Privacy Policy
Last updated: 20 June 2025
1. Data Controller
The data controller for your personal data is:
- Company: Kemiworld Solutions (trading as SkillsVaults)
- Email: support@skillsvaults.com
- Location: Ireland, European Union
2. What Data We Collect
We collect the following categories of personal data:
| Data | When Collected | Purpose |
|---|---|---|
| Email address | Purchase, free resource download, contact form | Order fulfilment, delivery of download links, responding to enquiries |
| Name | Purchase, contact form | Personalisation, order records |
| Payment information | Purchase (via Stripe) | Payment processing — we never see or store your full card number |
| IP address | All visits | Security, fraud prevention, analytics |
| Cookies and usage data | All visits | Website functionality, preferences — see our Cookie Policy |
3. Legal Basis for Processing (GDPR Art. 6)
We process your personal data on the following legal bases:
- Contract performance (Art. 6(1)(b)): Processing necessary to fulfil your purchase, deliver products, and provide customer support.
- Legitimate interests (Art. 6(1)(f)): Fraud prevention, website security, and improving our products and services.
- Consent (Art. 6(1)(a)): Where you opt in to receive marketing emails or accept non-essential cookies.
- Legal obligation (Art. 6(1)(c)): Tax and accounting record-keeping requirements.
4. How We Use Your Data
- Process and fulfil orders, including sending download links
- Send transactional emails (order confirmations, download links)
- Respond to your enquiries and support requests
- Prevent fraud and abuse
- Improve our website and product offerings
- Send marketing communications (only with your consent, and you can unsubscribe at any time)
- Comply with legal obligations (tax records, fraud reporting)
5. Third-Party Service Providers
We share your data with the following third-party processors, who process data on our behalf under data processing agreements:
- Stripe (payment processing) — processes your payment data under their own Privacy Policy. Stripe is certified under the EU-US Data Privacy Framework.
- SendGrid / Twilio (email delivery) — delivers transactional and marketing emails. See their Privacy Policy.
- OVHcloud (hosting) — our website is hosted on OVHcloud servers in the European Union.
We do not sell your personal data to any third party.
6. International Data Transfers
Some of our service providers (Stripe, SendGrid) may transfer data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's participation in the EU-US Data Privacy Framework.
7. Data Retention
- Purchase records: Retained for 7 years to comply with tax and accounting obligations.
- Email subscriber data: Retained until you unsubscribe or request deletion.
- Contact form enquiries: Retained for 2 years, then deleted.
- Download tokens: Expire and are purged after 72 hours.
- Cookies: See our Cookie Policy for specific retention periods.
8. Your Rights Under GDPR
As an EU/EEA data subject, you have the following rights:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate personal data.
- Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing (Art. 18): Request that we limit how we use your data.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, email us at support@skillsvaults.com. We will respond within 30 days as required by GDPR.
9. Cookies
We use cookies and similar technologies to operate our website and improve your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
10. Children's Privacy
Our website and products are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.
11. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with a supervisory authority. For Ireland, this is the Data Protection Commission:
- Website: www.dataprotection.ie
- Phone: +353 (0)1 7650100 / 1800 437 737
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.
13. Contact Us
For any privacy-related questions or to exercise your data rights:
- Email: support@skillsvaults.com
- Company: Kemiworld Solutions