top of page

Privacy & Cookies Policy

​

Effective Date: 19 September 2025

​

1. Introduction

Welcome to The Young Entrepreneurs Academy Limited (“YEA”, “we”, “us”, or “our”).

  • Company number: 13291977

  • Registered office: 93–95 Gloucester Place, London, W1U 6JQ, United Kingdom​

We are committed to protecting your privacy and handling your data securely, in compliance with:

  • The UK General Data Protection Regulation (UK GDPR),

  • The Data Protection Act 2018, and

  • Other applicable UK laws.​

This Privacy Policy explains how we collect, use, store, share, and protect your personal data. It also describes your rights and how you can exercise them.

This policy applies to:

  • Children aged 13–17 who use our platform (with parental/guardian consent where required),

  • Adult learners and users,

  • Customers, suppliers, and staff,

  • Visitors to our website and platform.​

 

2. Data Controller

The Data Controller for your personal data is:
The Young Entrepreneurs Academy Limited
📮 93–95 Gloucester Place, London, W1U 6JQ
📧 info@youngentrepreneurs.academy

​

You have the right to complain at any time to the Information Commissioner’s Office (ICO), the UK data protection regulator: www.ico.org.uk.
We encourage you to contact us first so we can try to resolve any concerns.

​

3. Children’s Data and Parental Consent

  • Our services are designed for children aged 13 and over.

  • Children aged 13–17 may register, but parental or guardian consent is required.

  • Parents/guardians are informed of international transfers and must confirm consent before their child can use the platform.

  • Children have their own data protection rights under UK GDPR and can exercise them directly, or through their parent/guardian.

 

4. Data We Collect

We may collect the following types of personal data:

  • Identity Data: name, date of birth, age, gender, school year, ethnicity, borough.

  • Contact Data: postal address, phone number, email address.

  • Usage Data: information about how you use our website and platform.

  • Marketing & Communications Data: your preferences for receiving updates.

  • Customer Support Data: feedback, survey responses, and queries.

  • Special Category Data: ethnicity (only collected with explicit consent).

  • Aggregated Data: anonymised demographic and usage statistics (not identifying individuals).

 

5. Lawful Basis for Processing

We rely on the following legal bases under UK GDPR:

  • Consent – where you agree to optional uses (e.g. marketing, ethnicity data).

  • Contract – to provide services you sign up for.

  • Legal Obligation – where required by law.

  • Legitimate Interest – where processing is necessary for our operations and your rights are not overridden.

For safeguarding or child protection, we may process and share relevant data with authorities where required by law.

 

6. How We Use Your Data

We use your personal data to:

  • Register and manage your account,

  • Deliver learning content, support, and certification,

  • Communicate updates about your courses,

  • Improve our services through analytics and feedback,

  • Produce anonymised reports on engagement and diversity,

  • Meet legal and safeguarding obligations.

We will not use your data for unrelated purposes without notifying you and explaining the legal basis.

 

7. Sharing Your Data

7.1 Our Platform Providers (Processors)
To operate our services, we share data with trusted providers:

  • Tovuti, Inc. – 775 S Rivershore Ln Suite 200, Eagle, ID 83616, USA (Learning Management System).

  • Wix.com Ltd. – 30 Old Bailey, London, EC4M 7AU, United Kingdom (Website and Content Hosting).

 

7.2 International Transfers

  • Tovuti processes data in the United States.

  • Wix processes and transfers data globally, including to servers in the US, Germany, Finland, Ireland, Netherlands, France, Singapore, Japan, South Korea, and India.

  • Both providers use Standard Contractual Clauses (SCCs) with the UK Addendum and maintain strong security standards.

Parents/guardians are notified of these transfers during the consent process.

 

7.3 Other Sharing
We may also share data:

  • If legally required,

  • To protect children and meet safeguarding obligations,

  • In the event of a merger or acquisition.

 

8. Data Retention

We will retain your personal data for 5 years after your last interaction with YEA, unless:

  • Required by law to keep it longer, or

  • Needed to establish or defend legal claims.

After this period, your data will be securely deleted or anonymised.

 

9. Your Rights

Under UK GDPR, you have the following rights:

  • Right to be informed – about how your data is used.

  • Right of access – to request a copy of your data.

  • Right to rectification – to correct inaccurate or incomplete data.

  • Right to erasure – to request deletion where appropriate.

  • Right to restrict processing – to limit how we use your data.

  • Right to object – to certain uses, including direct marketing.

  • Right to data portability – to receive your data in a machine-readable format.

Children aged 13+ may exercise these rights directly. Parents/guardians may also request on their behalf.

To exercise any rights, email: info@youngentrepreneurs.academy

 

10. Data Security and Breaches

We use appropriate technical and organisational measures to protect your data, including:

  • Password protection and role-based access,

  • Encryption and secure hosting,

  • Data Transfer Impact Assessments (DTIAs) for international transfers.

If a personal data breach occurs that poses a risk to your rights and freedoms, we will:

  • Notify the ICO within 72 hours, and

  • Inform you without undue delay where legally required.

 

11. Marketing and Communications

  • You can opt in to receive news, events, and content updates.

  • You may withdraw consent or unsubscribe at any time.

  • Service-related messages (e.g., account or course updates) will still be sent.

 

12. Cookies

12.1 What Are Cookies?
Cookies are small files placed on your device when you visit our website. They help us improve functionality, remember preferences, and analyse use.

12.2 Types of Cookies We Use

  • Strictly Necessary Cookies – essential for site security and login.

  • Functional Cookies – remember choices and preferences.

  • Analytics Cookies – track site use to improve our services.

  • Marketing Cookies – deliver relevant content and communications.

12.3 Consent and Control

  • When you first visit our site, a cookie banner will ask for your consent (except for strictly necessary cookies).

  • You can manage or withdraw consent at any time through the banner or your browser settings.

12.4 Third-Party Cookies
Some cookies may be set by third-party providers (including Wix and Tovuti). These are subject to their own privacy policies.

12.5 More Information

 

See ICO guidance: https://ico.org.uk/your-data-matters/online/cookies/

 

13. Updates to This Policy

We review this policy regularly. Updates will be posted on our website.

 

This version is dated: 19 September 2025

 

Continued use of our services after changes means you accept the updated policy.

bottom of page