Planet Academy
Legal

Privacy Notice

Last updated: August 2026

1. Who we are (data controller)

This Privacy Notice is issued by Planet Web Academy LLC , trading as Planet Academy ("we", "us", "our"), operator of planetacademy.net. We act as the data controller for the personal data described below, meaning we decide why and how that data is processed. You can contact us about any privacy matter at support@planetacademy.net.

2. Categories of personal data we collect

We collect the following categories of personal data:
  • Account data — name or display name, email address, hashed login credentials.
  • Order data — products purchased, order references, invoices and refund history.
  • Support data — messages, attachments and correspondence you send us.
  • Usage and telemetry data — pages viewed, course progress, feature usage.
  • Technical data — IP address, device and browser identifiers, security and audit logs.
We do not collect or store full payment card details. Card and billing data are collected directly by Paddle (see section 5).

3. Why we process it, and our legal basis

  • Creating and running your account and delivering purchased courses and ebooks — legal basis: performance of a contract with you.
  • Customer support and service notifications — legal basis: performance of a contract.
  • Security, fraud prevention and audit logging — legal basis: our legitimate interests in keeping the platform and its users safe.
  • Product improvement and analytics — legal basis: our legitimate interests, or your consent where required for non-essential cookies.
  • Marketing emails — legal basis: your consent, withdrawable at any time.
  • Accounting, tax and legal record-keeping — legal basis: compliance with a legal obligation.

4. Retention periods

  • Account data: for as long as your account is active, then deleted or anonymised within 12 months of account closure.
  • Order and invoice records: retained for 7 years to meet accounting and tax obligations.
  • Support correspondence: 24 months from the last message.
  • Security and audit logs: 12 months.
  • Analytics and usage data: 14 months, then aggregated or deleted.
When data is no longer needed for the purpose it was collected for, we delete or irreversibly anonymise it.

5. Payments and Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and acts as an independent data controller for the personal data it collects to process your payment (billing name, address, country, payment method details and tax identifiers). Paddle handles payment processing, subscription management, invoicing, sales tax and VAT compliance, and billing-related customer support, including refunds. Paddle's own privacy notice is available at paddle.com/legal/privacy. We receive from Paddle only the order confirmation data we need to grant you access and keep our records.

6. Who we share data with

We never sell your personal data. We share it only with:
  • Paddle, our Merchant of Record, for the sale of our products, payments, invoicing, tax compliance and refunds.
  • Service providers (processors) — hosting and database infrastructure, email delivery and product analytics providers, acting on our documented instructions.
  • Professional advisers — accountants and legal advisers, where necessary.
  • Authorities — where we are required to do so by law.

7. International transfers

Some of our providers may process data outside your country or outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses. You can request a copy of the safeguards in place by emailing support@planetacademy.net.

8. Your rights

Subject to applicable law, you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any right, email support@planetacademy.net; we respond within one month. If you are in the UK or EEA you also have the right to lodge a complaint with your local supervisory authority.

9. Cookies

We use strictly necessary cookies to keep you signed in and secure the platform, and analytics cookies to understand how the platform is used. Non-essential cookies are set only with your consent, and you can change your browser settings or contact us to manage your preferences. See our Cookie Policy for the full list.

10. Security

We apply appropriate technical and organisational measures, including encryption in transit, hashed credentials, role-based access controls, row-level database security and audit logging. No online service can be guaranteed to be completely secure, but we review our controls regularly.

11. Changes to this notice

We may update this notice. Material changes will be announced by email or by a notice on the platform before they take effect.