Privacy Policy

Who we are

Nomadic User Ltd is a company registered in England and Wales (Company no. 09556531). Our registered address is 49 Greek Street, London W1D 4EG. We operate the website at myuxacademy.com and deliver online UX design courses.

For data protection purposes, Nomadic User Ltd is the data controller. You can contact us at hello@myuxacademy.com.

What data we collect

We collect the following personal data:

• Contact information — name and email address when you submit a form, register for a masterclass, or enquire about a course.
• Payment information — when you enrol in a course, payment is processed by Stripe. We do not store your card details. Stripe’s privacy policy applies to payment processing.
• Usage data — pages visited, time on site, device type, and referral source, collected via first-party analytics (Google Analytics and PostHog) and a cookieless server-side counter that records only aggregate statistics. See “Cookies, analytics and advertising” below.
• Communication data — emails you send us and our replies.

How we use your data

We use your personal data to:

• Respond to your enquiries and deliver the services you have requested
• Send you course information, masterclass confirmations, and syllabus downloads you have requested
• Send you our newsletter if you have subscribed (you can unsubscribe at any time)
• Process your course enrolment and payments
• Improve our website and courses based on anonymised usage data
• Comply with our legal obligations

Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Contract — to deliver courses and services you have purchased
• Legitimate interests — to respond to enquiries and improve our services
• Consent — for marketing emails (newsletter). You can withdraw consent at any time.
• Legal obligation — where required by law

How long we keep your data

• Enquiry and lead data: 2 years from last contact
• Student enrolment records: 7 years (legal requirement for financial records)
• Newsletter subscriber data: until you unsubscribe
• Analytics data: as per Google Analytics and PostHog retention settings (up to 26 months)

If you are a student on one of our courses

Enrolling means we process some data that does not apply to website visitors or enquirers. This section explains it.

Live session recordings

Every live session is recorded, and we say so on our course pages because the recordings are part of what you are buying — they let you catch up if you miss a session. A recording will normally capture your voice, your camera image if it is switched on, your display name, and anything you type in the chat or share on screen.

• You may keep your camera off and use a first name only. This will not affect your participation or your assessment.
• Recordings are shared only with students in your cohort and the instructors teaching it. They are not published, sold, or used in advertising.
• We keep them for 12 months after your course ends, then delete them.
• If you would rather not appear in a recording at all, tell us before the session and we will agree an alternative.

Our legal basis is contract — delivering the course you bought. If we ever wanted to use a recording for anything else, such as marketing, we would ask you separately and you would be free to say no.

Your coursework and the live client project

Our courses include a brief from a real organisation. Your work on that brief, including your name, is shared with that organisation so they can give you feedback — that exchange is the point of the exercise. We tell you which organisation it is before the project starts.

Publishing student work

We publish selected student projects on this website as case studies. We do this only with your explicit permission, asked for separately at the time, and you can withdraw that permission later — email us and we will remove the work. Where a project contains a client’s commercial information or anything identifying third parties, we redact it before publishing.

Scholarship applications

Our scholarship form asks you to confirm that you meet the eligibility criteria. It deliberately does not ask which criterion applies to you, and we do not record it. Some of those categories would be special category data under UK GDPR, and we would rather not hold it than hold it carefully.

Who we share your data with

We do not sell your personal data. We share it only with the following third-party services that help us operate:

• Resend — email delivery
• Stripe — payment processing
• Supabase — data storage (EU servers)
• Google Analytics — website analytics
• PostHog — product analytics (EU Cloud)
• Advertising platforms — Meta, Google Ads, Microsoft (Bing), LinkedIn, TikTok and X, via measurement and advertising pixels
• Zoom — live course delivery and session recordings
• Slack — the student community for your cohort
• Cal.com — booking calls with us
• Cloudflare Turnstile — spam protection on our forms
• The client organisation whose brief your cohort works on, for the live project only, and named to you before that project starts
• n8n — workflow automation

All processors are required to handle your data in accordance with UK GDPR.

Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (“right to be forgotten”)
• Restriction — ask us to restrict how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests
• Withdraw consent — unsubscribe from marketing at any time

To exercise any of these rights, email hello@myuxacademy.com. We will respond within 30 days.

Cookies, analytics and advertising

We use first-party analytics to understand how the site is used and to improve it: Google Analytics and PostHog (product analytics, hosted in the EU), plus a cookieless server-side counter that records only aggregate page and device statistics. Under the UK Data (Use and Access) Act 2025, first-party analytics used solely for aggregate statistics do not require prior consent, so these run by default and we do not display a cookie-consent banner. We do not use them to identify you personally.

We also run advertising and measurement pixels through Google Tag Manager (Meta, Google Ads, Microsoft/Bing, LinkedIn, TikTok and X). These may set cookies and share limited usage data with those platforms so we can measure and improve our advertising.

Your choices. The quickest way to opt out is the “Cookie settings” link at the bottom of any page: choose Opt out and we stop analytics and stop loading the advertising pixels on this device. You can change it back from the same place. You can also block or delete cookies in your browser settings — the site still works normally — or opt out of ad personalisation directly with each platform (for example, Google Ads Settings and Meta’s ad preferences). If you would rather we handled it for you, email hello@myuxacademy.com.

Complaints

If you have concerns about how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of our services after changes constitutes acceptance of the updated policy.