Privacy Policy

1. Overview

Recolearn Limited (“Recolearn”, “we”, “us”) provides an AI-powered, white-label learning management platform. We respect your privacy and handle personal data in line with the UK GDPR, EU GDPR and India’s DPDPA. When our customers (training businesses) run academies on Recolearn, they are the data controller for their learners’ data and we act as their processor.

2. Information we collect

We collect only what we need to provide and improve the service:

• Account data — name, email, phone, company, role.
• Content you upload — courses, assessments, media and learner records.
• Usage data — pages visited, features used, device and browser information.
• Payment data — processed by our payment partners (Razorpay, Stripe); we do not store full card numbers.
• Communications — messages you send us and support requests.

3. How we use information

• To provide, operate and secure the platform.
• To process payments and manage subscriptions.
• To personalise learning and improve our AI features.
• To communicate service updates, and (with consent) marketing.
• To comply with legal obligations and prevent abuse.

4. Legal bases (GDPR)

We rely on: performance of a contract (to deliver the service), legitimate interests (to secure and improve the platform), consent (for marketing and non-essential cookies), and legal obligation (tax, accounting and compliance).

5. Cookies & tracking

We use essential cookies to run the site and, with your consent, analytics and marketing cookies. You can manage your choices any time via the cookie banner. See our GDPR & Data Protection page for the full cookie categories.

6. Sharing & sub-processors

We share data only with vetted processors who help us run the service — hosting, payments, email/SMS/WhatsApp delivery, analytics and AI providers — under data-processing agreements. A current sub-processor list is available on request.

7. Data retention

We keep personal data only as long as needed to provide the service and meet legal obligations. When you close an account we delete or anonymise data within 90 days, unless law requires longer (e.g. invoices).

8. Security

Data is encrypted in transit (TLS) and at rest (AES-256), hosted on bank-grade infrastructure with access controls, audit logging and a 99.95% uptime commitment. Course content is protected with DRM and device controls.

9. International transfers

Where data moves across borders, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

10. Your rights

Subject to law, you can access, correct, delete, port or restrict your data, object to processing, and withdraw consent. To exercise these, email info@recolearn.com. If Recolearn is acting as a processor for an academy, we will direct your request to that academy (the controller).

11. Children’s data

Academies serving minors must obtain the consent required by law. Minor data is private-by-default on the platform, and we provide controls for guardians and administrators.

12. Changes

We may update this policy; material changes will be notified on this page and, where appropriate, by email. Continued use after changes means you accept the updated policy.

Questions about this document? Email info@recolearn.com or write to our UK or India office (addresses in the footer).