Privacy Policy

1. Who We Are

ALN Made Simple is operated by Steven Campbell, trading as The ALN Advisor, a sole trader based in Wales, United Kingdom.

📧 info@alnmadesimple.co.uk

We are the Data Controller for personal information you provide when creating an account or purchasing a plan.

2. What Information We Collect

We collect only the minimum information necessary to operate and improve the Platform.

(a) Information you provide directly

• Name and email address (for account login and correspondence).
• Payment information (processed securely by our payment provider – we do not store card details).
• Any text you enter into tools or forms.

(b) Information collected automatically

• Basic usage data (browser type, device type, pages visited).
• Cookies or similar technologies used to maintain your session and understand site performance. (See Section 8 – Cookies.)

3. Information You Must Not Provide

The Platform is designed for professional planning and training, not for storing or transmitting real learner data. You must not enter or upload:

• Learner names, initials, or identifying codes.
• Dates of birth, addresses, school names, or medical details.
• Any other information that could identify an individual.

All examples, case studies or inputs should be fully anonymised. Users are responsible for ensuring compliance with UK data-protection and confidentiality obligations within their own organisation.

4. How We Use Your Information

We use your information only to:

• Create and manage your account.
• Provide access to free and premium tools.
• Communicate essential updates or service information.
• Process payments (via secure third-party processors).
• Improve site performance and user experience.

We do not sell, rent, or trade your information with anyone.

5. AI and Third-Party Processing

Some ALN Made Simple tools use secure artificial-intelligence services (for example, OpenAI) to generate written summaries or strategy suggestions.

When you use these tools:

• Your input text is temporarily transmitted to the AI service provider to generate a response.
• We do not store these inputs or outputs once the session ends.
• The AI provider may process the data in accordance with its own privacy policy.
• You must only submit anonymised information and must not include any personally identifiable data.

Our AI integrations are conducted securely, using encryption and reputable processors that meet international data-protection standards.

6. Google Drive Integration (Optional Export Feature)

Some tools on ALN Made Simple offer an optional feature to export your work directly to Google Drive (via Google Docs or Google Sheets). This feature is entirely voluntary.

(a) How it works

• When you choose to export to Google Drive, you will be asked to connect your Google account using Google's secure authentication (OAuth 2.0).
• We request permission to create and edit documents/spreadsheets in your Google Drive on your behalf.
• The export feature sends the content you have created in our tool directly to a new document in your Google Drive.
• We do not store or access any other files in your Google Drive – only the documents we create for you when you use the export feature.

(b) Your responsibility

• You control which Google account you connect to ALN Made Simple.
• Important: We recommend using a Google account that is appropriate for professional use and complies with your organisation's data-protection policies. If your school or workplace has specific requirements about cloud storage and third-party access, please consult those policies before connecting a work account. Using a personal Google account may help avoid granting access to sensitive organisational data stored elsewhere in your Drive, but you should follow your organisation's guidance.
• You remain responsible for ensuring that any content you export complies with data-protection obligations and does not contain personally identifiable learner information.
• You can revoke ALN Made Simple's access to your Google Drive at any time via your Google Account settings (myaccount.google.com/permissions).

(c) Data protection and GDPR compliance

• When you export content to Google Drive, that data is stored in your Google account and is subject to Google's own privacy policies and terms of service.
• You (or your organisation) remain the data controller for any content you export. Google provides Drive services as an independent controller under its own terms (for consumer accounts) or under separate data-processing agreements (for Google Workspace accounts managed by your organisation).
• We do not retain copies of exported documents on our servers. We store only a minimal transaction record (date and time of export) for service operation and troubleshooting purposes.
• We recommend reviewing Google's privacy policy and security practices at policies.google.com, and ensuring any Google account you connect has appropriate data-protection safeguards for your use case.
• If you do not wish to use this feature, you may export your work in PDF or Excel format instead, which downloads directly to your device without connecting to Google.

7. Legal Basis for Processing

We process data under the following lawful bases:

• Contract: to deliver the services you request.
• Consent: where you choose to receive communications.
• Legitimate Interests: to maintain and improve the Platform.
• Legal Obligation: where required by law.

8. How We Store and Protect Your Information

• Account data is stored securely using reputable UK or EEA-based providers.
• AI-tool inputs are processed temporarily and are not retained.
• We use encryption, password protection and regular security monitoring.
• Access to data is limited to essential personnel only.

9. Cookies and Analytics

We use essential cookies for login and site functionality. With your consent, we may use optional analytics cookies (e.g. Google Analytics) to understand usage patterns.

You can control or delete cookies via your browser settings. See our separate Cookie Policy for details.

10. How Long We Keep Your Information

• Account data: kept while your account remains active.
• Payment records: retained as legally required for accounting purposes.
• AI inputs: not stored after processing.

When data is no longer needed, it is securely deleted or anonymised.

11. Sharing Your Information

We only share limited data with trusted service providers who help us run the Platform (e.g. hosting, email, payment, AI integration). All processors act under written agreements and meet UK GDPR standards.

We may disclose information if required by law or to protect our legal rights.

12. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion (where legally possible).
• Withdraw consent for communications.
• Object to certain processing or request data portability.

To exercise your rights, contact info@alnmadesimple.co.uk.

If you are dissatisfied, you may contact the Information Commissioner's Office (ICO): www.ico.org.uk.

13. International Transfers

Where data is processed outside the UK/EEA (e.g. by OpenAI in the US), we ensure that appropriate safeguards (such as UK Addendum to EU Standard Contractual Clauses) are in place.

14. Children's Privacy

The Platform is intended for educational professionals and not for direct use by children or learners. We do not knowingly collect or process personal data from anyone under 18.

15. Updates to This Policy

We may revise this Policy from time to time. The most current version will always be available on this page, with the update date shown at the top.

16. Contact

If you have any questions about this Privacy Policy or how we handle data, please contact: 📧 info@alnmadesimple.co.uk