Legal

Privacy Policy

Last updated: September 2026

1. Who we are

ValueKnow Aerospace is operated by Llu�s Foreman (foreman@valueknow.com), acting as the data controller for the personal data described below. This platform is not directed at children under 14.

2. What we collect and why

Data	Purpose	Legal basis
Account data: username, email, password (hashed)	Create your account, log you in, send password-reset emails	Contract (Art. 6(1)(b) GDPR)
Learning data: lesson progress, quiz answers and scores	Show you your progress through the courses	Contract
Payment metadata: Stripe session ID, amount, currency	Record your subscription and entitlements	Contract; legal retention duties
Technical logs (IP, user agent) kept by our hosting provider	Security and service operation	Legitimate interest (Art. 6(1)(f))

Card details are processed by Stripe on Stripe's own infrastructure. We never see or store your card number. The free course requires no account and no personal data: progress made as a visitor is kept only in your browser session and is not stored by us. When you begin a subscription, we first ask a few optional background questions (e.g. your reason for learning). If you complete registration but the payment does not go through, that information is kept only as a pending signup record to complete your purchase and is deleted automatically after 30 days. A full account is created only once the payment confirms.

3. Service providers (processors)

Stripe — payments and subscriptions (US company; EU data transfer under the EU–US Data Privacy Framework). Stripe's own privacy policy applies to payment data it processes.
Render — application hosting (EU region).
Neon — PostgreSQL database hosting (Frankfurt, Germany).
Bunny Stream — video encoding, storage and CDN delivery.

We do not sell personal data, and we do not run advertising or third-party analytics on this site. No tracking cookies are used — only the strictly necessary session and CSRF cookies required for the site to function, plus a local (on-device) preference for light/dark mode.

4. Retention

Account and learning data are kept while your account is active. Payment records are retained as long as required by Spanish tax and accounting law (generally 4–10 years). Server logs are retained by our hosting provider for a limited period (currently up to 7 days).

5. Your rights

You may request access, rectification, erasure, restriction, portability of your data, and object to processing, by emailing foreman@valueknow.com — we respond within 30 days. You may also lodge a complaint with the Spanish data protection authority (www.aepd.es) or your local authority. To delete your account yourself, email us from your account address; deletion removes your profile, progress and subscriptions (payment records are anonymised and kept only as required by law).

6. Security & breaches

Data is encrypted in transit (HTTPS) and at rest, access is restricted, and we maintain an incident-response procedure including notification to the competent authority within 72 hours where required.