Privacy Policy

Who we're

Nomadic User Ltd is a company registered in England and Wales (Company no. 09556531). Our registered address is 49 Greek Street, London W1D 4EG. We operate the website at myuxacademy.com and deliver online UX design courses.

For data protection purposes, Nomadic User Ltd is the data controller. You can contact us at hello@myuxacademy.com.

What data we collect

We collect the following personal data:

• Contact information — name and email address when you submit a form, register for a masterclass, or enquire about a course.
• Payment information — when you enrol in a course, payment is processed by Stripe. We don't store your card details. Stripe’s privacy policy applies to payment processing.
• Usage data — pages visited, time on site, device type, and referral source, collected via first-party analytics (Google Analytics and PostHog) and a cookieless server-side counter that records only aggregate statistics. See “Cookies, analytics and advertising” below.
• Phone number — when you book a call with us, or message or call our WhatsApp number.
• Communication data — emails and WhatsApp messages you send us, and our replies.

How we use your data

We use your personal data to:

• Respond to your enquiries and deliver the services you have requested
• Send you course information, masterclass confirmations, and syllabus downloads you have requested
• Send you reminders about a call you've booked with us, by WhatsApp or email. Reply STOP on WhatsApp at any time to stop WhatsApp messages.
• Send you our newsletter if you have subscribed (you can unsubscribe at any time)
• Process your course enrolment and payments
• Improve our website and courses based on anonymised usage data
• Comply with our legal obligations

Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Contract — to deliver courses and services you have purchased
• Legitimate interests — to respond to enquiries and improve our services
• Consent — for marketing emails (newsletter). You can withdraw consent at any time.
• Legal obligation — where required by law

How long we keep your data

• Enquiry and lead data: 2 years from last contact
• Student enrolment records: 7 years (legal requirement for financial records)
• Class recordings: 6 months after the session
• Newsletter subscriber data: until you unsubscribe
• Analytics data: as per Google Analytics and PostHog retention settings (up to 26 months)

If you're a student on one of our courses

Enrolling means we process some data that doesn't apply to website visitors or enquirers. This section explains it.

Live session recordings

Every live session is recorded, and we say so on our course pages because the recordings are part of what you're buying — they let you catch up if you miss a session. A recording will normally capture your voice, your camera image if it's switched on, your display name, and anything you type in the chat or share on screen.

• You may keep your camera off and use a first name only. This won't affect your participation or your assessment.
• Recordings are shared only with students in your cohort and the instructors teaching it. They aren't published, sold, or used in advertising.
• We keep each recording for 6 months after the session, then delete it, including any copy in Google Drive.
• If you'd rather not appear in a recording at all, tell us before the session and we'll agree an alternative.

Our legal basis is contract — delivering the course you bought. If we ever wanted to use a recording for anything else, such as marketing, we'd ask you separately and you'd be free to say no.

What we hold about you as a student

When you enrol, we keep:

• your name, email address and, if you give it, your phone number
• your enrolment and payment record: course, cohort, price, deposit and balance, and any instalment plan or scholarship discount
• your attendance, and the recordings your voice, camera image or chat appears in
• your project work and the feedback you get on it
• your replies to check-ins and our end-of-course survey
• messages you send us by email, Slack or WhatsApp

Our legal basis is contract: we need this to run the course you bought. We keep payment records for 7 years because the law requires it. Anything beyond that, such as using your name, quote, photo or work to promote us, is consent. We ask separately and you can withdraw it at any time.

The tools we use to teach you

We share only what each tool needs.

• Zoom — live classes and recordings.
• Google Drive — where recordings, slides and recap emails are shared with your cohort and trainers.
• Slack — the cohort community and your team channel.
• Figma, FigJam, Mural and UXtweak — your coursework. FigJam is the class board and Mural is used for mentor sessions. We give Figma and UXtweak your email address so they can set up your seat.

AI transcription of class recordings

We use AI transcription tools on class recordings to help us write course content, such as our weekly cohort blog. We never name or quote a student without asking you first, and we don't publish a clip of you without your yes for that specific clip.

Your coursework and the live client project

Our courses include a brief from a real organisation. Your work on that brief, including your name, is shared with that organisation so they can give you feedback — that exchange is the point of the exercise. We tell you which organisation it is before the project starts. The client joins calls only. It isn't in our Slack, and it sees only what's shared in sessions and the work you present.

Publishing student work

We publish selected student projects on this website as case studies. We do this only with your explicit permission, asked for separately at the time, and you can withdraw that permission later — email us and we'll remove the work. Where a project contains a client’s commercial information or anything identifying third parties, we redact it before publishing.

Scholarship applications

Our scholarship form asks you to confirm that you meet the eligibility criteria. It deliberately does not ask which criterion applies to you, and we don't record it. Some of those categories would be special category data under UK GDPR, and we'd rather not hold it than hold it carefully.

Free tools and tool accounts

Our free UX tools at myuxacademy.com/tools work without an account: you can use them, build a study, preview it, and download or copy your work. You only need an account to share a study (to get the link participants use) or to keep your studies in My work.

What we store when you make an account.

• your email address, and the country we infer from your IP address when you sign up
• which tool and action you signed up from
• the studies you create or add to your account: their setup, and the anonymous responses participants give
• an optional answer to “what best describes you?”, if you give one
• whether you ticked the email box, when, and the exact wording you saw

Why, and our legal basis. We hold this to give you the service you asked for (sign-in, sharing, saving, My work): that is the contract basis. We also run aggregate analytics on how the tools are used, which is legitimate interests, with the same opt-out as the rest of the site. We use your email for sign-in links and for service messages about your account (for example, one welcome message when you sign up, and a confirmation if you delete your account). We don't send you marketing unless you tick the box.

How we measure use of the tools, with or without an account.

When you open a tool we record the visit: your IP address, approximate location (country and city, worked out from the IP), device type and browser, the page you came from, which tool you used, how long you actively used it (time with the tab open and you doing something, not time left idle), and simple actions such as downloading or copying your work. If you're signed in we link the visit to your account, and when you sign up we link earlier visits from the same browser. We use no cookie or browser storage for this, and we never record what you type or build in a tool.

We do this to understand how the tools are used and to improve them: that is legitimate interests, with the same opt-out as the rest of the site. We keep the raw IP address for 90 days, after which it's removed and only a scrambled (hashed) version remains. We delete usage records after 24 months.

Marketing is a separate, unticked choice. If you tick “Send me occasional UX tips and news about UX Academy courses” we add you to two lists: the UX Academy newsletter and a list for updates about the free tools. Each list has its own unsubscribe link, so you can leave one and stay on the other, and you can change both from Account in My work. If you don't tick the box we don't add you to either.

How long we keep it. Studies you own stay open for 12 months from the last time you opened their results. We keep your account until you delete it, which you can do at any time from Account. Participant responses are anonymous: we don't ask participants for their name or email and we don't link a response to a person.

Your controls. In Account you can export everything we hold as a JSON file, change your email choices, and delete your account. Deleting removes your account details; your studies are detached from you and expire within 90 days so your participants aren't cut off mid-study. The sign-in cookie is strictly necessary and is set only when you sign in. Email hello@myuxacademy.com if you'd rather we did any of this for you.

We use Supabase (storage and sign-in, EU servers) and Resend (email delivery) to run this. They are listed below with our other processors.

Who we share your data with

We don't sell your personal data. We share it only with the following third-party services that help us operate:

• Resend — email delivery
• Stripe — payment processing
• Supabase — data storage (EU servers)
• Google Analytics — website analytics
• PostHog — product analytics (EU Cloud)
• Advertising platforms — Meta, Google Ads, Microsoft (Bing), LinkedIn, TikTok and X, via measurement and advertising pixels
• Zoom — live course delivery and session recordings
• Google (Drive, Gmail) — sharing recordings, slides and course emails
• Figma, FigJam, Mural and UXtweak — course tools, student email addresses only
• Slack — the student community for your cohort
• Cal.com — booking calls with us
• Twilio and WhatsApp (Meta) — WhatsApp messages and phone calls to our UX Academy number
• Cloudflare Turnstile — spam protection on our forms
• The client organisation whose brief your cohort works on, for the live project only, and named to you before that project starts
• n8n — workflow automation

All processors are required to handle your data in accordance with UK GDPR.

Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (“right to be forgotten”)
• Restriction — ask us to restrict how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests
• Withdraw consent — unsubscribe from marketing at any time

To exercise any of these rights, email hello@myuxacademy.com. We'll respond within 30 days.

Cookies, analytics and advertising

We use first-party analytics to understand how the site is used and to improve it: Google Analytics and PostHog (product analytics, hosted in the EU), plus a cookieless server-side counter that records only aggregate page and device statistics. Under the UK Data (Use and Access) Act 2025, first-party analytics used solely for aggregate statistics don't require prior consent, so these run by default and we don't display a cookie-consent banner. We don't use them to identify you personally.

We also run advertising and measurement pixels through Google Tag Manager (Meta, Google Ads, Microsoft/Bing, LinkedIn, TikTok and X). These may set cookies and share limited usage data with those platforms so we can measure and improve our advertising.

Your choices. The quickest way to opt out is the “Cookie settings” link at the bottom of any page: choose Opt out and we stop analytics and stop loading the advertising pixels on this device. You can change it back from the same place. You can also block or delete cookies in your browser settings — the site still works normally — or opt out of ad personalisation directly with each platform (for example, Google Ads Settings and Meta’s ad preferences). If you would rather we handled it for you, email hello@myuxacademy.com.

Complaints

If you have concerns about how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of our services after changes constitutes acceptance of the updated policy.