Privacy policy

Here at Lexedio, we are passionate about protecting your privacy. We keep our collecting and processing activities to a minimum and are always looking for ways to promote privacy rights and literacy.

Personal data is subject to the legal safeguards set out in the Data Protection Act 2018 and the General Data Protection Regulation (Regulation (EU) 2016/679).

This privacy statement explains how we process any personal information that you provide to us when you engage with us electronically or in person.

Who we are

Lexedio Ltd is a learning experience design studio, providing online training, consultancy, and coaching. We are registered as a private limited company in Scotland – Company number: SC611747.

We registered with the Information Commissioner’s Office as a data controller on 18th Feb 2020 ref: ZA673624 

Our registered office is Lexedio Ltd, Horizon Scotland 2 Innovation Way, The Enterprise Park, Forres, Moray, Scotland, IV36 2AB. Our main website address is: https://www.lexedio.com. We are also responsible for https://www.newliteraciesproject.uk/

How we handle and protect your data

If you contact us by email or direct message, we will collect your name, email address and any other information you choose to provide us.

All emails are received and sent with end-to-end encryption and zero-access encryption, stored on servers located in Switzerland. All of our business documents are securely stored locally or through dedicated cloud services.

If you contact us by phone, letter, or social media, we may need to keep a record of our communication with you to support and enhance business operations. 

We sometimes retain contact information about individuals and organisations that we have gathered from business cards, events, and networking opportunities, with future collaboration or other mutual benefits in mind.

We will not share your personal data with third parties unless we are legally required to do so or as described in this policy. 

Our website, including the learning management system and any sub sites, are hosted via Reclaim Hosting on Digital Ocean servers, which are certified under the EU-US Privacy Shield. Please read Reclaim Hosting data processing agreement and Digital Ocean data processing agreement for more information.

Lexedio.com does not use analytics software to analyse traffic. For further information about our website, including cookies, please see the website functionality section at the bottom of our privacy page.

If you subscribe to email updates or newsletters, these services will be facilitated via our encrypted email service.

If you engage with us on a project, you may be provided with an additional privacy statement to clarify any project-specific considerations not otherwise covered in this policy.

If we are legally obliged to disclose your information, we will inform you and, if legally permissible, we will make it clear whether any information we request is also necessary for compliance.

We regularly assess the likely risk to individuals as a result of a breach. In the event of a breach we will notify the ICO within 72 hours of becoming aware of it, even if we do not have all the details yet.

How long we retain your data

Our data retention policy is guided by legal requirements and personal information is not held for longer than necessary, unless you have otherwise agreed for this information to be maintained.

For users that register on our website, we also store the personal information they provide in their user profile. Most users can usually see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information and will promptly do so on behalf of users at their request.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue. Forum posts may be removed or anonymised upon request or after a period of time.

If you privately message Lexedio business profiles on social media, we may delete those messages after a year. If we have need to retain any information from the message, we will keep this to a minimum and remove personally identifying information wherever possible. However, your messages may be retained indefinitely by the social media platform, and likely will be if you have not deleted them as author. If you post content publicly, will usually be able to delete content yourself. If for any reason, you are unable to do so or have any concerns, please get in touch and we’ll do whatever we can to help. 

What rights you have over your data

You have a legal right to access the personal data we hold about you, and some related information. You can object to our use of your personal data at any time. 

If you have an account on our website, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

If you would like to know more about your rights under the General Data Protection Regulation, or wish to make a complaint, please visit the Information Commissioner’s Office website.

Contact us

We are keen to do everything we can to protect your privacy and update any information we hold about you as required. Please get in touch with Liz Hudson via email at hello@lexedio.com if you have any questions or concerns about your personal data or our privacy practices. 

Additional information

This policy was last updated on 16th November 2023 and is currently under review.