Skip to main content

Privacy Policy

Last updated: 3 October 2026

This policy explains what personal data StemBoss Academy (operated by AlphaMax Digital Services Ltd) collects when you visit stembossacademy.com or buy a course, why we use it, who we share it with and your rights. We follow UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who we are

The controller of your personal data is AlphaMax Digital Services Ltd, trading as StemBoss Academy, a company registered in England and Wales (company number 15537984). Registered office: 27 Tomlinson Avenue, Luton, LU4 0QL, United Kingdom. Correspondence address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: hello@stembossacademy.com.

2. What we collect

  • Order details: your name, email address, billing country and address, phone number if you give it, what you bought and how much you paid.
  • Payment details: handled by our payment providers. We receive confirmation of payment and limited card information (such as card type and last four digits), never your full card number.
  • Learner account details: the name and email used to create your account on our learning platform, plus your course progress.
  • Messages: what you send us by email, phone or our contact form.
  • Technical data: IP address, browser and device type, pages viewed and how you reached our site. We use your IP address to show prices in the right currency.
  • Affiliate data: if you join our affiliate programme, your name, email, payment details for commission and referral activity. If you arrive through an affiliate link we record the referral.

3. Why we use it, and our legal basis

  • To take payment, give you course access and send login details. Basis: contract.
  • To answer questions and give support. Basis: contract or legitimate interests.
  • To keep accounting and tax records. Basis: legal obligation.
  • To prevent fraud and keep the site secure. Basis: legitimate interests.
  • To understand how the site is used and improve it. Basis: consent where cookies are needed, otherwise legitimate interests.
  • To send marketing emails, only if you opted in. You can unsubscribe at any time. Basis: consent.

4. Who we share it with

  • Stripe (through WooPayments by WooCommerce/Automattic) to process card payments in USD and GBP.
  • Paystack to process payments in NGN.
  • Our training content and learning platform partner, to create your learner account and deliver your courses.
  • Google for website analytics.
  • Our email delivery provider, to send order and account emails.
  • Our hosting and backup providers, who store the website and its data.
  • Professional advisers and authorities, where the law requires it.

We do not sell your personal data.

5. International transfers

Some of these providers process data outside the UK, including in the United States and Nigeria. Where they do, we rely on safeguards recognised under UK law, such as the UK International Data Transfer Addendum, standard contractual clauses or adequacy regulations.

6. How long we keep it

  • Order and invoice records: 6 years, for tax purposes.
  • Learner account data: while your account is active and for up to 2 years after your access ends.
  • Support messages: up to 2 years.
  • Analytics data: in line with the retention settings of the analytics tool, at most 26 months.

7. Cookies

We use cookies that the site needs to work, such as keeping items in your basket, remembering your currency and keeping you logged in. We also use analytics cookies to understand how visitors use the site, and an affiliate cookie that records which partner referred you. You can block or delete cookies in your browser settings. Blocking essential cookies may stop checkout from working.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another provider. Where we rely on consent you can withdraw it at any time. Email hello@stembossacademy.com. We reply within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to fix it first.

9. Security

The site uses HTTPS, card payments are handled by PCI-compliant providers, and admin access is restricted and protected. No system is completely secure, so contact us straight away if you think your account has been compromised.

10. Changes to this policy

We may update this policy. The date at the top shows when it last changed.