Privacy Policy - Scholar Saver

SCHOLAR SAVER LTD (“us”, “we”, or “our”) operates the Scholar Saver website and potentially a future mobile application (the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. We are the “data controller” in respect of your personal information.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

1. HOW AND WHEN WE COLLECT PERSONAL INFORMATION ABOUT YOU

We collect and process personal information when you:

Visit our website or use our future app (including when registering, filling in forms, such as signing up for newsletters or the waitlist).
Interact with our Service (e.g., setting goals, tracking budgets, interacting with AI guidance).
Link financial accounts (if this feature is implemented, specific consent will be sought).
Purchase any services or subscriptions from us (if applicable).
Contact us, request information, or provide feedback.
Participate in surveys, research projects, or pilots.
Communicate with us via social media or other third-party platforms.

2. WHAT PERSONAL INFORMATION DO WE COLLECT ABOUT YOU

We may collect and process the following types of information:

Contact Details: Name, email address, telephone number (optional).
Account Information: Username (email), password (hashed), and other authentication details.
Profile Information: University, year of study, course (optional), financial goals, self-reported financial situation/confidence.
Financial Data (with explicit consent if linking accounts): Anonymized transaction data, account balances, income, expenses (used solely for providing the Service and generating insights for you). We do not store raw bank login credentials.
Usage Data: Information about how you use the Service, feature interaction, AI query history (anonymized where possible).
Survey/Feedback Responses: Information you provide in surveys or feedback forms (unless anonymous).
Financial & Payment Information (if applicable): Details necessary to process payments for premium services (processed via secure third-party payment processors).
Marketing Preferences: Your choices regarding receiving marketing communications.
Technical Data: IP address, login data, browser type/version, time zone setting, browser plug-in types/versions, operating system/platform, and other technology on the devices you use to access the Service.

Cookies and Similar Technologies

When you visit our website or use our future app, we may collect information automatically using cookies and similar technologies. A cookie is a small file stored on your device.

This may include:

Information about your device, operating system, and IP address.
Login information.
Browser type and version.
Website/app visit information (URL clickstream, pages visited, interaction information).
Usage information to distinguish you from other users and remember preferences.

The cookies/similar technologies we may use include:

Strictly Necessary Cookies: Essential for navigating the site/app and using its features.
Performance/Analytics Cookies: Collect information about how you use our Service (e.g., pages visited, feature usage). These help us understand user interaction and improve the Service. [Example: We may use Google Analytics. Google's Privacy Policy: https://policies.google.com/technologies/cookies?hl=en]
Functionality Cookies: Allow the Service to remember choices you make (e.g., username, preferences) to provide a more personal experience.
[Advertising Cookies - Include if you plan to use advertising]: Used to measure the effectiveness of advertising campaigns. [List relevant third-party ad platforms and their privacy policies if applicable].

You can manage cookie preferences through your browser settings. Rejecting certain cookies may limit the functionality of the Service. For more information, visit http://www.aboutcookies.org.

3. PURPOSES FOR PROCESSING YOUR PERSONAL INFORMATION

We process your personal information to:

Provide, operate, and maintain our Service.
Set up and manage your user account.
Provide personalized financial guidance, budgeting tools, and goal tracking.
Process transactions (if applicable).
Improve, personalize, and expand our Service.
Understand and analyze how you use our Service.
Develop new products, services, features, and functionality.
Communicate with you (e.g., service updates, support, marketing with consent).
Conduct research, statistical analysis, and surveys (often using anonymized data).
Prevent fraud and ensure security.
Comply with legal obligations.

4. LEGAL BASIS FOR PROCESSING YOUR PERSONAL INFORMATION

Our legal basis for collecting and using the personal information described above will depend on the specific context:

Performance of a contract: Processing necessary to provide the Service you requested (e.g., setting up your account, providing core features).
Legitimate Interests: Processing necessary for our legitimate interests (e.g., improving the Service, fraud prevention, analytics), provided these are not overridden by your data protection interests or fundamental rights.
Consent: Where we rely on consent (e.g., for certain types of data processing like optional account linking, sending marketing emails), you can withdraw consent at any time.
Compliance with law: Processing necessary to comply with a legal obligation.

5. WHERE WE STORE YOUR PERSONAL INFORMATION

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

If you are located outside the United Kingdom and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United Kingdom and process it there.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable law. Where data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions).

6. HOW WE KEEP YOUR PERSONAL INFORMATION

We retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy (e.g., while your account is active, to provide the Service, comply with legal obligations, resolve disputes, enforce agreements). After this period, it will be deleted or anonymized.

Where processing is based on consent, we will delete the information if you withdraw consent, unless there is another legal basis for retention.

We keep a record of marketing opt-outs to ensure compliance.

7. SECURITY

The security of your data is important to us. We use appropriate technical and organizational measures to protect your personal information. However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

You must keep your password and any other authentication information confidential. Notify us immediately if you suspect unauthorized access to your account.

Our Service may contain links to other sites not operated by us. If you click a third-party link, you will be directed to that site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

8. DISCLOSING YOUR INFORMATION

We may share your personal information with:

Service Providers: Third parties who perform services on our behalf (e.g., hosting, data analysis, payment processing [if applicable], customer support, email delivery, analytics). They only have access to information needed to perform their functions and are obligated to maintain confidentiality and security.
Business Partners: [Mention specific types if applicable, e.g., financial institutions if account linking is offered, research partners with anonymized data].
Legal Requirements: If required by law or in response to valid requests by public authorities (e.g., court, government agency).
Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Protection of Rights: To protect and defend our rights or property, prevent wrongdoing in connection with the Service, protect user safety, or protect against legal liability.

9. YOUR RIGHTS

Under UK GDPR, you have rights regarding your personal data:

Access: Request access to the personal data we hold about you.
Rectification: Request correction of inaccurate personal data.
Erasure: Request deletion of your personal data (subject to certain conditions).
Restriction: Request restriction of processing your personal data.
Data Portability: Request transfer of your personal data to you or a third party in a machine-readable format.
Objection: Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent: Withdraw consent at any time where we rely on consent.

To exercise these rights, please contact us at [Contact Email]. We will respond in accordance with applicable law.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. CONTACT US

If you have any questions about this Privacy Policy, please contact us:

By email: [email protected]
By visiting this page on our website: https://scholarsaver.co.uk/contact
By mail: KQ Liverpool, 25 Mount Pleasant, Liverpool L3 5TF, UK