Privacy Policy
Last updated: 14 October 2026
This policy explains how Inyotta Analytica Limited collects and uses your personal data when you visit the Inyotta Identity Academy pages, register for a programme, take part in one, or submit a score to the leaderboard in our Access Granted game.
Who we are
Inyotta Identity Academy is part of Inyotta Analytica Limited, a company registered in England and Wales (company number 15897304). Our registered office is 136 Verona House, 16 Miller Road, Dagenham, RM9 6GL.
We are the controller of your personal data. If you have any questions about this policy or your data, email us at info@inyottaanalytica.com.
What we collect
- When you register: your first and last name, email address, WhatsApp number, country or region, the programme and cohort you choose, how you heard about us, your payment option, and the consent choices you make on the form.
- When you pay: we send you a payment link from our bank, Tide. Tide handles your card details; we never see or store them. We receive a record of the payment, including your name, the amount, the date and the payment reference.
- During the programme: your attendance, the lab work and portfolio project you submit, and the feedback we give you.
- In the WhatsApp community: your name, phone number and the messages you post, which other members of the group can see.
- On the Access Granted leaderboard: the nickname and email address you enter, your score and game details (career track, level reached and accuracy), the date and time, whether you ticked the marketing box, and a scrambled one-way version of your IP address that can't be turned back into the original. Your nickname and score are shown publicly; your email address is never shown.
How and why we use it
UK data protection law requires us to have a lawful basis for each use of your data.
- To process your registration and deliver the programme, including sending payment links, class details and feedback. Lawful basis: performing our contract with you.
- To keep financial records. Lawful basis: legal obligation. UK tax law requires companies to keep these records for six years.
- To email you about your registration, payment, onboarding and programme administration, as you agree to on the registration form. Lawful basis: performing our contract with you, and your consent.
- To run the WhatsApp community. Lawful basis: performing our contract with you. Joining the group is optional.
- To run the Access Granted leaderboard, including verifying and managing your entry and removing duplicate, cheating or abusive entries. The scrambled IP address is used only to limit repeated submissions. Lawful basis: our legitimate interests in running a fair leaderboard.
- To email you about Inyotta Identity Academy courses and events, but only if you tick the optional marketing box when you submit a score. Lawful basis: your consent. You can unsubscribe at any time using the link in our emails or by contacting us. Joining the leaderboard doesn't depend on ticking the box.
We do not sell your data, and we do not use it for marketing unless you have separately agreed to that.
Who we share it with
We use trusted service providers to run the academy. They only process your data on our instructions or under their own privacy policies:
- HubSpot runs our registration form and stores registration details. We use HubSpot's European data centre.
- Tide processes payments.
- WhatsApp (owned by Meta) hosts the community group.
- Zoom hosts the live classes.
- Google Fonts supplies one of the fonts on these pages. Your browser connects to Google to load it, which shares your IP address with Google.
- Our web hosting provider stores Access Granted leaderboard entries on its servers.
- Tailwind CSS and unpkg supply the styling and icons for the Access Granted game. Your browser connects to them to load these files, which shares your IP address with them.
We may also share data if the law requires it, for example with HMRC.
Transfers outside the UK
Some providers, such as Meta and Google, may process data outside the UK. When this happens, they rely on legal safeguards approved under UK law, such as the UK International Data Transfer Addendum or adequacy regulations.
How long we keep it
- Students: for five years after your programme ends.
- People who register but don't join: for two years after you register.
- Access Granted leaderboard entries: for two years after you submit a score. If you withdraw marketing consent, we stop emailing you straight away.
- Financial records: six years, as UK tax law requires.
After that, we delete or anonymise your data.
Cookies
These pages don't set cookies themselves. The HubSpot registration form may set cookies to make the form work and to recognise returning visitors. The Access Granted game doesn't set cookies; it saves a list of the scenarios you've already played in your browser's local storage, so you see new ones next time. That list stays on your device and is never sent to us. You can block or delete cookies and local storage in your browser settings.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- ask us to restrict or stop using your data
- ask for your data in a format you can take elsewhere
- withdraw your consent at any time, where we rely on it
To use any of these rights, email info@inyottaanalytica.com. We'll reply within one month.
Complaints
If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Changes to this policy
We'll update this page if the way we use your data changes. The date at the top shows when it was last updated.