Privacy policy

employees and other individuals given access to reedooyoo through an organisation's licence;

HR, wellbeing, management or administrative contacts at organisations using reedooyoo;

prospective business customers and their representatives;

visitors to the reedooyoo website;

people who contact us by email, contact form or other business communication; and people who choose to receive communications from reedooyoo.

The personal information we collect depends on your relationship with reedooyoo and how you use the service.

This may include:

• your name;

• work or other email address;

• employer or organisation;

• job title, where relevant;

• account and login information;

• account status; and

• information required to provide and administer access to the platform.

3.2 Information provided by your organisation

Where your employer or another organisation provides access to reedooyoo, it may provide us with limited personal information so that we can create, allocate or administer your account.

This will usually be limited to information such as your:

name;

email address;

organisation; and

information needed to allocate access under the relevant company licence.

This may include:

• IP address;

• browser and device information;

• operating system;

• login and access information;

• pages or areas of the platform visited;

• platform activity and usage information;

• date and time of access;

• cookie information; and

• technical and security information.

If you contact reedooyoo, we may collect:

• your name and contact details;

• your organisation;

• the contents of your enquiry;

• correspondence with you; and

• information needed to respond to or resolve your enquiry.

reedooyoo does not require users to provide medical records, health information, mental-health information or other special-category personal data in order to access the platform.

Please do not include sensitive medical, health or personal information in website contact forms, support messages or other general correspondence with us.

If sensitive information is provided to us unexpectedly, we will take reasonable steps to minimise, restrict or delete it where appropriate and will not use it for profiling, advertising or determining your access to reedooyoo.

• directly from you;

• from the organisation providing your reedooyoo access;

• when an account is created or administered;

• when you log in or use the platform;

• when you contact us;

• when you choose to receive communications;

• through cookies and similar technologies; and

• through service providers involved in operating and securing the platform.

Where your personal information has been supplied by your employer or another organisation, that organisation is the source of the account information provided to us.

• create and administer user accounts;

• provide access to the reedooyoo platform and audio library;

• manage organisational licences;

• authenticate users and maintain platform security;

• provide customer and technical support;

• communicate about account access, platform changes or service matters;

• respond to enquiries;

• maintain business and customer records;

• prevent fraud, misuse or unauthorised access;

• protect reedooyoo’s intellectual property and digital content;

• understand how the service is being used;

• improve the platform, content and user experience;

• manage our relationship with business customers;

• send optional communications where permitted;

• comply with legal, regulatory, accounting and tax obligations; and

• establish, exercise or defend legal rights where necessary.

Depending on the circumstances, we may rely on the following lawful bases.

We may process personal data where this is necessary to enter into or perform an agreement with an organisation using reedooyoo or to manage our relationship with an authorised representative of that organisation.

We may process personal data where this is necessary for our legitimate business interests or those of an organisation providing reedooyoo to its workforce, provided those interests are not overridden by your rights and interests.

These legitimate interests may include:

• providing and administering access to the service;

• managing organisational licences;

• maintaining security;

• preventing misuse or unauthorised sharing;

• providing support;

• maintaining appropriate business records;

• understanding and improving the service; and

• communicating with business customers and users about the service.

We may rely on your consent for activities such as:

• optional marketing or promotional communications; and

• non-essential cookies or similar technologies where consent is required.

You may withdraw your consent at any time.

We may process or retain certain information where necessary to comply with legal, regulatory, tax or accounting obligations.

These may include:

• account activation information;

• login or access information;

• security communications;

• important changes to the service;

• technical information; and

• other communications reasonably necessary to provide access under an organisation’s licence.

We may also send optional wellbeing content, information about reedooyoo resources, product updates or other communications where permitted by law.

Where communications are optional, you can unsubscribe or change your preferences using the unsubscribe option provided or by contacting us.

Unsubscribing from optional communications will not prevent us from sending essential account or service messages.

Non-essential cookies are used only in accordance with your cookie choices where consent is required.

For full details, please see our Cookie Policy.

Where LearnWorlds processes personal data relating to reedooyoo users on our behalf, it acts as a data processor and processes that information in accordance with our agreement and its applicable data-processing obligations.

Information processed through the platform may include account information, login information, technical information and platform usage information necessary to provide the service.

We may also use other trusted service providers where necessary for:

• website and platform operation;

• hosting and infrastructure;

• email communications;

• security;

• analytics;

• business administration;

• accounting;

• IT and technical support; and

• professional advice.

We only share personal data where reasonably necessary for the relevant service or where required by law.

This may include information such as whether an account has been allocated, created or activated.

Where we provide organisations with information about use of reedooyoo, we provide only organisation-level or appropriately aggregated information. We do not provide an employer or organisation with an individual user’s listening history, individual bundle or session choices, or information intended to reveal why a particular user is using reedooyoo. Where user numbers or activity are too small to report safely or meaningfully, we may withhold, combine or simplify the information.

We do not provide employers with the content of private enquiries or communications you send directly to reedooyoo unless you ask us to do so or disclosure is required by law.

We do not provide employers with medical or mental-health information about individual users.

We may share personal data where necessary with:

• LearnWorlds and other platform providers;

• IT, hosting and security providers;

• email and communication providers;

• accountants, bookkeepers and professional advisers;

• organisations administering a reedooyoo licence, to the limited extent necessary for account administration;

• regulators, courts or law-enforcement bodies where legally required; and

• other parties where necessary to protect our legal rights, prevent fraud or investigate misuse.

Where another organisation acts as a processor on our behalf, it is required to handle personal data appropriately and only for the purposes for which it has been engaged.

Where personal data is transferred internationally, we take reasonable steps to ensure that appropriate safeguards required by UK data protection law are in place.

These may include transfers to countries recognised as providing an adequate level of protection or the use of approved contractual safeguards.

The period will depend on the type of information and why we hold it.

For example:

• account information may be retained while an organisation’s licence and the user’s access remain active;

• account and access records may be retained for a reasonable period following the end of access where necessary for security, administration or legal purposes;

• business customer and contractual records may be retained where necessary for legal, tax and accounting purposes;

• support and correspondence records may be kept for a reasonable period where needed for customer service, business records or dispute resolution;

• marketing information will be retained until you unsubscribe or we no longer need it, although we may retain limited suppression information to ensure we respect an opt-out; and

• information relating to legal disputes, fraud or misuse may be retained for as long as reasonably necessary to protect our legal rights.

If an organisation’s licence or pilot ends and access does not continue, we will remove or suspend user access and begin deleting or anonymising personal data that is no longer required to provide the service. We may retain limited account, security, contractual or legal records for a reasonable period where necessary, and residual copies held in provider backups may remain until they expire through the provider’s normal retention cycle. De-identified aggregate information may be retained where it no longer identifies an individual.

We periodically review the personal data we hold and delete or anonymise information that is no longer required where appropriate.

These measures may include:

• secure hosted systems;

• controlled administrative access;

• authentication and password protection;

• encryption and secure connections where appropriate;

• limiting access to personal information;

• security monitoring;

• reputable technology providers; and

• appropriate data-processing agreements with service providers.

No online service can guarantee absolute security, but we take reasonable steps to protect the information entrusted to us.

The majority of users are expected to be adults, but some users may be aged 16 or 17.

Where a user is under 18, we take particular care to minimise the personal information collected and to use it only for appropriate operational purposes connected with providing the service.

We do not use the personal data of users under 18 for behavioural advertising or create advertising profiles based on their use of reedooyoo.

Users under the age of 16 should not be enrolled in or use reedooyoo through a company licence.

If we become aware that an account has been provided to someone under 16, we may contact the organisation responsible for the licence and take appropriate steps regarding the account and associated personal data.

These may include the right to:

• request access to the personal data we hold about you;

• ask us to correct inaccurate or incomplete information;

• ask us to delete personal data in certain circumstances;

• ask us to restrict the processing of your data;

• object to certain types of processing;

• withdraw consent where processing is based on consent;

• request transfer of your data in certain circumstances; and

• complain about how your personal data has been handled.

Not all rights apply in every situation.

To exercise your rights, please contact:

hello@reedooyoo.com

We may need to verify your identity before completing a request.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.

Further information is available at ico.org.uk.

We are not responsible for the privacy practices of those independent organisations.

Where you visit a third-party website or use a third-party service, you should review its own privacy information.

The current version will be published on the reedooyoo website.

Where a change materially affects how we use personal data, we will take reasonable steps to bring it to the attention of affected users where appropriate.

Reedooyoo Ltd trading as reedooyoo

Email: hello@reedooyoo.com

Website: www.reedooyoo.com