SUBSCHOOL LTD GDPR
Last updated: February 23, 2026

This notice explains how SubSchool LTD (“we”, “us”) processes personal data under the UK GDPR and the EU GDPR (where applicable).

1) DATA CONTROLLER
SubSchool LTD
17 King Edwards Road, 2nd Floor College House, Ruislip, HA4 7AE, United Kingdom
Email: maksim@subschool.us

2) CATEGORIES OF PERSONAL DATA
We may process:
- Identity/contact data: name/display name, email, account role
- Account/security data: login activity, IP address, device identifiers
- Learning data: courses/lessons, homework, submissions, grades/feedback, messages
- Media data: lesson/tutoring recordings (where enabled), uploaded videos/audio
- AI feature data: AI Tool inputs and AI Output (generated suggestions/feedback)
- Transaction data: purchases, subscription status, payout identifiers (e.g., PayPal)
- Usage analytics data (only if enabled via cookie consent)

3) PURPOSES AND LAWFUL BASES
We process personal data for these purposes and lawful bases:

3.1 Providing the Service (accounts, learning workflows, tutoring, recordings)
- Lawful basis: Contract (Art. 6(1)(b))

3.2 AI Tools (course structuring, homework generation, grading assistance)
- Lawful basis: Contract (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f)) to deliver and improve requested features
(You remain responsible for reviewing AI Output.)

3.3 Payments, subscriptions, payouts, fraud prevention
- Lawful basis: Contract (Art. 6(1)(b)) and Legal Obligation (Art. 6(1)(c)) where applicable

3.4 Support, communications, product updates
- Lawful basis: Contract (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f))

3.5 Security, abuse prevention, legal compliance
- Lawful basis: Legitimate Interests (Art. 6(1)(f)) and Legal Obligation (Art. 6(1)(c)) where applicable

3.6 Marketing cookies / advertising cookies
- Lawful basis: Consent (Art. 6(1)(a)), where required

4) DATA SHARING (RECIPIENTS)
We may share data with:
- Cloud hosting/storage providers
- Payment and payout providers (e.g., PayPal for teacher payouts)
- Email delivery and customer support tools
- Analytics providers (only if you consent via cookies)
- Advertising/marketing partners (only if you consent via cookies)
- AI processing providers where required to provide AI Tools
- Authorities where disclosure is required by law or necessary for safety and fraud prevention

5) INTERNATIONAL TRANSFERS
Some service providers may process data outside the UK/EEA. Where required, we implement safeguards such as contractual protections for international transfers.

6) DATA RETENTION
We retain personal data as long as necessary for:
- providing the Service and maintaining accounts,
- handling disputes/chargebacks and preventing fraud,
- meeting legal/accounting obligations,
- backups and security logs.
You may request deletion, subject to legal and legitimate retention needs.

7) AUTOMATED DECISION-MAKING
The Service provides AI-assisted grading and feedback suggestions. We do not intend these suggestions to be the sole basis for decisions producing legal or similarly significant effects. Teachers/Schools remain responsible for final decisions.

8) YOUR RIGHTS (UK/EU)
You have the right to:
- access your personal data,
- correct inaccurate data,
- request deletion (right to erasure),
- restrict processing,
- object to processing,
- data portability,
- withdraw consent (where processing is based on consent),
- lodge a complaint with a supervisory authority (e.g., ICO in the UK; your local EU authority).

To exercise rights: email maksim@subschool.us

9) COOKIES
Essential cookies are always on. Optional analytics and advertising cookies are off unless you enable them via cookie settings.

10) UPDATES
We may update this notice and will revise the “Last updated” date.