Introduction
At SURKHAVE, your privacy is our priority. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our services. We aim to be plainspoken and practical: clear commitments, simple controls, and a respectful approach to your data.
Your name, email address, phone number, academic information (school, subjects, exam board), and country may be collected when you register or use our platform. We might also store relationship information and role-specific data if you register as a parent or teacher.
Information We Collect
When you register or use our platform we may collect personal details such as your name, email address, phone number, academic details (school, subjects, exam board), and country. If you sign up as a parent or teacher we may also store relationship information and role-specific data.
Automatically collected technical data may include IP addresses, device type, browser type, operating system, and basic usage logs (pages visited, videos watched, quizzes attempted). This technical data helps us run the service and troubleshoot problems.
When you participate in lessons or submit practice work, we store your answers, scores, timestamps and tutor feedback so progress can be tracked and tutors can give targeted guidance. We only collect information necessary to deliver these features and improve learning outcomes.
How We Use Your Information
Your information helps us deliver the service: create accounts, provide lessons and recordings, run quizzes, and show progress on dashboards. We also use data to personalise learning pathways, recommend practice items, and alert tutors to repeated errors that need attention.
We may use contact details to send account notifications, course updates, billing information (if applicable), and occasional service announcements. You can control certain communications through your account settings or by contacting us at info@surkhave.com.
We never sell personal data to third parties. Any sharing with partners or service providers is limited to what is necessary to operate the platform (for example, hosting providers, payment processors, analytics tools), and is governed by contracts that require them to protect your data.
Data Protection
We implement technical and organisational measures to protect personal data from unauthorised access, alteration, or disclosure. These measures include encrypted connections (HTTPS), access controls, secure hosting, regular backups, and restricted administrative access.
Where we store student submissions and recordings we apply role-based access so only authorised staff and tutors can view student content. We train our team on basic data hygiene and follow standard practices to reduce the risk of accidental exposure.
Our security approach is pragmatic and continuously reviewed: patching known vulnerabilities, rotating credentials, and auditing access logs when necessary. We aim to minimise risk while keeping the platform usable for tutors and learners.
Your Rights
You have the right to access, correct, export or delete your personal information. You may also request restriction of processing or object to certain uses of your data where applicable by law. To exercise these rights, contact us at info@surkhave.com or use the in-app support request feature.
When deleting an account we remove personally-identifying profile data and anonymise performance logs for analytics, unless we are required to retain records for legal or safety reasons. We will confirm the outcome of your request within a reasonable timeframe and provide a clear explanation if any data must be retained.
Data Retention
We only retain personal information for as long as is required to fulfill legal requirements and deliver services. For as long as your account is active, account information and recent progress logs are kept on file. We only keep anonymized aggregates for product development and compliance for as long as is required after an account is deleted.
Retention periods may vary by data type; for example, billing records (if applicable) may be kept longer for accounting and tax purposes, whereas session logs used for debugging are kept for shorter windows.
Third Parties & External Services
We may share data with trusted third parties that help operate the service — for example, cloud hosting providers, analytics platforms, email and notification services, and payment processors. These partners process data only on our instruction and are contractually required to protect it.
If we ever propose a change involving sale, merger, or transfer of SURKHAVE assets, we will inform affected users and ensure data is handled in accordance with this policy and applicable law. Transparency is important: we will provide notice and reasonable options where applicable.
Minors & Parental Controls
SURKHAVE is intended for learners and we take extra care with accounts for minors. Where applicable law requires parental consent, we request it during registration and provide parents with controls to review and manage their child’s account. If you are a parent who wishes to access, correct or delete a child’s information, please contact us at info@surkhave.com.
Parents can opt to receive short weekly summaries of their child’s attendance and progress so they can support study without being overwhelmed by data.
Security Incidents & Breach Response
In the unlikely event of a security incident we have an incident response plan: contain the issue, assess impact, notify affected users when required, and remediate the vulnerability. We keep records of incidents and learn from them to strengthen our practices.
When mandated by law, we support impacted users and notify regulators within the allotted time. Our goal is to provide users with clear communication and useful remediation so they can quickly take any necessary precautions.
Legal Basis & International Transfers
Where applicable, we rely on legitimate interests, contract performance, and consent as legal bases for processing personal data. For international transfers of data we use standard contractual clauses or rely on service providers with adequate protections to ensure your data remains secure across borders.
If you have concerns about cross-border transfers, contact us and we will explain the protections in place for your account data.
Changes to This Policy
We may update this Privacy Policy from time to time. When changes are material, we will post a clear notice (including the revised date) and where required by law, seek consent. Please check this page periodically for updates.
Contact & Complaints
If you have questions, want to exercise your rights, or need support, contact us at info@surkhave.com or visit our contact page. For details about how we handle terms and service use, refer to our Terms of Service and for more about us, see About.
If you remain unsatisfied after contacting us, you may have the right to lodge a complaint with your local data protection authority where applicable.
Example: A Data Request (Anonymized)
To make our privacy practices more transparent, here is a simplified and anonymized example of how we handle a data access request:
- Request Received: A user emails info@surkhave.com with the subject “Data Access Request,” asking for a copy of their personal data.
- Identity Verification: We reply within 24 hours, asking the user to confirm their identity by responding from the email address associated with their SURKHAVE account and providing their full name. This step ensures we only share data with the authorized individual.
- Data Compilation: Once verified, our team gathers the user’s data. This includes profile information (name, email), usage data (lessons watched, quiz scores), and copies of any tutor feedback.
- Data Delivery: We compile the information into a structured JSON file and send it to the user’s verified email address within 14 business days, along with a brief explanation of the data categories provided.
This process ensures you can exercise your right to access your data in a secure and timely manner.