Privacy Notice

1. Who we are

This Privacy Notice describes how Kamalahasan Simpson, operating ExcelFast (the "Service"), collects and uses your personal data. We are the data controller for personal data we process about you.

2. Personal data we collect

• Account data: name, email, hashed password, profile picture (if provided via Google sign-in).
• Learning data: lessons completed, practice attempts, scores, recently viewed lessons.
• Support data: messages you send us, including any details you choose to share.
• Technical data: device, browser, IP address, and basic usage telemetry needed to run and secure the Service.

Payment card details are collected directly by Paddle, our Merchant of Record — we do not receive or store your card data.

3. How we use your data

• To create and maintain your account and provide the Service (legal basis: contract).
• To process subscriptions and grant access to paid features (contract; legal obligation).
• To improve the Service, fix bugs, and analyze usage (legitimate interests).
• To prevent fraud, abuse, and security incidents (legitimate interests; legal obligation).
• To respond to your support requests (contract; legitimate interests).
• To send you transactional and (where permitted) educational emails (contract; consent for marketing).

4. Who we share data with

• Paddle.com Market Limited — our Merchant of Record, for sales, payments, billing, tax, and invoicing.
• Hosting and infrastructure providers — to host the Service, store data, and deliver content.
• Authentication providers — Google, if you choose to sign in with Google.
• Professional advisers — accountants and legal advisers, where strictly necessary.
• Authorities — where required by law.

5. International transfers

Some of our service providers may be based outside Mauritius. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses and the recipient's own data protection commitments.

6. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations and to handle disputes. When data is no longer needed, we delete or anonymize it.

7. Your rights

You may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten"), subject to retention obligations.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent for processing based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, email myaccfreelancer@gmail.com.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and isolation of services to protect your data. No system is perfectly secure, but we work to keep your data safe.

9. Cookies

We use essential cookies and local storage to keep you signed in and remember your learning progress. We do not currently use third-party advertising cookies.

10. Contact

For privacy questions, contact myaccfreelancer@gmail.com.