Privacy Policy
How we collect, use, and protect your personal data. Last updated: 21 September 2026.
1. Who We Are
EduGaims is an audio-immersive mental simulation platform for healthcare education, developed in Oxford, United Kingdom. When we say “we”, “us”, or “EduGaims”, we mean the operators of this platform and website.
If you have questions about this policy, contact us at edugaims@gmail.com.
2. Data We Collect
| Category | Fields | Purpose |
|---|---|---|
| Personal information | Full name, email address | Account creation, login, communication |
| Authentication | Password (bcrypt-hashed) | Secure login — never stored in plain text |
| Learning activity | Enrolments, progress, completion status | Track learner progress and resume sessions |
| Orders | Module name, amount, currency, Stripe transaction ID | Purchase records and refund processing |
| Assessments | Pre/post module responses | Measure learning outcomes |
| Role | Learner / Educator / Admin | Access control |
| Timestamps | Account creation, enrolment, order dates | Audit trail |
We do not currently collect IP address logs, device fingerprints, analytics or tracking cookies, or geolocation data.
3. Payment Processing & PCI-DSS
All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. Your card details are entered directly into Stripe’s secure payment form and are never received, stored, or processed by EduGaims.
We retain only a transaction reference identifier provided by Stripe to link your account to your payment history. For details on how Stripe handles your payment data, please refer to Stripe’s Privacy Policy.
4. How We Use Your Data
We process your data on the following lawful bases:
- Contract — to provide you with the learning platform, process enrolments, and track your progress.
- Legitimate interest — to improve our platform, respond to support queries, and ensure security.
- Consent — for optional analytics cookies (if enabled) and marketing communications.
5. Data Sharing
We do not sell your personal data. We share data only with the following third-party processors:
- Stripe — payment processing
- Neon (PostgreSQL) — database hosting
- Vercel — website hosting and deployment
Each processor is contractually required to protect your data in accordance with applicable laws.
6. Data Retention
We retain your personal data for as long as your account is active. If you request deletion, we will remove your data within 30 days, except where we are required by law to retain it (e.g. financial records for tax purposes).
7. Cookies
EduGaims uses essential cookies to maintain your login session and ensure site security. These are strictly necessary and cannot be disabled.
We may also use analytics cookies (e.g. Google Analytics) to understand how visitors use our site. Analytics cookies are only activated with your explicit consent.
You can manage your cookie preferences at any time via the “Cookie Settings” link in our website footer.
8. Your Rights (GDPR)
Under UK GDPR and the Data Protection Act 2018, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data.
- Restriction — ask us to limit how we process your data.
- Objection — object to processing based on legitimate interest.
- Portability — request your data in a machine-readable format.
To exercise any of these rights, email edugaims@gmail.com. We will respond within one month.
9. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use of the platform after changes constitutes acceptance of the updated policy.