Privacy Policy

This Privacy Policy explains how Enroute X ("Enroute X," "we," "us," or "our") collects, uses, and protects your information when you visit our website and use our products and services, including our e-learning application X-Learn.

We are the data controller for personal data processed under this policy. You can contact us at:

1) Scope

This policy applies to:

• Visitors to our website,
• Customers and business contacts who use our services (Agile project management, software development, animation, capacity building and training),
• Learners, instructors, and organisations using X-Learn.

It covers personal data processed under the UK GDPR and the Data Protection Act 2018.

2) Information we collect

A) Website & business enquiries

• Contact details: name, email, phone, company, role
• Messages and enquiries (e.g., via contact forms or email)
• Technical data: IP address, device/OS/browser info, pages viewed, referral URLs, and cookies/SDK events

B) X-Learn (e-learning)

• Account & profile: name, email, password (hashed), avatar (optional), organisation/school
• Learning data: courses enrolled, progress, quiz scores, certifications, badges, assignments, attendance
• Content & interactions: comments, forum posts, messages, instructor feedback, uploaded files
• Device & usage: app version, device model, OS, crash logs, session timestamps
• Optional permissions: camera/microphone for live classes, file storage for downloads/uploads, notifications
• Payments (if enabled): transaction identifiers and status (we do not store full card numbers; payments are handled by a PCI-compliant provider)

C) Clients & vendors

Business contact details, contract documents, invoices, and necessary compliance records (e.g., due-diligence info if required)

We collect data directly from you, from your organisation (if they create accounts on your behalf), and automatically via cookies and similar technologies.

3) Why we use your data (legal bases)

We process personal data for:

You can withdraw consent at any time in app/website settings or by contacting us.

4) How we use your data

• Operate X-Learn: account creation, authentication, course delivery, grading, certificates
• Learning analytics: track progress, surface recommended content, and help instructors/organisations understand learner outcomes
• Support & safety: detect misuse, prevent cheating and spam, secure accounts, and handle incidents
• Communications: service updates, course reminders, instructor feedback, and (if opted in) newsletters
• Improvements: diagnostics, crash reports, and aggregated usage insights
• Payments: process purchases and refunds (handled by a payment processor)

5) Sharing your data

We share personal data only as needed with:

• Service providers/processors that host our systems, send emails/notifications, process payments, provide analytics, or support customer service
• Instructors/organisations you learn with on X-Learn (access is limited to what's needed for teaching and reporting)
• Authorities or legal advisers where required by law or to protect rights and safety
• Business transfers if we undergo a merger, acquisition, or reorganisation

We do not sell your personal data.

6) International transfers

Where we transfer personal data outside the UK/EEA, we rely on lawful transfer mechanisms such as UK Addendum to the EU Standard Contractual Clauses or other recognised safeguards.

7) Retention

We keep personal data only as long as needed for the purposes above:

• X-Learn accounts: while your account is active
• Learning records: for the period required by you/your organisation or by applicable law
• Contracts/financial records: as required for legal and tax purposes

When no longer needed, data is securely deleted or anonymised.

8) Your rights

Under the UK GDPR, you have the right to:

• Access your personal data and receive a copy
• Correct inaccurate or incomplete data
• Delete your data (in certain cases)
• Restrict or object to processing
• Port your data to another service (in certain cases)
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at contact@EnrouteX.co.uk. You can also complain to the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

9) Children's privacy

X-Learn is generally designed for learners aged 13 and above. If an organisation uses X-Learn with younger learners, they must have appropriate parental or school authorisation and safeguards. If we learn we've collected personal data from a child without the required consent, we will delete it.

10) Cookies and similar technologies

We use cookies/SDKs to:

• Keep you signed in and remember preferences
• Measure usage and performance
• Improve content and troubleshoot issues

You can control cookies in your browser or device settings. Disabling some cookies may affect site or app functionality. If your organisation requires a detailed cookie list, we can provide one on request.

11) Security

We use administrative, technical, and physical safeguards to protect personal data, including encryption in transit, access controls, and logging. No method is 100% secure; we continually improve our controls and investigate incidents.

12) Organisation-managed accounts (X-Learn)

If your account is provisioned by a school, employer, or other organisation:

• They may control certain settings and access learning reports
• Their policies may apply in addition to this Privacy Policy
• Requests to delete data may need coordination with the organisation to preserve academic records or legal obligations

13) Third-party links

Our website and X-Learn may link to third-party sites or content. Those sites have their own privacy practices. Please review their policies before submitting personal data.

14) Changes to this policy

We may update this policy from time to time. If changes are significant, we'll notify you in the app, on our website, or by email. The "Last updated" date shows when this policy was most recently revised.

15) Contact

Questions about this policy or your data rights?