR INFORMATION

3.1 Provide Our Services

Platform Operation:

  • Create and manage your account
  • Enable you to upload, publish, and monetize content (Creators)
  • Enable you to discover, purchase, and access content (Skill Builders)
  • Process transactions and payments
  • Display your profile and content to other users
  • Facilitate Creator-Skill Builder communication

Marketplace Features:

  • Show relevant content recommendations
  • Display Creator profiles and content in search results
  • Enable following, liking, and social features
  • Provide analytics to Creators (views, engagement, demographics)

Data Access for Creators:

  • Provide Creators with follower lists and email addresses (see Section 3.5)
  • Show Creators analytics about their audience
  • Enable direct communication between Creators and their followers

How Email Consent Works:

When you unlock Creator content or make a purchase, you have the choice to opt in to marketing emails. We use separate consent mechanisms to give you control over what you receive.

A. Creator Marketing Consent (Optional)

When unlocking content, you'll see a checkbox: ☐ Get updates from [Creator Name] including new skills, promotions, and exclusive content

If you check this box:

  • The Creator can send you marketing emails about their skills, products, and services
  • The Creator can export your email address from their dashboard
  • You're consenting to promotional communications from that specific Creator only
  • You can unsubscribe from that Creator's emails at any time

If you don't check this box:

  • You still get full access to the content you unlocked
  • You still create a Skillstore account with all features
  • You can opt in later through your account settings or after completing the skill
  • The Creator cannot send you marketing emails
  • The Creator can only send you transactional updates about the specific content you unlocked

Your email address is always collected (regardless of consent) to:

  • Create your Skillstore account
  • Provide access to content
  • Send essential service communications
  • Show in the Creator's dashboard

B. Skillstore Platform Marketing Consent (Optional)

We may ask for your consent to receive Skillstore platform updates at various points:

  • After completing skills (if you've already opted into Creator updates)
  • After unlocking your third skill
  • In your account settings (Email Preferences)
  • Through our newsletter landing page at skill.store/newsletter

If you consent to Skillstore platform emails, you'll receive:

  • Weekly skill recommendations based on your interests
  • New creator announcements and highlights
  • Platform feature updates and improvements
  • Curated content collections

Service Communications (Essential - No Consent Required): These emails are necessary for our service and cannot be unsubscribed from:

  • Account verification and security alerts
  • Transaction confirmations and receipts
  • Password resets and account recovery
  • Access notifications for content you've unlocked
  • Responses to your support requests
  • Critical platform updates affecting your access
  • Legal notices and policy changes
  • Waitlist launch notifications (if you joined our waitlist)

Transactional vs Marketing Emails:

Transactional (no consent needed):

  • "Your skill is ready to watch"
  • "Part 2 of [skill name] is now available"
  • "Password reset requested"
  • "Purchase confirmation for [skill name]"

Marketing (requires consent):

  • "Check out my new skill on [topic]"
  • "Exclusive discount on my course"
  • "Weekly newsletter with tips"
  • "New creators you might like"

Managing Your Consent:

  • View and manage all email preferences in Settings → Email Preferences
  • Unsubscribe from any Creator individually without affecting others
  • Unsubscribe from Skillstore platform emails
  • Change preferences anytime
  • Consent records maintained: what you agreed to, when, and where

You can unsubscribe from marketing emails at any time (see Section 7.3).

3.3 Platform Improvement

Analytics & Research:

  • Understand how users interact with our platform
  • Identify popular content and features
  • Conduct user research and surveys
  • Test new features and improvements
  • Analyze trends and usage patterns

Personalization:

  • Recommend relevant content based on your interests
  • Customize your homepage and feed
  • Show content similar to what you've enjoyed
  • Personalize search results

3.4 Marketing & Advertising

Our Own Marketing:

  • Measure effectiveness of our advertising campaigns
  • Show you relevant ads on other platforms (retargeting)
  • Promote features and content you might like
  • Track conversions from our marketing

Creator Marketing:

  • Enable Creators to market to their followers
  • Provide Creators with audience insights
  • Support Creator promotional activities

3.5 How Creators Access and Use Your Data

We share your information with Creators in different ways depending on how you interact with their content. Here's what happens in each scenario:

Email Collection and Marketing Consent

What Happens When You Unlock Content:

Every time you unlock Creator content, two things happen:

  1. Always collected: Your email address and name (100% of users)
  2. Optional consent: Marketing permission (your choice via checkbox)

What the Creator Always Gets (Regardless of Marketing Consent):

Creators receive access to:

  • Profile Information: Your name, username, profile photo
  • Contact Information: Your email address (exportable via CSV)
  • Basic Demographics: Age range, location (where you've provided this)
  • Engagement Metrics: How you interact with their content (views, completion rate, time spent)
  • Purchase History: What you've bought from them and when
  • Platform Activity: When you followed them, liked their content, or left comments

What the Creator Can Do With Your Email:

If You Gave Marketing Consent (checked the box):

  • Send you promotional emails about their new skills, products, and services
  • Add you to their marketing newsletter
  • Send special offers, discounts, and exclusive content
  • Announce new launches and events
  • Include you in email campaigns about their offerings
  • Export your email to use in external email marketing tools

If You Did NOT Give Marketing Consent (left box unchecked):

  • Send transactional updates about the specific content you unlocked (e.g., "Part 2 is now available")
  • Respond to your comments or direct questions
  • Send critical updates about content you've already accessed
  • Cannot send promotional emails about other products or services
  • Cannot add you to marketing newsletters
  • Cannot send general marketing campaigns
  • Cannot use your email for promotional purposes

Your Control Over Creator Marketing:

  • Granular Consent: You decide for each Creator separately
  • Opt-In Anytime: Can grant consent later in Settings → Email Preferences
  • Opt-Out Anytime: Unsubscribe from individual Creators without affecting others
  • Clear Status: Always know which Creators you've consented to
  • Easy Management: One place to control all Creator email preferences

A. Email Unlock (Free Content)

What Happens:

When you provide your email to unlock free Creator content:

  • The Creator receives your name and email address
  • The Creator acts as the data controller for your information
  • Skillstore processes this data on behalf of the Creator (we act as a data processor)
  • The Creator can export your information (CSV download)
  • The Creator may contact you with marketing emails ONLY if you gave consent via checkbox

What Creators Can Access:

  • Your profile information (name, username, profile photo)
  • Your email address (exportable via CSV)
  • Basic demographics (age range, location - where you've provided this)
  • Engagement metrics (how you interact with their content)
  • Marketing consent status (whether you checked the consent box)

Creator's Responsibilities:

  • Respect your marketing consent choice
  • Only send marketing emails if you consented
  • Honor unsubscribe requests immediately
  • Maintain their own privacy policy
  • Comply with data protection laws in their jurisdiction

Your Rights with Creators:

  • Request what data they hold about you
  • Request deletion of your data
  • Withdraw marketing consent anytime
  • Complain to data protection authorities if they misuse your data

How Creators Use Your Data:

Creators can:

  • Export your email address and name
  • Upload your information to their own email marketing platforms (e.g., ConvertKit, Mailchimp, Beehiiv)
  • Send you newsletters, promotional content, and updates about their offerings (only if you consented via checkbox)
  • Communicate with you both on and off the Skillstore platform

Notice Shown to You:

When you unlock content, you'll see:

☐ Get updates from [Creator Name] including new skills, promotions, and exclusive content

By submitting, you agree to our Terms and Privacy Policy.

What This Means:

  • Your email address is collected to create your Skillstore account and provide access
  • Marketing emails are optional - only if you check the box
  • Unchecking the box doesn't affect your access to the content
  • You can change your preference anytime in Settings
  • The Creator can only send you marketing if you consented

Your Rights:

  • Opt in or out of marketing communications from the Creator at any time
  • Request deletion of your data from the Creator
  • Contact the Creator directly about your data (they are the controller)

B. Purchases (Paid Content)

What Happens:

When you purchase content or services from a Creator:

  • Your purchase information (name, email, transaction details, purchase amount) is shared with the Creator
  • The Creator acts as the data controller for your purchase information
  • Skillstore processes payment and order data on behalf of the Creator (we act as a data processor)
  • The Creator may contact you about your purchase, related content, and their products/services
  • Both Skillstore and the Creator handle your data in accordance with their respective privacy policies

What Information is Shared:

  • Your name and email address
  • Transaction details (what you purchased, when, amount)
  • Billing information (as needed for receipts and tax purposes)
  • Access and engagement data related to your purchase

How Creators Use Your Purchase Data:

Creators can:

  • Send you transactional emails (receipts, access instructions, support)
  • Contact you about your purchase and customer support
  • Send you marketing communications about related content and their other offerings (only if you consented via checkbox)
  • Upload your information to their customer management and marketing platforms

Notice Shown at Checkout:

When you make a purchase, you'll see:

☐ Get updates from [Creator Name] including new skills, promotions, and exclusive content

By submitting, you agree to our Terms and Privacy Policy.

What This Means:

  • Your purchase information is shared with the Creator (necessary for fulfilling your order)
  • Marketing emails are optional - only if you check the box
  • Unchecking the box doesn't affect your purchase or access
  • You can change your preference anytime in Settings
  • Transactional emails about your purchase will still be sent (receipts, access confirmations)

Your Rights:

  • Opt out of marketing communications from the Creator at any time
  • Transactional emails (receipts, access confirmations, critical updates) cannot be unsubscribed from - these are necessary for the service
  • Request your purchase data from the Creator
  • Contact the Creator directly about your data (they are the controller)

Creator Obligations

Regardless of how they obtained your data, all Creators must:

  • Provide clear privacy notices to you
  • Honor unsubscribe requests within 30 days
  • Include functional unsubscribe links in all marketing emails
  • Not sell or share your data with third parties without your explicit consent
  • Comply with all applicable privacy laws (including UK GDPR, GDPR, CAN-SPAM, and other regulations)
  • Maintain appropriate security measures to protect your data
  • Respond to your data rights requests (access, deletion, correction)

Data Processing Role:

In both scenarios above, the Creator is the data controller (they determine how your data is used) and Skillstore is the data processor (we process data on the Creator's behalf). This means:

  • The Creator is primarily responsible for how your data is used
  • You should contact the Creator directly to exercise your data rights
  • Both the Creator and Skillstore must comply with data protection laws
  • We have legal agreements with Creators requiring them to protect your data

What We Store About Your Consent:

When you give marketing consent (by checking a consent box), we record and store:

Consent Details:

  • What you consented to: The exact checkbox text you saw and agreed to
  • When you gave consent: Precise timestamp (date and time)
  • Where you gave consent: Which page or feature (checkout, settings, post-skill prompt, newsletter page)
  • Your IP address: At the time of consent
  • Which Creator or service: Specific Creator name or "Skillstore Platform"
  • Consent status: Active, withdrawn, or modified

Consent History:

  • All changes to your consent preferences over time
  • When you withdrew consent (if applicable)
  • When you re-subscribed (if applicable)

Why We Store Consent Records:

This detailed record-keeping serves multiple important purposes:

  1. Legal Requirement: GDPR requires us to demonstrate that we obtained valid consent
  2. Proof of Consent: If challenged, we can show exactly what you agreed to and when
  3. Audit Trail: Provides accountability for both Skillstore and Creators
  4. Your Protection: Proves you weren't added to lists without permission
  5. Creator Protection: Demonstrates Creators followed proper consent procedures
  6. Dispute Resolution: Clear records if there's any question about consent

Your Rights Regarding Consent Records:

You have the right to:

  • View your consent history: See all consents you've given in Settings → Email Preferences
  • Request a copy: Get detailed records of all your consents via [email protected]
  • Withdraw consent: Stop marketing emails anytime (takes effect immediately)
  • Challenge records: If you believe our records are inaccurate, contact us
  • Data portability: Export your consent records along with other personal data

How We Use Consent Records:

We use these records to:

  • Ensure only consented users receive marketing emails
  • Filter email lists for Creators (showing who consented vs who didn't)
  • Honor unsubscribe requests accurately
  • Respond to regulatory inquiries from ICO or other authorities
  • Resolve disputes about email consent
  • Audit our own compliance

Access to Consent Records:

  • You: Full access to your own consent history in Settings
  • Creators: Can see which of their followers consented (but not full details like IP)
  • Skillstore Staff: Limited access for support and compliance purposes only
  • Regulators: May request access during audits or investigations

Retention of Consent Records:

  • Active consents: Retained as long as consent remains active
  • Withdrawn consents: Retained for 3 years after withdrawal (legal requirement)
  • Deleted accounts: Consent records deleted after 90 days (except where legal retention required)
  • Legal disputes: Retained for duration of dispute + applicable statute of limitations

Compliance:

  • Comply with legal obligations and regulations
  • Respond to legal requests (court orders, subpoenas)
  • Enforce our Terms of Service
  • Protect intellectual property rights

Security & Fraud Prevention:

  • Detect and prevent fraud, spam, and abuse
  • Investigate security incidents
  • Verify identity and prevent unauthorized access
  • Maintain platform integrity

4. HOW WE SHARE YOUR INFORMATION

4.1 Information Shared with Creators

We share your information with Creators in two ways:

Free Content (Email Unlock): When you provide your email to unlock free content, Creators receive your name, email address, and engagement data. They may use this to contact you with marketing communications. See Section 3.5A for full details.

Purchases: When you buy content or services from a Creator, they receive your purchase information (name, email, transaction details) and may contact you about your purchase, related content, and their offerings. See Section 3.5B for full details.

In both cases, the Creator acts as the data controller and Skillstore processes data on their behalf as a data processor.

4.2 Public Information

Publicly Visible on Platform:

  • Your profile (name, username, photo, bio)
  • Content you upload (videos, comments, likes - depending on settings)
  • Your followers and who you follow (depending on settings)
  • Public messages and comments

You can control visibility in your privacy settings.

4.3 Service Providers

We share information with trusted service providers who help us operate our platform:

Email & Communications:

  • Resend: Email delivery
  • HighLevel: Customer relationship management, marketing automation

Analytics:

  • Google Analytics: Website and app usage analysis
  • Vercel Analytics: Platform performance monitoring

Advertising & Marketing:

  • Meta (Facebook): Advertising, conversion tracking
  • TikTok: Advertising, pixel tracking
  • LinkedIn: Advertising, insight tag
  • X (Twitter): Conversion tracking
  • Pinterest: Tag and conversion tracking
  • Snapchat: Pixel tracking

Infrastructure:

  • Vercel: Website and app hosting
  • Supabase: Database and backend services
  • Cloudflare: Video hosting, CDN, security

Community & Collaboration:

  • Slack: Team communication and collaboration platform

Payments:

  • Stripe: Payment processing (Creators and platform)
  • PayPal: Alternative payment processing

All service providers are contractually required to protect your data and use it only for the purposes we specify.

We may disclose your information when required by law or to:

  • Comply with legal process (subpoenas, court orders)
  • Respond to government or regulatory requests
  • Enforce our Terms of Service or other agreements
  • Protect our rights, property, or safety
  • Protect the rights, property, or safety of our users
  • Prevent fraud or criminal activity

4.5 Business Transfers

If Skillstore is involved in a merger, acquisition, asset sale, or bankruptcy:

  • Your information may be transferred to the successor entity
  • We will notify you via email and/or platform notice before your information is transferred
  • The successor entity must honor this Privacy Notice

We may share your information with other parties when you give us consent:

  • Connecting third-party accounts (social media, calendar apps)
  • Participating in surveys or research studies
  • Entering contests or promotions

4.7 What We Don't Do

We do NOT:

  • Sell your personal information to third parties
  • Rent your email list to marketers
  • Share your information for others' marketing purposes without consent
  • Use your payment information for anything other than processing transactions

5. COOKIES & TRACKING TECHNOLOGIES

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us:

  • Remember your preferences and login status
  • Understand how you use our platform
  • Deliver personalized content and advertising
  • Improve our services

We also use similar technologies like pixels, web beacons, and local storage.

5.2 Types of Cookies We Use

Essential Cookies (Always Active)

These cookies are necessary for our platform to function and cannot be disabled.

Purpose:

  • Maintain your login session
  • Remember your cookie preferences
  • Enable core platform features
  • Provide security and fraud prevention
  • Process transactions

Duration: Session or up to 1 year

Examples:

  • auth_token - Keeps you logged in
  • session_id - Maintains your session
  • cookie_consent - Remembers your cookie preferences

Analytics Cookies

These cookies help us understand how visitors use our platform.

Purpose:

  • Track page views and user journeys
  • Measure platform performance
  • Identify popular content and features
  • Understand user demographics and behavior
  • Generate usage statistics and reports

Services We Use:

  • Google Analytics
  • Vercel Analytics

Data Collected:

  • Pages visited and time spent
  • User flow through the platform
  • Device and browser information
  • Referral sources
  • Geographic location (country/region)

Duration: Up to 2 years

Control: You can opt out via our Cookie Settings or Google Analytics Opt-out

Marketing Cookies

These cookies enable personalized advertising and measure campaign effectiveness.

Purpose:

  • Deliver targeted advertisements
  • Measure ad campaign performance
  • Track conversions from ads
  • Enable retargeting
  • Share data with advertising partners

Services We Use:

  • Meta (Facebook) Pixel: Facebook/Instagram advertising
  • TikTok Pixel: TikTok advertising
  • LinkedIn Insight Tag: LinkedIn advertising
  • X (Twitter) Conversion Tracking: Twitter/X advertising
  • Pinterest Tag: Pinterest advertising
  • Snapchat Pixel: Snapchat advertising

Data Collected:

  • Ad clicks and impressions
  • Conversion events (signups, purchases)
  • UTM tracking parameters
  • Social media engagement
  • Device and browser information

Duration: Up to 2 years

Control: You can opt out via our Cookie Settings or:

Session Cookies:

  • Deleted when you close your browser
  • Used for login sessions and temporary preferences

Persistent Cookies:

  • Remain on your device for a set period
  • Most expire within 1-2 years
  • Used for login persistence, analytics, and advertising

Our Cookie Settings

You can control your cookie preferences at any time:

  1. Click "Cookie Settings" in our website footer
  2. Choose which categories to allow (Essential cookies are always on)
  3. Save your preferences

Your preferences are stored locally and will be remembered on future visits.

Browser Settings

You can also control cookies through your browser:

Chrome: Settings > Privacy and security > Cookies and other site data

Firefox: Settings > Privacy & Security > Cookies and Site Data

Safari: Preferences > Privacy > Manage Website Data

Edge: Settings > Cookies and site permissions > Cookies and site data

Note: Disabling essential cookies may prevent core website functionality.

5.5 Impact of Disabling Cookies

Essential Cookies Disabled:

  • You may not be able to log in
  • Shopping cart may not work
  • Security features may be compromised
  • Some pages may not load correctly

Analytics Cookies Disabled:

  • We can't analyze platform usage
  • We can't improve user experience based on data
  • No impact on your use of the platform

Marketing Cookies Disabled:

  • You'll see the same number of ads
  • Ads may be less relevant to your interests
  • We can't measure ad effectiveness
  • You won't be retargeted with our ads

5.6 Third-Party Cookies

Some cookies are set by third-party services we use. These are governed by the third party's privacy policy:

5.7 Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature. Currently, there is no industry standard for how to respond to DNT signals. We do not respond to DNT signals at this time.

6. DATA STORAGE & SECURITY

6.1 Where We Store Your Data

Primary Storage:

  • Servers: Vercel and Supabase (secure cloud infrastructure)
  • Video Content: Cloudflare (CDN with global distribution)
  • Backups: Encrypted backups in secure locations

Geographic Location:

  • Data may be stored on servers in the UK, EU, and US
  • We use appropriate safeguards for international transfers (see Section 8)

6.2 Security Measures

We implement industry-standard security measures to protect your information:

Technical Measures:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest
  • Access Controls: Role-based access, multi-factor authentication for team
  • Network Security: Firewalls, DDoS protection, intrusion detection
  • Regular Updates: Security patches applied promptly
  • Monitoring: 24/7 monitoring for suspicious activity

Organizational Measures:

  • Employee Training: Regular data protection and security training
  • Access Limitation: Only authorized personnel can access personal data
  • Confidentiality Agreements: All employees sign NDAs
  • Incident Response: Documented procedures for security breaches
  • Third-Party Audits: Regular security assessments

Payment Security:

  • We do NOT store full payment card details
  • Payment processing handled by PCI-DSS compliant providers (Stripe, PayPal)
  • Only transaction confirmations stored

6.3 Data Retention

We retain your information for as long as necessary to:

  • Provide our services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

Specific Retention Periods:

Active Accounts:

  • Retained as long as your account is active
  • Plus reasonable period to allow account reactivation

Deleted Accounts:

  • Most data deleted within 90 days of account deletion
  • Some data retained longer for legal compliance:
    • Transaction records: 6 years (UK tax law)
    • Copyright strikes: Permanent record
    • Legal disputes: Duration of dispute + statute of limitations

Backups:

  • Data in backups deleted according to backup retention schedule (typically 30-90 days)

Marketing Data:

  • Retained until you unsubscribe or 3 years of inactivity
  • Waitlist data retained until you request deletion

6.4 Security Breaches

In the unlikely event of a data breach:

  • We will notify affected users within 72 hours (as required by UK GDPR)
  • We will notify the ICO (UK Information Commissioner's Office)
  • We will provide information about the breach and steps we're taking
  • We will offer guidance on how you can protect yourself

7. YOUR RIGHTS & CHOICES

Under UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal information.

7.1 Right to Access

What it means: You can request a copy of all personal data we hold about you.

How to exercise: Email [email protected] with "Data Access Request" in the subject line.

What you'll receive:

  • Copy of your personal data in a commonly used format
  • Information about how we use your data
  • Who we share it with
  • How long we'll keep it

Timeline: Within 30 days of your request

7.2 Right to Rectification

What it means: You can correct inaccurate or incomplete information.

How to exercise:

  • Update your profile directly in Account Settings
  • Or email [email protected] with corrections

Timeline: We'll update your information within 30 days

7.3 Right to Erasure ("Right to be Forgotten")

What it means: You can request deletion of your personal data in certain circumstances.

How to exercise: Email [email protected] with "Deletion Request" in the subject line.

What happens:

  • Your account and most data deleted within 90 days
  • Some data may be retained for legal compliance (see Section 6.3)
  • If you're a Creator with active payouts, those must be processed first

Note: If you have purchased content, Creators may retain transaction records for tax purposes.

7.4 Right to Data Portability

What it means: You can receive your data in a structured, machine-readable format and transfer it to another service.

How to exercise: Email [email protected] with "Data Portability Request" in the subject line.

What you'll receive:

  • Your profile information
  • Your content uploads (if Creator)
  • Your purchase history
  • Your engagement data
  • Format: JSON or CSV

Timeline: Within 30 days of your request

7.5 Right to Restriction

What it means: You can limit how we process your data in certain circumstances.

When applicable:

  • You contest the accuracy of data (while we verify)
  • Processing is unlawful but you don't want deletion
  • We no longer need data but you need it for legal claims
  • You've objected to processing (while we verify legitimate grounds)

How to exercise: Email [email protected] with "Processing Restriction Request" in the subject line.

7.6 Right to Object

What it means: You can object to processing based on our legitimate interests.

When applicable:

  • Direct marketing (always honored)
  • Processing for legitimate interests (unless we have compelling grounds)
  • Research and statistics

How to exercise:

  • For marketing: Click "unsubscribe" in any marketing email
  • For other processing: Email [email protected] with "Objection to Processing" in the subject line

What it means: Where we process data based on consent, you can withdraw that consent at any time.

How to exercise:

Effect: We'll stop processing your data for that purpose (but may continue for other legal bases).

7.8 Marketing Communications

Two Types of Marketing Emails:

1. Creator Marketing Emails

  • Consent: Given per Creator when unlocking content via checkbox
  • Manage: Unsubscribe link in Creator emails, or Settings → Email Preferences
  • Scope: Only affects that specific Creator's emails
  • Effect: Other Creators and Skillstore platform emails unaffected

2. Skillstore Platform Marketing Emails

  • Consent: Given separately through post-engagement prompts or settings
  • Manage: Unsubscribe link in Skillstore emails, or Settings → Email Preferences
  • Scope: Only affects Skillstore platform emails
  • Effect: Creator emails unaffected

How to Unsubscribe:

From a Specific Creator:

  1. Click "Unsubscribe" in any email from that Creator (instant, no login required), OR
  2. Go to Settings → Email Preferences → Uncheck that Creator

From Skillstore Platform Emails:

  1. Click "Unsubscribe" in any Skillstore platform email (instant, no login required), OR
  2. Go to Settings → Email Preferences → Uncheck "Skillstore Updates"

From All Marketing: Go to Settings → Email Preferences → Uncheck all Creators and Skillstore platform

Effect of Unsubscribing:

  • Takes effect immediately (within 1 hour maximum)
  • You'll still receive essential service emails (account, transactions, security)
  • You can still access all content you've unlocked
  • You remain a platform member with full access
  • Your email remains visible in Creator dashboards (for platform functionality)
  • You can resubscribe anytime in Settings

What You Cannot Unsubscribe From: These are essential for the service to function:

  • Account verification emails
  • Transaction confirmations
  • Password resets
  • Critical platform updates
  • Legal notices
  • Waitlist launch notifications (if applicable)

Processing Time:

  • Unsubscribe requests processed immediately (real-time)
  • Maximum 10 business days for complete removal from all systems (per CAN-SPAM Act)
  • External systems (if Creator exported your email) managed by Creator

Manage cookies:

  • Click "Cookie Settings" in website footer
  • Choose which categories to allow
  • Essential cookies cannot be disabled

Browser controls:

  • Adjust browser settings to block cookies
  • Note: May affect platform functionality

7.10 How to Exercise Your Rights

Email: [email protected]
Subject line: Include the specific right you're exercising (e.g., "Data Access Request")
Information needed:

  • Your full name
  • Email address associated with your account
  • Username (if applicable)
  • Description of your request

Timeline:

  • We respond within 30 days
  • Complex requests may take up to 60 days (we'll notify you)

Verification:

  • We may ask for additional information to verify your identity
  • This protects your data from unauthorized access

No fee:

  • Exercising your rights is free
  • We may charge a fee for excessive or repetitive requests

8. INTERNATIONAL DATA TRANSFERS

8.1 Where Your Data May Go

Skillstore is based in the UK, but we use service providers that may store or process data outside the UK/EEA, including:

  • United States (Vercel, Supabase, Stripe, analytics providers)
  • European Union (various service providers)
  • Other countries where our service providers operate

8.2 Safeguards for International Transfers

When we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs):

  • We use European Commission-approved SCCs with service providers
  • These provide contractual guarantees for data protection

Adequacy Decisions:

  • We transfer data to countries with UK adequacy decisions where available
  • These countries are deemed to have adequate data protection laws

Additional Safeguards:

  • Encryption of data in transit and at rest
  • Access controls and authentication requirements
  • Regular audits of service providers
  • Data processing agreements with all processors

8.3 US Users and Compliance

For US-based users:

CAN-SPAM Act Compliance:

  • All marketing emails include our physical address
  • "Unsubscribe" link in every marketing email
  • Unsubscribe requests honored within 10 business days
  • No misleading subject lines or sender information

State Privacy Laws: As we grow, we monitor compliance obligations with various US state privacy laws (California CCPA, Virginia CDPA, Colorado CPA, etc.) and will update our practices accordingly.

9. CHILDREN'S PRIVACY

9.1 Age Requirement

Our services are intended for users aged 18 and older. We do not knowingly collect information from anyone under 18.

By using Skillstore, you represent and warrant that you are at least 18 years old.

9.2 If We Learn of Underage Users

If we discover that someone under 18 has provided us with personal information:

  • We will delete their account
  • We will delete their personal data from our systems
  • We will notify the parent/guardian if possible

9.3 Parental Notice

If you believe your child under 18 has created an account or provided information to us:

  • Contact us immediately at [email protected]
  • Include: Child's name, email, username, and date of birth
  • We will delete the account and data promptly

Our platform may contain links to third-party websites, services, or apps:

  • Creator websites and social media profiles
  • Payment processor login pages
  • Social media platforms
  • Partner services

Important: This Privacy & Cookie Notice does not apply to those external sites.

10.2 Third-Party Privacy Practices

We are not responsible for:

  • Privacy practices of third-party websites
  • Content on external sites
  • How third parties use your information

Recommendation: Review the privacy policies of any external sites you visit.

10.3 Social Media Features

Our platform includes social media features (share buttons, embedded content). These features may:

  • Collect your IP address
  • Track which pages you visit on our platform
  • Set cookies
  • Be hosted by the social media company

Your interactions with these features are governed by the privacy policies of the companies providing them.

11. CHANGES TO THIS POLICY

11.1 Updates

We may update this Privacy Notice from time to time to reflect:

  • Changes in our practices
  • New features or services
  • Legal or regulatory requirements
  • Industry best practices

11.2 Notification of Changes

Material Changes: When we make significant changes, we will notify you:

  • Email to your registered email address (at least 30 days before changes take effect)
  • Prominent notice on the platform
  • Pop-up or banner notification

Non-Material Changes:

  • Updated "Last Updated" date at top of policy
  • Posted on our website
  • No advance notice required

11.3 Your Acceptance

By continuing to use Skillstore after changes take effect, you accept the updated Privacy Notice.

If you don't agree with changes, you should stop using our services and may delete your account.

11.4 Version History

We maintain previous versions of this policy for reference. Contact us if you need to review a previous version.

12. CONTACT US

12.1 Privacy Questions

For questions about this Privacy Notice or our data practices:

Email: [email protected]
Subject line: "Privacy Inquiry" or specific request type

12.2 General Support

For general questions or support:

Email: [email protected]
Response time: 24-48 hours for most inquiries

12.3 Company Information

SKILLSTORE LTD
Company Number: 16495005
Registered Office: 4th Floor, 205 Regent Street, London, England, W1B 4HB

12.4 Data Protection Officer

For data protection inquiries:

Email: [email protected]
Attention: Data Protection Officer

12.5 Complaints

If you're not satisfied with how we handle your data:

UK Users: You can lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk/make-a-complaint/
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

EU Users: Contact your local data protection authority.

This section provides the text for your website's cookie consent banner.

Allow cookies from Skillstore on this browser?

Skillstore uses cookies and similar technologies to provide, improve, protect, and analyze our services. Essential cookies are necessary for our site to work as intended.

By selecting "Allow All," you consent to optional cookies for analytics and marketing purposes. These help us understand platform usage, personalize your experience, and show you relevant content and ads.

You can manage your preferences anytime in Cookie Settings.

Learn More | [Cookie Settings] | [Decline Optional] | [Allow All]

SUMMARY

We collect:

  • Information you provide (name, email, profile, content)
  • Information from your use (engagement, preferences, analytics)
  • Cookies and tracking data

We use it to:

  • Provide our marketplace and services
  • Enable Creators to reach and engage their audience
  • Improve our platform
  • Send communications
  • Comply with legal obligations

We share with:

  • Creators (when you follow or purchase from them)
  • Service providers (who help us operate)
  • Legal authorities (when required)

Your rights:

  • Access, correct, delete your data
  • Object to processing
  • Withdraw consent
  • Control cookies
  • Unsubscribe from marketing

Contact: [email protected]

This Privacy Notice was last updated on 2025-11-10 and is effective as of 2025-11-10.

© 2025 SKILLSTORE LTD. All rights reserved.