Privacy Policy

This Privacy Policy explains how Lancourse (“we”, “us”) collects, uses and protects your personal data when you use lancourse.com (the “Service”). We are the data controller for the personal data described here, and we handle it in line with the UK GDPR and applicable data protection law.

1. Information we collect

• Information you provide: your email address (used for passwordless sign-in), your name and any details you include in an enquiry. For school administrators: your school’s profile, courses, accommodation, prices and photographs.
• Information collected automatically: basic usage and device information, and a small number of essential cookies (see our Cookie Policy).
• Information from schools: when you make an enquiry, the relevant school may provide its response through the Service so we can relay it to you.

2. How we use your data, and our legal bases

• To provide the Service and connect you with schools — performance of a contract.
• To send sign-in codes and service messages — performance of a contract and our legitimate interests.
• To operate, secure and improve the Service — our legitimate interests.
• To comply with our legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Use of artificial intelligence

We use automated tools, including AI provided by OpenAI, to help schools import and structure information from their own websites and documents during onboarding. We do not use your personal data to train third-party AI models.

4. Sharing your data

We share personal data only where needed:

• with schools you choose to contact, so they can respond to your enquiry;
• with service providers (“processors”) who help us run the Service under appropriate agreements, including email delivery (Resend), file storage and content delivery (Cloudflare R2), database and hosting providers, search (Meilisearch) and AI processing (OpenAI);
• where required by law, or to protect rights, safety or property.

5. International transfers

Some providers may process data outside the UK or EEA. Where they do, we rely on appropriate safeguards, such as an adequacy decision or standard contractual clauses.

6. Data retention

We keep personal data only for as long as needed for the purposes above or as required by law. Sign-in codes expire within minutes. You can ask us to delete your account data (see your rights below).

7. Your rights

Under the UK GDPR you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, and to data portability. To exercise these rights, email privacy@lancourse.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies, including an authentication cookie, to operate the Service. For details, see our Cookie Policy.

9. Security

We use technical and organisational measures to protect your data, including encryption in transit (HTTPS) and access controls. No system is completely secure, but we work to keep your information safe.

10. Children

The Service is intended for adults and for school administrators. If you are under 16, please use the Service only with the involvement of a parent or guardian. Where a course involves a minor, the booking is arranged by the responsible adult and the school.

11. Changes to this Policy

We may update this Policy from time to time. We will update the “last updated” date above and, where appropriate, notify you.

12. Contact

For privacy questions or requests, email privacy@lancourse.com.