Privacy Policy

This Privacy Policy explains how Enroute X ("Enroute X," "we," "us," or "our") collects, uses, and protects your information when you visit our website and use our products and services, including our e-learning application X-Learn.

We are the data controller for personal data processed under this policy.

1. Scope

This policy applies to:

• Visitors to our website
• Customers and business contacts using our services
• Learners, instructors, and organisations using X-Learn

It covers personal data processed under the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

A) Website and Business Enquiries

• Contact details: name, email, phone, company, role
• Messages or enquiries
• Technical data: IP address, browser/device info, pages visited, cookies/SDK data

B) X-Learn (App and Web Platform)

• Account details: name, email, password (hashed), avatar, organisation
• Learning data: courses, progress, quiz scores, certificates, assignments
• Interactions: comments, posts, messages, instructor feedback
• Device data: app version, OS, crash logs, usage timestamps
• Optional permissions: camera/microphone for live classes, storage, push notifications
• Payments (if enabled): transaction IDs only. We do not store full card numbers.

C) Clients and Vendors

• Business contact information
• Contract and billing documents
• Compliance records

Data is collected directly from users, organisations, and via cookies or similar technologies.

3. Why We Use Your Data

Performance of Contract

• Provide and maintain X-Learn
• Deliver professional services
• Support learning activities and certifications

Legitimate Interests

• Improve user experience and platform performance
• Prevent fraud and abuse
• Analytics and business reporting

Consent

• Marketing communications
• Push notifications
• Camera/microphone access
• Certain cookies

Legal Obligations

• Tax and regulatory compliance
• Responding to legal requests

You may withdraw consent at any time.

4. How We Use Your Data

• Account management and authentication
• Course delivery, tracking, certificates
• Learning analytics and personalised recommendations
• Customer support and service notifications
• Diagnostics, crash reporting, and service improvements
• Payment processing via authorised third parties

5. Sharing Your Data

We only share data with:

• Service providers (hosting, email, analytics, payments, customer support)
• Instructors or organisations you learn with
• Legal authorities when required
• Buyers or merger partners in case of business restructuring

We do not sell personal data.

6. International Transfers

Transfers outside the UK/EEA use approved safeguards such as Standard Contractual Clauses and the UK Addendum.

7. Data Retention

• X-Learn accounts: retained while active
• Learning records: as required by organisations or applicable law
• Financial/contract records: retained per statutory requirements

When no longer needed, data is deleted or anonymised.

8. Your Rights

You may request:

• Access to your data
• Correction of inaccurate data
• Deletion (in certain cases)
• Restriction or objection to processing
• Data portability
• Withdrawal of consent

Contact: contact@enroutex.co.uk

You may also complain to the UK ICO.

9. Children’s Privacy

X-Learn is designed for users aged thirteen and above. If used by younger learners, the organisation must secure proper parental or school authorisation.

10. Cookies and Similar Technologies

Used to:

• Keep you signed in
• Remember preferences
• Analyse usage and improve performance

You can manage cookies through your device or browser settings.

11. Security

We use encryption, access controls, monitoring, and other safeguards. While no system is completely secure, we continuously improve our protections.

12. Organisation-Managed Accounts

If your account is created by an organisation:

• They may control certain settings
• Their policies may apply
• Deletion requests may require coordination to maintain academic records

13. Third-Party Links

Third-party websites have their own policies. Review them before sharing data.

14. Changes to This Policy

We may update this policy. Significant changes will be communicated via the app, website, or email.

15. Contact

For questions about this policy or your data rights:

contact@enroutex.co.uk