Privacy Policy

Who is responsible

Nuclei, 5 Longmead, Hatfield, AL10 0AB, United Kingdom, is the data controller for the information described here. For anything to do with your data, email hello@nucleibiology.co.uk.

What we collect

• Your email address, if you join a waiting list, create an account, or contact us.
• Your name, year group, exam board, and whether you are a student, teacher, parent or tutor, when you create an account. We ask because it changes what we write and who we write it for — it is not used to advertise to you, and it is never sold or shared.
• Whether your email address has been confirmed, which is what unlocks your downloads and stops someone signing up as an address that isn't theirs.
• Where you came from, if you arrived through a tagged link we posted (for example one in a video description). This records the platform only — never who you are on it.
• Order information when you buy — what you bought and when. Payment is handled entirely by Stripe; we never receive or store your card number.
• Study activity, once accounts are open — which lessons you have opened or completed, anything you favourite, and personal notes you write. This exists to make the product work for you, and is not shared.
• Download records — which files your account downloaded and when, so that materials shared in breach of our terms can be traced.

We do not use advertising trackers. We use Cloudflare Web Analytics to see how many people visit and which pages they look at, in aggregate. It does not use cookies or any other identifier stored on your device, does not track you across other sites, and does not build a profile of you individually.

Why we are allowed to hold it

For order and account data, because we need it to perform the contract you entered into. For waiting-list and mailing-list emails, because you asked us to contact you — consent you can withdraw at any time. For download records and fraud prevention, because we have a legitimate interest in protecting the material we sell. For anything we are required to keep — tax records, for instance — because the law says so.

Emails, and how to stop them

Claiming a free sample also puts you on our mailing list, so you hear when new modules are released. We say so on the page before you claim, and it is the only thing we ask in exchange for the free notes.

You can leave at any time: use the unsubscribe link at the bottom of any of those emails, or turn "emails about new modules" off in your account settings. Either takes effect immediately, and neither affects anything you have already downloaded. We will still send you the emails needed to run your account — confirming your email address, resetting your password, and confirming what you have claimed or bought — because those are not marketing.

Who we share it with

We use a small number of service providers, each of which processes data on our behalf:

• Stripe — payments and payment records.
• Neon — the database holding account and order data.
• Cloudflare — website hosting, file storage, routing email sent to our address, and privacy-focused analytics on site traffic.
• Resend — sending email from our address.
• Google — the mailbox that receives email you send us, and, if you choose to sign in with Google, the service that confirms who you are. We receive your name, email address and profile picture from Google; we never receive your Google password.

Some of these providers operate outside the UK. Where data is transferred abroad, it is protected by the safeguards required under UK data protection law. We never sell your data, and we do not share it for third-party advertising.

How long we keep it

Account and study data for as long as your account exists, and for a short period afterwards in case you come back. Order records for six years, because tax law requires it. Waiting-list emails until you ask us to remove you, or until the thing you were waiting for has launched and you have not signed up.

Cookies

We use only what is necessary to run the site — a session cookie to keep you signed in, and a stored preference for light or dark mode. Our analytics tool is cookieless by design, so there are no advertising or analytics cookies, which is why you are not being asked to accept anything.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to send it elsewhere. Email us and we will respond within one month, normally much sooner. There is no charge.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.

Young people

Most of our customers are sixth-form students, and many are under 18. UK data protection law lets a child aged 13 or over consent to an online service themselves, so we do not ask for parental permission — but we do keep what we collect to a minimum, we do not profile users, we do not serve advertising, and we do not share anything with third parties for their own purposes.

If you are under 13, please do not create an account. If you are a parent or guardian and want to know what we hold about your child, to correct it, or to have it deleted, email us and we will deal with it.