Privacy Policy

Langford ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. If you have any questions or concerns about this policy, or our practices with regard to your personal information, please contact us at privacy@langford.app.

We collect information you provide directly to us, such as: • Account information: name, email address, password, and profile details. • Learning data: tracks selected, lessons completed, quiz responses, streaks, XP, and certificates earned. • Payment information: processed securely by our payment provider (Stripe). We do not store full card details. • Communications: emails, support messages, and feedback you send us. • Device and usage information: IP address, browser type, operating system, and pages visited, collected via standard server logs and cookies. We do not collect sensitive personal information (e.g., race, religion, health data) unless explicitly provided by you.

We use the information we collect to: • Provide, personalise, and improve the Langford platform and your learning experience. • Send you progress updates, streak reminders, and lesson recommendations. • Process payments and manage subscriptions. • Respond to your enquiries and provide customer support. • Monitor and protect the security and integrity of our platform. • Comply with legal obligations. We do not sell your personal data to third parties.

We may share your information only in the following circumstances: • With service providers who assist us in operating our platform (e.g., cloud hosting, analytics, payment processing) under strict data processing agreements. • With your organisation, if you access Langford through a Langford for Business or Langford for Schools subscription (organisation admins may see aggregated progress data). • If required by law, court order, or governmental authority. • In connection with a merger, acquisition, or sale of assets, where your data would be transferred as a business asset. We require all third parties to respect the security of your data and treat it in accordance with the law.

We use cookies and similar tracking technologies to collect and use personal information about you. Specifically, we use: • Essential cookies: required for the platform to function (session management, authentication). • Analytical cookies: to understand how users interact with our platform (e.g., Google Analytics with IP anonymisation). • Preference cookies: to remember your settings and preferences. You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

Depending on your location, you may have the following rights regarding your personal data: • Right to Access: request a copy of your personal data we hold. • Right to Rectification: request correction of inaccurate or incomplete data. • Right to Erasure: request deletion of your personal data ("right to be forgotten"). • Right to Portability: request your data in a structured, machine-readable format. • Right to Object: object to processing based on legitimate interests. • Right to Restrict Processing: request we limit the processing of your data. To exercise any of these rights, contact us at privacy@langford.app. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal information against accidental loss, unauthorised access, or disclosure. These include encryption at rest and in transit (TLS 1.3), regular security audits, and strict access controls. We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time.

Langford operates globally. Your information may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses for EU/UK data transfers).

The standard Langford platform is intended for users aged 16 and over. Langford for Schools provides an age-appropriate, COPPA and GDPR-compliant environment for younger learners, operated under the supervision of their educational institution. We do not knowingly collect personal information from children under 13 outside of the Schools product. If you believe we have inadvertently collected such information, please contact us immediately.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer: Email: privacy@langford.app Mail: Langford Privacy Team, Langford Ltd, [Address], United Kingdom For EU/UK residents, you also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK).