SFG Technology and Business Solutions
Academy
Practical AI for SMEs

Legal

Privacy Policy

Last updated: May 2026

1. Who we are

SFG Academy is a learning platform operated by SFG Technology and Business Solutions("we", "us", "our"). Data controller contact: privacy@sfgtechsolutions.com. Registered address and ICO registration number: [add your company address and ICO reg here].

2. What we collect

  • Account data — name, email, job title, avatar, password hash.
  • Learning data — courses enrolled, progress, quiz attempts, notes, bookmarks, certificates.
  • Community data — posts, comments, reactions you create.
  • Billing data — subscription tier, payment status (card details are processed by our payment provider, not stored by us).
  • Usage data — pages viewed, anonymised analytics events, device and browser metadata.

3. Lawful bases (UK & EU GDPR)

  • Contract — to deliver courses, certificates and account services.
  • Legitimate interests — to secure the platform, prevent fraud, and improve learning outcomes.
  • Consent — for non-essential cookies, marketing emails, and optional features.
  • Legal obligation — to retain financial records and respond to lawful requests.

4. Processors we share data with

  • Lovable Cloud (hosting, database, authentication, file storage).
  • Stripe (payment processing — PCI DSS compliant).
  • Lovable Email infrastructure (transactional and authentication emails sent from mail.sfgtechsolutions.com).
  • Google AI / OpenAI (only the content you submit to the AI concierge or course generator; never stored for training).

All processors are bound by data processing agreements and appropriate safeguards for international transfers.

5. Your rights

You may access, correct, export, restrict, or delete your data from Settings, or by emailing privacy@sfgtechsolutions.com. You may also lodge a complaint with the ICO. We respond within 30 days.

6. Data retention

We keep learning records while your account is active and for 24 months after deletion to support certificate verification, unless you request earlier erasure. Billing records are kept for 7 years to comply with UK tax law.

7. Cookies

See our Cookie Policy.

8. Children

SFG Academy is intended for users aged 16 and over. We do not knowingly collect data from children below that age.

9. Changes

We will notify registered users by email of any material change to this policy at least 14 days before it takes effect.