Skip to main content
Stripe test mode is active: only Stripe test cards (for example 4242 4242 4242 4242) will work — real cards will not charge. Runtime settings could not be loaded from the database; conservative defaults are in effect.

AAT Solutions Academy

Privacy

This page explains, in plain English, what personal information this academy stores, why it is used, and which third-party services are involved in delivering sign-in, learning access, checkout, email, and support.

Who this applies to

This privacy information applies to people who buy access directly, receive learner access through an organisation, sign in to the academy, send a commercial enquiry, or join a waiting list for launches and updates.

Information we may hold

  • Your name and email address.
  • Organisation details where access is linked to a team or employer purchase.
  • Licence, entitlement, and learner-access records showing how access was granted and when it expires.
  • Learning progress, including completed steps and related progression data needed to resume courses.
  • Purchase and fulfilment records needed to provision access correctly.
  • Commercial enquiry information you choose to submit through the public contact form.
  • Waiting-list registrations for news, launches, or promotional updates.
  • Affiliate referral records and a referral cookie that lasts up to 30 days when you arrive through a tracked partner link, so the academy can attribute that purchase route correctly.
  • Passwordless partner-portal access links and a secure partner- session cookie when an approved affiliate opens their reporting workspace. The raw access token is never stored on the academy server; only its SHA-256 hash is kept for comparison.
  • A hashed form of request IP information for the commercial enquiry form, used for low-friction abuse control.

Why the information is used

  • To authenticate you and let you sign in securely.
  • To provision learner access, organisation seats, and direct admin grants.
  • To show your entitled courses and save your learning progress.
  • To process purchases and fulfil access correctly after checkout.
  • To send transactional messages such as sign-in links, purchase confirmations, organisation onboarding emails, and waiting-list announcements.
  • To attribute tracked affiliate referrals when a buyer follows a partner link and later completes checkout.
  • To let approved affiliate partners open a secure self-service reporting portal without a separate password. The partner workspace deliberately excludes buyer personal data.
  • To respond to commercial enquiries and support requests.
  • To administer the platform, investigate misuse, and maintain audit trails for important admin actions.

Services used by the platform

  • Supabase is used for authentication, database storage, and core platform data.
  • Stripe is used for checkout and payment processing.
  • Postmark is used for transactional email delivery from the application.
  • Bunny Stream may be used to deliver learner video content where a course includes hosted video.

Payment card details are handled by Stripe rather than stored directly in this application.

Retention and access

Information is kept only for as long as it is needed to deliver the academy, administer licences and learner access, support reporting, respond to enquiries, or maintain reasonable business and audit records.

If you need help tracing what information is associated with your learner account, the best starting point is the email address linked to your access.

Questions

For privacy or data-handling questions about AAT Solutions Academy, contact academy@aatsolutions.uk.

Back to AAT Solutions Academy