Privacy Policy

Last updated: [Date]

Who we are

Exogi Ltd is a company registered in England and Wales (company number: [number]). Our registered address is [address]. For privacy enquiries, contact privacy@exogi.co.uk.

What data we collect

  • Account data: Name, email address, role, institution
  • Programme data: Session schedules, attendance records, trainee information
  • Usage data: Pages visited, features used (via Cloudflare Web Analytics — no cookies, no personal identifiers)

Why we collect it

We process personal data under the following lawful bases:

  • Contract: To provide the Exogi service as agreed
  • Legitimate interest: To improve the service and communicate product updates
  • Legal obligation: To comply with applicable laws and regulations

How we use it

  • Delivering and maintaining the Exogi service
  • Responding to support and sales enquiries
  • Sending product updates and service notifications (you can opt out)
  • Improving the platform based on usage patterns (anonymised)

Who we share it with

We share data only with the following sub-processors, all of which are GDPR-compliant:

  • Hetzner: Server hosting (UK/EU)
  • Cloudflare: CDN, DNS, and web analytics
  • [Email provider]: Transactional email delivery

We do not sell personal data to third parties.

Where data is stored

All data is stored on servers located in the UK/EU. We do not transfer data outside of these jurisdictions.

How long we keep it

  • Account data: Retained while your account is active, deleted within 30 days of account closure
  • Programme data: Retained while the programme is active, exportable at any time
  • Usage analytics: Aggregated and anonymised, retained indefinitely

Your rights

Under GDPR and the UK DPA 2018, you have the right to:

  • Access a copy of your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Data portability (receive your data in a structured format)
  • Object to processing based on legitimate interest
  • Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email privacy@exogi.co.uk. We respond within 30 days.

Cookies

Cloudflare Web Analytics does not use cookies. We use only essential cookies for session management. See our cookie policy for details.

Changes to this policy

We will notify users by email of any material changes to this privacy policy at least 14 days before they take effect.