Privacy Policy
Last updated: May 2026 · Academic Ally
Academic Ally ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform, and outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the EU GDPR.
1. What Data We Collect
We collect only the information necessary to provide our academic support services:
- Account information: full name, email address
- Academic profile: university name, level of studies, subject area (optional)
- Service requests: details you provide when requesting academic guidance
- Communications: messages exchanged with our academic support team
- Usage data: pages visited, features used, session duration (anonymised)
- Uploaded documents: files you voluntarily submit as part of a support request
We do not collect payment card data directly — payment processing is handled by secure third-party providers.
2. How We Use Your Data
Your data is used exclusively to:
- Deliver academic mentoring and guidance services you have requested
- Communicate with you about your support requests and service updates
- Personalise your experience based on your academic profile
- Improve the quality and relevance of our platform
- Meet our legal obligations under applicable data protection law
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
3. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data to any third party.
We may share data with trusted service providers who assist us in operating the platform (e.g. cloud hosting, email delivery), strictly under data processing agreements and only as necessary to provide the service.
We may disclose data if required to do so by law or by a regulatory authority.
4. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:
- Encrypted data transmission (HTTPS/TLS)
- Access controls limiting data access to authorised personnel only
- Regular security reviews of our platform infrastructure
No system is entirely risk-free. If you suspect a security issue, please contact us immediately.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
- Account data: retained while your account is active
- Service request records: retained for up to 2 years after completion
- Uploaded documents: deleted upon your request or within 90 days of request completion
Upon account deletion, personal data is removed within 30 days, subject to any legal retention requirements.
6. Your Rights (GDPR)
Under UK and EU GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at the address below. We will respond within 30 days.
7. Contact & Data Controller
For any privacy-related questions, requests, or complaints:
Academic Ally — Contact Information
Privacy and Account Deletion: symvoulesergasies@gmail.com
If you are unhappy with how we handle your data, you have the right to lodge a complaint with your national data protection authority (e.g. ICO in the UK, or the Hellenic DPA in Greece).
This policy may be updated periodically. Continued use of the platform constitutes acceptance of any revised terms.