Last Updated: April 2026
This Privacy Policy explains how Eduk8agentic collects, uses, stores, and protects your personal data when you use our websites, community platforms, digital products, and services.
| Category | Data | When Collected |
|---|---|---|
| Identity | Full name | Account creation, purchase, community signup |
| Contact | Email address, phone number, postal address | Account creation, purchase, checkout |
| Financial | Payment card details (processed by our payment provider — we do not store card numbers), transaction history, invoices | Purchase, subscription |
| Account | Login credentials (encrypted), membership status, subscription plan | Account creation, ongoing use |
| Community | Posts, comments, messages within community platforms | Active participation |
| Technical | IP address, browser type, device type, operating system, pages visited, time on site | Automatically when using our websites |
| Communication | Email correspondence, support requests, feedback | When you contact us |
| Purpose | Legal Basis (UK/EU GDPR) |
|---|---|
| Provide our products and services to you | Performance of a contract |
| Process payments and manage subscriptions | Performance of a contract |
| Send you service-related communications (confirmations, updates, support) | Performance of a contract / Legitimate interest |
| Send you marketing communications | Consent (you can opt out at any time) |
| Manage your community membership and access | Performance of a contract |
| Improve our products, services, and website | Legitimate interest |
| Prevent fraud and protect our legal rights | Legitimate interest / Legal obligation |
| Comply with legal and regulatory obligations | Legal obligation |
We use trusted third-party service providers to help deliver, operate, and improve our services. These providers may process your data on our behalf. The categories listed below are illustrative and not exhaustive — we may use additional providers as our business and technology evolve.
| Category | Purpose | Data That May Be Shared |
|---|---|---|
| Payment Processors | Securely process payments, manage subscriptions, handle refunds | Name, email, payment details, billing address |
| Customer Relationship Management (CRM) | Manage customer records, membership status, communications, and support | Name, email, phone, membership status, interaction history |
| Community & Learning Platforms | Host online communities, courses, and member interactions | Name, email, community activity, course progress |
| AI & Automation Tools | Automate operational workflows, generate communications, process data to deliver and improve our services | Name, email, membership data, interaction data as needed for the specific operation |
| Website & Application Hosting | Host our websites, run serverless functions, process web requests | Technical data (IP address, request logs) |
| Email & Communication Services | Send transactional emails, service notifications, and marketing (with consent) | Name, email, communication preferences |
| Analytics & Performance | Understand how visitors use our website and services to improve them | Anonymised usage data, device information |
Important: These categories are not limited to the examples above. As a technology-driven business, we may integrate with additional third-party tools, APIs, and platforms to operate, automate, and improve our services. In all cases, we ensure that any provider with access to your personal data is bound by appropriate data protection obligations.
We do not sell, rent, or trade your personal data to any third party. Data is shared only where necessary to deliver our services or comply with legal obligations. A full list of our current sub-processors is available on request by emailing learn@eduk8agentic.com.
As a UK-based business, your data is primarily processed in the United Kingdom by Rubykins Ltd (trading as Eduk8agentic). Some of our third-party service providers may process data in the United States or EU/EEA. We ensure appropriate safeguards are in place for all transfers, including:
If you are based in the MENA region, your personal data will be transferred to and processed in the United Kingdom. The transfer safeguard applied in your country is set out below. By ticking the consent checkbox at purchase, you explicitly consent to this transfer.
| Country | Applicable Law | Transfer Mechanism Used |
|---|---|---|
| Morocco | Loi 09-08 (Art. 43–44), supervised by CNDP | Explicit consent obtained at point of purchase + UK provides adequate protection (UK GDPR, equivalent to EU GDPR recognised by CNDP). Transfer is limited to data strictly necessary to deliver your membership. |
| UAE | Federal Decree-Law No. 45 of 2021 (PDPL), UAE Data Office | Adequate protection (UK GDPR framework) + contractual guarantees with all processors. No prior UAE Data Office authorisation required for transfers to adequacy-level destinations. |
| Saudi Arabia | Personal Data Protection Law (PDPL) 2021, supervised by SDAIA | Contractual necessity (processing required to deliver the purchased service) + Standard Contractual Clauses (SCCs) with all third-party processors. No SDAIA authorisation required for contractual-necessity transfers. |
| Egypt | Law No. 151 of 2020, supervised by PDPC | Explicit consent obtained at point of purchase + UK provides equivalent protection under UK GDPR. We process only the minimum data necessary to deliver your membership. Note: Egypt's law carries criminal penalties for non-compliant transfers; we take our obligations under Egyptian law seriously. |
| Qatar | Law No. 13 of 2016, Ministry of Transport and Communications | Adequate law in destination country (UK GDPR). No ministerial permission required for non-sensitive data transfers to jurisdictions with adequate legal protection. |
| Bahrain | PDPL No. 30 of 2018, Ministry of Justice | The United Kingdom is recognised as providing adequate data protection. Transfers are permitted to whitelisted countries providing an equivalent level of protection. |
| Oman | PDPL (Royal Decree 6/2022) | Explicit consent — the only valid transfer mechanism under Omani law. Consent is obtained at point of purchase via the mandatory consent checkbox. You may withdraw consent at any time by emailing learn@eduk8agentic.com, noting this will require cancellation of your membership. |
| Tunisia | Loi Organique No. 2004-63, supervised by INPDP | Explicit consent + adequate protection in destination country (UK GDPR). Transfer limited to data necessary to deliver the service. |
| Jordan | Personal Data Protection Law (2023) | Equivalent protection provided by UK GDPR + explicit consent obtained at point of purchase. |
What data is transferred: name, email address, and membership/account information necessary to provide and administer your subscription. Payment data is handled directly by our payment processor and is not stored by Rubykins Ltd.
Withdrawing consent: You may withdraw your consent to data transfer at any time by contacting us at learn@eduk8agentic.com. Please note that withdrawal of consent will require cancellation of your membership, as we cannot provide the service without processing your data.
| Data Type | Retention Period |
|---|---|
| Account and identity data | For the duration of your account, plus 6 years after closure (UK tax/legal requirements) |
| Transaction and payment records | 6 years from date of transaction (HMRC requirement) |
| Community content (posts, comments) | For the duration of your membership; deleted or anonymised within 90 days of account deletion |
| Marketing preferences | Until you withdraw consent or unsubscribe |
| Technical/analytics data | 26 months (or as configured in our analytics tools) |
| Support correspondence | 3 years from last interaction |
When data is no longer needed, we securely delete or anonymise it.
To exercise your rights, email learn@eduk8agentic.com. We will respond within 30 days.
If you are not satisfied with our response, you have the right to complain to:
To exercise your rights, email learn@eduk8agentic.com. We will respond within 45 days.
Do Not Sell My Information: We do not sell personal information as defined by the CCPA/CPRA.
If you are based in the MENA region, your personal data is processed by Rubykins Ltd in the United Kingdom under UK GDPR. We are a UK-registered company and our data processing obligations are governed by UK law. The following laws may also be relevant to residents of these countries, and we are aware of them:
Your rights under MENA data protection laws generally include:
To exercise your rights, email learn@eduk8agentic.com.
Cross-border transfers: Your data is transferred to and processed in the United Kingdom by Rubykins Ltd. The UK operates under UK GDPR, which provides a level of data protection equivalent to the EU GDPR. The specific transfer mechanism applicable to your country is detailed in Section 5 above. By providing your explicit consent at the point of purchase (via the consent checkbox), you authorise this transfer.
If you have concerns about how your data is handled, you may contact the relevant supervisory authority in your country:
We take reasonable technical and organisational measures to protect your personal data, including:
No system is 100% secure. If we become aware of a data breach that is likely to affect your rights, we will notify you and the relevant authorities as required by law.
Cookies are small text files stored on your device when you visit a website. They help websites function, remember your preferences, and understand how you use the site.
| Type | Purpose | Examples |
|---|---|---|
| Essential | Required for the website to function (login, checkout, security) | Session cookies, authentication |
| Analytics | Help us understand how visitors use our site | Google Analytics (if enabled) |
| Functional | Remember your preferences (language, region) | Preference cookies |
| Marketing | Track effectiveness of our marketing campaigns | Conversion tracking (if enabled) |
You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect the functionality of our website. Most browsers allow you to:
Our services are not directed at individuals under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at learn@eduk8agentic.com.
We reserve the right to update, modify, or replace this Privacy Policy at any time, at our sole discretion, with or without prior notice. Changes may be made for any reason, including changes in applicable law, changes to our services, or changes in how we process data.
When changes are made, we will update the date at the top of this page. Where reasonably practicable, we will notify you of material changes by email or by a notice on our website, but we are under no obligation to do so and accept no liability for any failure to provide such notice.
Your continued use of our services after any updated Policy has been posted constitutes your acceptance of the revised terms. It is your responsibility to check this page periodically. If you do not agree with any changes, your sole remedy is to stop using our services and request deletion of your data by emailing learn@eduk8agentic.com.
For any data protection queries, requests, or complaints, please email learn@eduk8agentic.com. We aim to respond to all requests within 30 days.