Privacy Policy
Effective date: June 1, 2026 · Last updated: June 1, 2026
Whether you are a Professional Coach sharing your expertise or an Educator seeking knowledge, your privacy is central to our mission. This Privacy Policy describes how Nugget Learning, operated by LEXIOLABS LTD ("we," "us," or "the Platform"), collects, uses, and processes your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
LEXIOLABS LTD (England and Wales) is the data controller for personal data processed through Nugget Learning.
- Privacy contact: dop@nuggetlearning.co.uk
- General enquiries: info@lexiolabsltd.com
1. Data We Collect
To provide our services, we collect information that you provide directly to us:
- Account Information: Name, email address, password, and profile details.
- Professional Coach Data: Professional credentials, payment/payout information (via third-party processors), and the content you upload (lectures, PDFs, videos).
- Educator Data: Purchase history, courses enrolled in, and progress.
- Communications: When you contact customer support or message other users through our internal tools.
2. Use of Artificial Intelligence (AI) Tools
Our platform allows Professional Coaches to enhance their study materials using third-party AI tools (such as Google Gemini, OpenAI, etc.).
- Professional Coach Responsibility: Professional Coaches are solely responsible for the data they input into these third-party AI tools. Nugget Learning does not have access to, visibility into, or control over the data shared by a Professional Coach with an external AI provider.
- No Platform Liability: We do not store or process the prompts or data you provide to external AI tools. We encourage all Professional Coaches to review the Privacy Policies of their chosen AI provider before uploading sensitive or proprietary information.
- AI-Generated Content: If a lecture or material is generated via AI, the Professional Coach represents that they have the right to sell such material and that it complies with our Terms of Service.
3. Lawful Bases and Purposes
We process personal data only where we have a lawful basis under Article 6 UK GDPR:
- Contract: account creation, content delivery, purchases, payouts, and support.
- Legitimate interests: fraud prevention, platform security, service improvement, and non-intrusive analytics (balanced against your rights).
- Consent: marketing emails and non-essential cookies (you may withdraw consent at any time).
- Legal obligation: tax, accounting, and regulatory requests.
4. Why We Collect This Data
We may collect, store, and use the following categories of personal information about you: Personal contact details such as name, title, addresses, telephone numbers and emails addresses, bank details, qualifications, communications regarding your activity on the platform and your social media contacts (optional). We may also collect some technical Data, such as IP address, browser type, device information, usage Data, platform interactions and features used. Further, we may also collect your uploaded Content such as documents and educational materials We use your information for the following purposes:
- Service Delivery: To facilitate the buying and selling of educational materials.
- Payments: To process transactions and ensure Professional Coaches receive their earnings.
- Security: To detect and prevent fraud or the distribution of unauthorized content.
- Marketing: To send promotional communications only where you have opted in (PECR). You may unsubscribe at any time.
5. Sharing Your Data with Third Parties
We do not sell your personal data. We share your information only as follows:
- Between Users: We share a Professional Coach's profile information with Educators who purchase their materials.
- Service Providers: We use third-party providers for payment processing (Stripe), cloud storage (Wasabi/object storage), and AI providers (OpenAI, Google) when you use AI features. These providers act as processors under appropriate agreements.
- Legal Obligations: If required by law, we may disclose information to government authorities or law enforcement.
6. International Data Transfers
The transmission of personal data as described in this statement may include overseas transfers to countries whose data protection laws are not as comprehensive as those in your country. We implement appropriate safeguards (such as Standard Contractual Clauses) to ensure your data remains protected.
7. Your UK GDPR Rights
Under UK GDPR you have the following rights:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion in certain circumstances.
- Restriction — limit processing in certain circumstances.
- Portability — receive data you provided in a structured format.
- Object — object to processing based on legitimate interests or direct marketing.
- Withdraw consent — where processing is based on consent (e.g. marketing).
We respond within one month. You may also lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
To exercise these rights, contact dop@nuggetlearning.co.uk
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We also retain data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
9. Security and Breaches
We observe reasonable procedures to prevent unauthorized access to, and the misuse of, personal data. We use appropriate business systems and procedures including encryption, secure servers and access controls to protect and safeguard the personal data you give us. If a personal data breach is likely to pose a risk to your rights, we will notify you and the ICO where required by law.
10. Children
Our platform is intended for users aged 18 and over. We do not knowingly collect personal data from children.
11. Automated Decision-Making
We do not make decisions based solely on automated processing that produce legal or similarly significant effects. AI tools assist content creators but do not determine account access or purchases without human involvement.
12. Electronic Marketing (PECR)
We send marketing emails only with your opt-in consent. You can withdraw consent via account settings or by contacting us. Service-related messages (e.g. receipts, security alerts) may still be sent as necessary for your account.
13. Changes to this Policy
We may update this Privacy Statement from time to time. If we make material changes, we will notify you via email or by posting a notice on our homepage.
Contact
Email: info@lexiolabsltd.com