Privacy Policy

1. Introduction

Fupihu ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online learning platform services. This policy complies with Finnish data protection laws and the General Data Protection Regulation (GDPR).

2. Information We Collect

3. How We Use Your Information

We process your personal data for the following purposes:

• Providing access to online courses and educational content
• Tracking learning progress and issuing certificates
• Processing payments and managing subscriptions
• Personalizing your learning experience and recommendations
• Communicating course updates, announcements, and support
• Improving our platform and developing new educational features
• Ensuring platform security and preventing fraud
• Complying with legal obligations and educational regulations

4. Legal Basis for Processing

Under Finnish law and GDPR, we process your data based on:

• Contract performance: To provide educational services you've enrolled in
• Legitimate interests: To improve our platform and provide customer support
• Consent: For marketing communications and optional features
• Legal obligation: To comply with educational and financial regulations

5. Information Sharing and Disclosure

We may share your information with:

6. Data Retention

We retain your personal data:

• Account information: Until you delete your account or 7 years after last activity
• Course progress and certificates: Permanently for verification purposes
• Payment records: 10 years as required by Finnish accounting laws
• Marketing data: Until you withdraw consent

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

8. Data Security

We implement appropriate security measures including:

• SSL encryption for data transmission
• Regular security audits and vulnerability assessments
• Access controls and employee training on data protection
• Secure backup and disaster recovery procedures
• Compliance with Finnish cybersecurity requirements

9. International Data Transfers

When we transfer data outside the EU/EEA, we ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Additional safeguards as required by Finnish data protection authorities

10. Cookies and Tracking

Our platform uses cookies and similar technologies to:

• Remember your login status and preferences
• Track course progress and learning analytics
• Provide personalized content recommendations
• Analyze platform usage for improvements

You can manage cookie preferences through your browser settings or our cookie consent tool.

11. Children's Privacy

Our services are not intended for children under 16 years of age. If we learn that we have collected personal information from a child under 16 without proper consent, we will delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information