Privacy Policy

Last updated: June 2025

1. Who We Are

Evolvable Academy is a trading name of FCS Consulting Group Ltd, registered in England and Wales (Company No. 17291991), with a registered office at 128 City Road, London, EC1V 2NX. We are the data controller for personal data collected through this website and our course enrolment processes.

We are registered with the Information Commissioner's Office (ICO) as a data controller. If you have any questions about how we handle your data, please contact us at info@evolvableacademy.co.uk.

2. What Data We Collect

Data you provide directly

• Contact enquiries — your name, email address, and message when you use the contact form
• Course enrolment — your name, email address, date of birth (for age verification — all students must be 18+), preferred language or course, and payment details (processed securely by Stripe — we do not store card details)
• Level assessment — your responses to language placement assessments (Language School students only)
• Parental or guardian consent — name and contact details of parent or guardian where the student is under 18
• Communications — any emails or messages you send to us

Data collected automatically

• IP address, browser type, device type, and operating system
• Pages visited, time on site, and referring website
• Session recordings and error logs (for website maintenance only)

3. How We Use Your Data

• To process your course enrolment and manage your student account
• To deliver live sessions and send you joining instructions, course materials, and session reminders
• To respond to your enquiries and provide customer support
• To place you in the correct course level (Language School — level assessment data)
• To verify your age and obtain parental consent where required
• To send administrative communications about your course, including changes to dates or teachers
• To send marketing emails about new courses or offers — only with your explicit consent, and you can opt out at any time
• To comply with our safeguarding obligations and legal duties
• To improve our website and course delivery using anonymised analytics

We will never sell your personal data to any third party. We will never share your data with our financial services lead generation business without your separate, explicit, freely given consent obtained through a separate process.

4. Legal Basis for Processing

• Contract performance — processing necessary to deliver the course you have enrolled on
• Legitimate interests — responding to enquiries, improving our services, and maintaining website security
• Legal obligation — safeguarding records, age verification, and compliance with applicable law
• Consent — marketing emails and optional communications. You can withdraw consent at any time.

5. Who We Share Data With

We share your data only with trusted service providers who help us deliver our courses:

• Zoom — for live session delivery. Zoom processes session data under their own privacy policy.
• Stripe — for payment processing. Stripe is PCI-DSS compliant and we do not store your card details.
• Teachable / Thinkific — our learning management system (LMS) for course hosting and student records.
• Google Workspace — for email and communication. Hosted in the EU/UK.
• HubSpot — our CRM for managing student enquiries and enrolment tracking.

All third-party providers are required to process your data only on our instructions and in accordance with applicable data protection law. We have Data Processing Agreements (DPAs) in place with each provider.

We may also disclose data where required by law, court order, or to protect the safety of our students or staff.

6. How Long We Keep Your Data

• Student enrolment records — 7 years from the end of your last course (for accounting and legal purposes)
• Safeguarding records — retained in accordance with statutory guidance (minimum 25 years for serious concerns)
• Contact enquiries — 2 years from the date of enquiry if no enrolment follows
• Payment records — 7 years (legal requirement)
• Marketing consent records — until you withdraw consent, then deleted within 30 days
• Session recordings — maximum 30 days, then permanently deleted

7. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal retention requirements)
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests or for marketing
• Withdraw consent — withdraw marketing consent at any time by clicking unsubscribe or emailing us

To exercise any of these rights, email info@evolvableacademy.co.uk. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

8. Cookies

We use cookies to operate this website. For full details of the cookies we use and how to control them, please see our Cookie Policy.

9. Contact Us