Legal
Privacy Policy
Last updated
This policy explains what personal data we collect when you watch or buy Software Receta, why, who we share it with, and the rights you have. It is written for the UK GDPR and the Data Protection Act 2018.
Who we are
The controller of your personal data is MindCache LTD, a private company limited by shares, registered in England and Wales with company number 16468302. Our registered office is Office 12, Initial Business Centre, Wilson Business Park, Manchester, M40 8WN, United Kingdom.
This policy covers the Software Receta website at receta.academy/software, its lessons, and buying the course. For anything about your personal data, email support@receta.academy.
What we collect, why, and our legal basis
| What | Why | Legal basis |
|---|---|---|
| Your purchase record: the email you paid with, your Stripe customer id, the payment’s id, the price paid, whether the purchase stands or was refunded, and when it was paid and last changed | To open the lessons you bought on every device you sign in on, to close them again after a full refund, and to count the founding schedule’s first-price places. | Contract; legal obligation (keeping accounting records) |
| The payment itself, kept by Stripe: for example your name, email, billing country, your card’s brand and last four digits, the amount, and the invoice | To take your payment, issue your invoice, and give refunds. Stripe collects card details and keeps them; they never reach us. We can see Stripe’s record of the payment in our Stripe account. | Contract; legal obligation (keeping accounting records) |
| A sign-in cookie, which names your Stripe customer id | To keep a device you paid in, or signed in on, signed in to the lessons. | Contract |
| The email address you type to get a sign-in link | To check it against the purchase records and, if it bought the course, to email it a link. We don’t keep the address you type; Resend, which sends the email, keeps a record of the message. | Contract |
| Request logs: the address requested, the time, the result, and technical details of the connection such as your IP address and browser | To keep the site secure, stop abuse, and find and fix faults. | Legitimate interests (security and reliability) |
| Emails you send us | To answer you, give refunds, and keep a record of what we agreed. | Legitimate interests; contract where it concerns your purchase |
“Contract” means we need the data to sell you the course and let you watch it. “Legitimate interests” means we use it for a reasonable purpose of ours, such as security, that does not override your rights; you can object to it, as your rights explain.
On this website we run no analytics, no advertising and no tracking. Its pages load their fonts from Google Fonts, so your browser connects to Google, which receives your IP address and browser details to deliver them.
We don’t sell personal data, and we don’t make decisions about you by automated means that have legal or similarly significant effects.
Cookies and storage in your browser
We set one cookie, and only when you buy the course or open a sign-in link: receta_session. It is signed so it can’t be forged, it can’t be read by the page’s scripts, it names only your Stripe customer id, and it lasts up to a year from your last visit. Signing out removes it.
The lesson room remembers three display choices in your browser’s own storage: whether the notes panel is open, which notes tab you chose, and whether captions are on. They stay on your device and are not sent to us.
These exist only to do what you asked for, so we don’t ask for consent with a banner. You can clear them at any time in your browser’s settings; clearing the cookie signs that device out.
Cloudflare, which hosts the site, may set a strictly necessary security cookie if it needs to check that traffic is not automated.
International transfers
Our sub-processors are in, or reach data from, countries outside the UK, mainly the United States. When personal data leaves the UK, we make sure it is protected by one of the safeguards UK law allows: UK adequacy regulations where they apply, or the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum. Email us for more detail on the safeguard for a given transfer.
How long we keep it
| Data | How long |
|---|---|
| Your purchase record | For as long as we run the course, because it is what keeps your lessons open. After a full refund the record stays, marked refunded, so the lessons stay closed. |
| Billing records (payments, invoices, refunds and the references that link them to you) | Six years after the end of the financial year they relate to, as UK tax and company law requires. |
| The sign-in cookie | Up to a year after your last visit, or until you sign out. |
| A sign-in link | It works for 20 minutes. |
| Request logs | Up to 30 days. |
| Emails with us | Up to two years after our last exchange, unless we need them longer for a legal claim. |
Deleting on request
Email support@receta.academy from the address you paid with and say what you want deleted; we will delete it within 30 days. Deleting your purchase record closes the paid lessons, because it is how the site knows you bought them. We keep only what the law requires us to keep, such as billing records.
Security
We protect your data with measures that fit a course like ours:
- Every connection to the site is encrypted (HTTPS).
- Card details never reach our systems.
- The sign-in cookie and sign-in links are signed, so they can’t be forged, and expire. A link is sent only to an email that bought the course, and the page answers the same way whether or not an email did, so no one can use it to learn who bought.
- The paid lessons are served only after the server checks the access of the device asking, and are never kept in shared caches.
- Messages from Stripe about payments and refunds are checked against Stripe’s signature, and read back from Stripe before they change anything.
- Only the people who run the course can reach its production systems.
No system is perfectly secure. If a breach puts your personal data at risk, we will tell the Information Commissioner’s Office within 72 hours where the law requires it, and tell you without undue delay.
Your rights
Under UK data protection law, you have the right to:
- get a copy of your personal data (access);
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use it;
- object to our use of it based on legitimate interests;
- receive data you gave us in a machine-readable form, or have it sent to another provider (portability).
To use any of these rights, email support@receta.academy, ideally from the address you paid with. We may need to confirm who you are. We answer within one month, and it is free in most cases.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator: ico.org.uk/make-a-complaint, or 0303 123 1113. If you live in the EU, you can also complain to the data protection authority in your country.
Children
Software Receta is a course for adults, and only adults can buy it. We don’t knowingly collect personal data from anyone under 16. If you think a child has given us personal data, email support@receta.academy and we will delete it.
Changes to this policy
We may update this policy when the course or the law changes. The date at the top shows when it last changed. If a change materially affects how we use your personal data, we will email buyers before it takes effect.
Contact
Privacy questions, data requests and anything else: support@receta.academy. By post:
MindCache LTDOffice 12, Initial Business CentreWilson Business ParkManchesterM40 8WNUnited Kingdom