Last updated: 26 October 2026
InFi Education Hub respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what information we collect, why we collect it, how we use it, how we protect it and what rights you may have regarding your personal information.
It applies to visitors to our website, registered users, individual members, teachers and representatives of schools or educational institutions purchasing or using our services.
We process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable electronic privacy laws.
For the purposes of applicable data protection legislation, the organisation responsible for deciding how and why personal information is processed is the data controller.
Data controller: [Insert full legal name of the individual, company or other legal entity operating InFi Education Hub]
Contact email: enquiries@infieducationhub.com
Website: www.infieducationhub.com
If we operate through a limited company, the registered company name and registered office should be provided here.
The information we collect depends on how you use our website.
When you register for an account, we may collect:
Your name.
Your email address.
Your username.
Your password in securely stored or hashed form.
Your account preferences.
Information necessary to administer your membership.
We do not intend to collect more personal information than is reasonably necessary to operate your account.
When you purchase a membership, we may collect:
The membership type purchased.
The purchase date.
The membership start and expiry dates.
Your order reference.
The payment amount and currency.
Payment status and transaction references.
Relevant billing information.
Information required to process refunds or resolve payment disputes.
Payment card details are normally handled by the payment provider. Whether any payment information is also processed by our website depends on the payment method and technical configuration.
For school memberships, we may collect:
The name of the school or organisation.
The name and contact details of the purchasing representative.
The organisation’s billing information.
Information required to administer the membership.
Where possible, we avoid collecting personal information about students because students do not ordinarily need accounts to receive educational materials from a member teacher or school.
When you visit our website, technical information may be collected automatically, including:
IP address.
Browser type and version.
Device and operating system information.
Website pages visited.
Dates and times of access.
Security and error logs.
Information about website performance.
The precise information collected depends on our hosting provider, security tools, analytics configuration and other technologies used on the website.
If you contact us, we may retain your name, email address, message and any information reasonably necessary to respond to your enquiry or resolve the matter.
We may also retain relevant correspondence relating to memberships, complaints, cancellations or refunds.
We may use personal information for the following purposes:
Account administration: To register users, authenticate accounts and provide access to the appropriate membership.
Membership delivery: To administer membership periods and make eligible resources available.
Payment processing: To process purchases, confirm transactions, administer refunds and investigate payment disputes.
Customer support: To respond to enquiries and resolve technical or account issues.
Website operation: To maintain website functionality, improve usability and manage our educational resource library.
Security and fraud prevention: To detect suspicious activity, protect accounts and investigate suspected misuse.
Legal and regulatory compliance: To maintain necessary records and meet our legal obligations.
Service communications: To send essential messages relating to purchases, membership expiry, account security and changes affecting the service.
Optional marketing: To send promotional communications where permitted by applicable law and, where required, with your consent.
We will not use personal information for purposes that are incompatible with the purposes explained in this policy unless permitted by law and any additional transparency requirements have been met.
Where required by the UK GDPR, we identify a lawful basis for processing personal information.
Depending on the circumstances, these bases may include:
We process information necessary to create and administer your account, deliver your membership, process your purchase and provide customer support under our agreement with you.
We may process information where necessary to comply with applicable legal obligations, including accounting, taxation and legal record-keeping requirements.
We may process certain information where necessary for legitimate business interests, such as maintaining website security, preventing fraud, improving our services and defending legal claims.
We will consider whether those interests are outweighed by your rights and interests.
Where required, we rely on your consent for activities such as certain non-essential cookies or electronic marketing.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
The appropriate lawful basis depends on the particular processing activity. We will not treat consent as the automatic legal basis for every activity.
Payments may be handled by an external payment provider, such as Stripe, if that service is used on our website.
The payment provider may process information required to complete transactions, verify payments, prevent fraud and meet its legal obligations.
Your payment information may be subject to the provider’s own privacy policy and terms.
We receive information necessary to administer your order and membership.
We do not sell your payment information.
The identity of the payment provider used by InFi Education Hub should be confirmed and reflected accurately in this policy.
We may use trusted third-party service providers to operate our website and deliver our services.
Depending on our actual configuration, these may include:
Website hosting providers.
WordPress and membership software providers.
Payment processing services.
Website security and backup providers.
Email delivery services.
Customer support tools.
Website analytics providers.
Cookie consent management tools.
These providers may process personal information on our behalf or for their own purposes, depending on the service and their legal role.
Where a provider processes personal information on our behalf, we will take appropriate steps to ensure that the processing is governed by suitable contractual and security arrangements.
We will not claim that a particular provider is used unless it is actually part of our website or business operations.
Because InFi Education Hub serves customers internationally, personal information may be processed in countries outside the United Kingdom.
For example, our hosting, payment or email providers may operate infrastructure in other countries.
Where personal information is transferred outside the UK, we will take the steps required by applicable data protection law.
Depending on the destination and circumstances, this may include relying on UK adequacy regulations, an appropriate international data transfer agreement or addendum, or another legally recognised transfer mechanism.
Further safeguards may be implemented where required.
You may contact us for further information about relevant international transfers.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including any applicable legal, accounting or reporting requirements.
Retention periods depend on the type of information and the circumstances.
For example:
Account information may be retained while an account remains active and for a reasonable period afterwards where necessary.
Membership and transaction records may be retained for accounting, tax, contractual or legal purposes.
Customer support correspondence may be retained for as long as necessary to resolve enquiries and maintain relevant records.
Security logs may be retained for a period appropriate to the security risks and operational requirements.
Marketing information will be retained in accordance with applicable marketing and data protection requirements.
When information is no longer required, we will take reasonable steps to delete it or anonymise it, subject to applicable legal obligations and legitimate record-retention requirements.
Specific retention periods should be established and documented according to our actual operational needs.
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Depending on our website configuration, these measures may include:
Password protection and access controls.
Secure website connections using HTTPS.
Security updates and maintenance.
Appropriate hosting security.
Backups and recovery procedures.
Access restrictions for administrators.
Monitoring for suspicious activity.
No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, but we will take reasonable steps to protect the information we hold.
If a personal data breach occurs, we will assess our legal obligations and notify affected individuals or the relevant regulator where required.
Depending on the circumstances and applicable law, you may have the right to:
Access: Request a copy of the personal information we hold about you.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of personal information where the legal conditions for erasure are met.
Restriction: Ask us to restrict certain processing activities in circumstances provided by law.
Objection: Object to processing based on legitimate interests or to direct marketing, as applicable.
Data portability: Request certain information in a commonly used, machine-readable format where the legal conditions apply.
Withdraw consent: Withdraw consent where we rely on consent as our lawful basis.
These rights are subject to legal conditions and exceptions. We may need to retain certain information to meet legal obligations or establish, exercise or defend legal claims.
To exercise a right, contact us at:
[Insert privacy contact email address]
We may need to verify your identity before responding.
We will respond within the time limits required by applicable law.
If you have concerns about how we use your personal information, please contact us first so that we can investigate.
You may also have the right to complain to the UK Information Commissioner’s Office (ICO).
Official website: https://ico.org.uk/
You can find information about your data protection rights and the ICO’s complaints procedures on its website.
InFi Education Hub provides educational materials that may be used by teachers, parents and students.
Our membership accounts are intended to be registered and managed by individuals legally able to enter into the relevant membership contract or by authorised representatives of schools and other organisations.
We do not intend to collect personal information directly from students unless it is necessary for a specific service and we have an appropriate lawful basis and safeguards in place.
Teachers and schools should avoid entering unnecessary student personal information into account forms or communications.
If we become aware that we have collected personal information in circumstances where we should not have done so, we will assess the situation and take appropriate steps.
We may occasionally send information about new educational resources, membership offers or developments relating to InFi Education Hub.
Where applicable law requires consent, we will ask for it separately from acceptance of these terms.
You can unsubscribe from marketing emails using the unsubscribe facility provided or by contacting us.
Unsubscribing from marketing communications will not prevent us from sending essential service messages, such as purchase confirmations, account security notifications or information necessary to administer your membership.
Our website may use cookies and similar technologies to support essential website functionality, remember preferences, maintain sessions, improve security and, where configured, measure website performance.
Non-essential cookies and technologies will be used in accordance with applicable consent requirements.
For further details, including information about cookie categories and how to manage your preferences, please read our Cookie Policy.
We may update this policy to reflect changes in our website, business operations, service providers or legal obligations.
The latest version will be published on our website with its updated date.
Where appropriate, we will take reasonable steps to communicate material changes.
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
InFi Education Hub
Data controller: [Insert full legal name]
Address: [Insert business address]
Email: enquiries@infieducationhub.com
Website: www.infieducationhub.com