Privacy Policy

Lessons in Practice is the controller of the personal data described on this page. If you want it deleted, email support@lessonsinpractice.com and we will do it — the detail is in section 7.

1. What we collect

Your quiz answers. Every question you answer while going through the quiz. These are what the personalised plan is built from, and they are the reason the plan differs between two people who answer differently.

Your email address, and your name if you give it. The name is optional; it appears on your certificate and on your plan if you provide one.

Your account and progress. Which lessons you have opened and completed, and your certificate if you earn one.

Your purchases. What you bought, when, how much you paid, whether it renewed, and whether it was refunded. We do not receive or store your card number — see section 4.

How you use the site. Which screens you saw, which answers you picked, which buttons you clicked, roughly where in the world you are (from your IP address), and what kind of device and browser you used.

How you got here. If you arrived from an advertisement, we record which advertisement, on which platform, in a first-party cookie set by our own site. This is how we find out which ads are worth paying for. It is stored against a random identifier, not against your name.

We do not ask for and do not want your card details, your government identification, your health, or anything else in the special categories that data protection law treats separately.

2. Where it comes from

All of it comes from you, either because you typed it or because your browser sent it while you used the site. We do not buy personal data, we do not enrich it from data brokers, and we do not scrape it from anywhere.

3. What we use it for, and on what basis

To create and run your account. We ask for your email at the end of the quiz in order to create your account, which is created at that point and before you are asked to pay for anything. We use it to send you the link that signs you in. This is necessary to provide the service you asked for.

To build and show your plan. Your quiz answers produce the plan, the schedule and the lesson ordering. Same basis.

To take payment and handle refunds. Necessary to perform the contract.

To send you service emails. Your sign-in link, your receipt, the renewal reminder before every charge, and confirmation when you cancel or are refunded. These are part of the service. They are not marketing and you cannot unsubscribe from them while you have an active subscription, because the renewal reminder is the one email it would be wrong of us to let you switch off.

To send you marketing emails — only if you said yes. We ask you separately, once, on its own screen, with two buttons of equal weight. If you say no, you do not get marketing and nothing else changes. If you say yes, every marketing email carries an unsubscribe link that works immediately.

To be plain about it, because these two are easy to blur: your email address is used to create your account whether or not you opt in to marketing, and it is used for marketing only if you opt in. The first is not a way of doing the second.

To measure the funnel. We look at where people leave and how the different versions of a screen perform. Two different things happen here and they rest on different grounds. Our own server records which screens were shown, against a short-lived random identifier with no name or email attached; that never leaves our systems and it is our legitimate interest in knowing whether the business works. Anything that goes to our analytics provider is the analytics switch in section 8, and it starts off.

To send conversion data to advertising platforms. Only with your consent, and it is a separate consent from the one above — declining ad measurement does not switch off our own analytics, and declining our analytics does not leave you in the ad measurement. The switch starts off and stays off until you turn it on. What goes to the ad platform is described in section 4.

4. Who we send it to

Every company below actually processes data for us today. If that list changes, this page changes.

Whop — payments. Handles checkout, subscriptions, renewals and refunds. Receives your email address and the details of your purchase. Card details go to Whop and its payment processors and never reach us.

Neon — our database. Stores everything described in section 1. Hosted in the region named in our infrastructure configuration.

Vercel — hosting. Serves the website and processes the technical data any web server sees, including your IP address.

PostHog — product analytics. Receives the usage data in section 1 against a random identifier. We run it through our own domain, which means the requests go to us first; it does not mean the data stays with us.

Customer.io — email. Receives your email address, your name if you gave it, the answers you picked in the quiz, and your plan and progress — enough to send the right email at the right time and to stop sending you ones that do not apply to you. It receives the options you tapped and never anything you typed into a "something else" box.

Meta — advertising. While your advertising switch is on, we tell Meta that a purchase or a lead happened and pass identifiers — including a cryptographic hash of your email address — so it can match the event to an ad. We send this from our server as well as from your browser. While it is off, we send Meta nothing about you — and it starts off.

We may also use an error-reporting service to record technical faults. If we do, it receives error diagnostics rather than the data in section 1, and we will name it here.

Beyond that: we do not sell your personal data, we do not rent it, and we do not share it with anyone for their own marketing.

We will disclose data if the law requires it, and if our business is ever sold the data moves with it — in which case you would be told before anything changed.

5. International transfers

Several of the companies in section 4 are based in the United States. Where your data leaves the country you live in, it is transferred under the safeguards that apply to that transfer, such as standard contractual clauses.

6. How long we keep it

Your account and course data — while your account exists, and then deleted.

Quiz answers where you did not create an account — 12 months, then deleted. They are useful for improving the quiz and stop being useful after that.

Records of purchases, refunds and tax — as long as accounting and tax law requires us to keep them, which is longer than the rest and is not something we can shorten on request.

Usage analytics — retained in aggregate. Individual event rows are kept for as long as they are useful for analysis and are not what we look people up by.

Marketing contact data — until you unsubscribe or ask for deletion.

7. Your rights

You can ask us to show you the data we hold about you, correct it, delete it, give you a copy in a portable format, restrict what we do with it, or object to our using it. You can withdraw a consent at any time — section 8 lists the ways — and withdrawing it does not make what we did beforehand unlawful.

Email support@lessonsinpractice.com from the address on your account. We will reply within 30 days and we will not charge you or ask why.

Deleting your account deletes your quiz answers, your progress, your certificate and your marketing subscription. It does not delete the records of your purchases and refunds, because we are required to keep those.

If you think we have handled your data badly, please tell us first — but you are entitled to complain to the data protection authority where you live without speaking to us at all.

8. Cookies and similar technologies

We use a small number. Two of them are controlled by the switches described at the end of this section, and both of those switches start off, for everyone.

These four are ours, set by this site, and each one is listed with what it holds and how long it lasts.

lc_attr, 30 days — which advertisement brought you here: the campaign parameters and click identifiers on the link you followed, and which ad angle it was. The ad's headline is not stored; it is reduced to a short fingerprint, so we can still ask which headline a group of people saw without keeping the text. It records your first visit and your most recent one.

lc_xid, 2 years — a random identifier for advertising measurement, so a returning visitor is recognised as the same person rather than as a new one. It is not your name and it is not derived from anything about you. It only exists while the advertising switch is on. It is not created before you answer, and turning advertising measurement off deletes it — from the cookie and from the copy your browser keeps in its own storage, both at once, straight away.

lc_run, 7 days — which version of the quiz you are part-way through, and a random identifier for that run. It is what lets us connect a purchase back to the screens that produced it. It holds no name and no email.

lc_consent, 1 year — the two choices below. This one is necessary and has no switch of its own, because it is the record of what you chose: if declining set no cookie, we would have no way to remember that you declined and would ask again on every page. A reader who turns everything off and then sees a cookie appear deserves to know it is this one.

Signing in also sets a session cookie holding your sign-in token. It is necessary, it is not tracking, and it goes when you sign out.

Analytics — cookies set by PostHog, subject to the analytics choice below.

Advertising — cookies set by Meta, subject to the separate advertising choice below.

How the two choices are set

We treat product analytics and advertising as two separate switches, and they work independently — turning off advertising does not turn off analytics, and turning off analytics does not leave you in the advertising one.

Both switches start off, and they start off for everyone. Neither analytics nor advertising measurement runs until you say it can. This does not depend on what country you appear to be in: we do not have one rule for visitors covered by European law and another for everybody else, and the code has no way to tell the difference because it no longer looks.

On your first visit a banner asks. You can allow both, allow neither, or open the choices and set them one at a time. Your answer is stored in lc_consent so we do not ask again.

If your browser sends a Global Privacy Control signal, that is your answer. Both switches stay off and you are not asked, because asking someone who has already told us is nagging rather than diligence. You can still turn either switch on yourself from the Privacy choices control if you want to — a choice you make here is more specific and more recent than a browser-wide setting, so it takes precedence.

To change either switch at any time, use the Privacy choices control in the footer of this page. Changes take effect immediately, without a reload.

You can also clear our cookies, which resets both switches, or email support@lessonsinpractice.com and we will suppress your data. Clearing cookies will sign you out.

One thing that is not a choice, because it is not tracking: our own server records which screens were shown, against a short-lived random identifier, with no name or email attached. It never leaves our systems and it is how the funnel stays countable for someone who has switched everything else off.

9. Children

The service is for adults and we do not knowingly collect data from anyone under 18. If you believe a child has given us data, email us and we will delete it.

10. Automated decisions

Your quiz answers decide which lessons you are shown, in what order, over how many days. That is automated, and it is the product. It has no legal effect on you and it does not affect your price.

The plans, their prices and the checkout timer are the same for everyone. The price you see does change while you are on the checkout page — the timer starts when you first reach it, and when it runs out the price goes up to the one printed beside it. That depends on the clock and on nothing about you. We do not price by who you are, what you answered, where you are, or what device you arrived on.

11. Changes

We will change this page when what we do changes. If the change is significant we will email you. The date at the top is the date of the last change.

12. Contact

support@lessonsinpractice.com, or write to Lessons in Practice at the registered address on our site.