Privacy policy

Hacksparrow Ltd respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, protect, and share personal information when you use our website, services, training programs, and related digital services.

By using our website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

Last Updated: August 2026

Information We Collect

We collect personal information only when it is reasonably necessary for providing our services, managing the platform, communicating with users, maintaining security, or complying with legal obligations.

The type of information we collect depends on how you interact with Hacksparrow.

Trainer Information

Only Trainers can create accounts on the Hacksparrow platform. Individuals who wish to become Trainers must provide information that allows us to review their application, manage their account, and help protect students from fraudulent or misleading activity.

Trainer information may include:

• Full name
• Email address
• Telephone number
• Date of birth
• Gender
• Profile photograph
• Curriculum vitae (CV)
• Professional biography
• Qualifications and professional experience
• Information provided during the Trainer application process
• Information provided during communications with Hacksparrow
• Subscription and account information

Some of this information is required in order to help us verify that a Trainer is a genuine individual and to reduce the risk of fraud, impersonation, or other harmful activity on the platform.

Student and Trainee Information

Depending on the service, students and trainees may provide personal information when registering for a training program, purchasing a service, communicating with us, participating in training, or receiving a certificate.

This information may include:

• Full name
• Email address
• Telephone number where required
• Country or general location
• Training or course information
• Trainer information where relevant
• Training dates
• Assessment or completion information
• Certificate information
• Information provided in communications with us

Information You Provide to Us

We may collect information that you voluntarily provide when you contact us, submit an enquiry, request a service, communicate with our team, or otherwise interact with Hacksparrow.

This may include your name, email address, telephone number, message contents, professional information, and any other information you choose to provide.

Technical Information

When you visit or use our website, certain technical information may be collected automatically by the website, hosting environment, security systems, or technologies used to operate the website.

This information may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited
• Date and time of visits
• Referring website
• General technical information
• Security and diagnostic information

How We Use Personal Information

We may use personal information for purposes that are necessary to provide our services, operate the website, protect users, and manage our business.

These purposes may include:

• Creating and managing Trainer accounts
• Reviewing Trainer applications
• Verifying Trainer information
• Preventing fraud and impersonation
• Providing training services
• Organising live training programs
• Managing registrations
• Processing payments
• Managing Trainer subscriptions
• Issuing certificates
• Providing certificate verification
• Providing consultancy and digital services
• Communicating with users and Trainers
• Providing customer support
• Maintaining website security
• Improving our website and services
• Detecting and preventing misuse of our services
• Complying with legal obligations
• Protecting our legal rights and legitimate interests

Trainer Verification

Hacksparrow reviews Trainer applications before allowing an individual to operate as a Trainer on the platform.

We may review the information provided by a Trainer, including their CV, qualifications, professional experience, photograph, biography, and other relevant information.

We may also communicate directly with the Trainer to discuss their background, experience, qualifications, and suitability for the platform.

This process is intended to help us confirm that the applicant is a genuine person and to reduce the risk of fraud, impersonation, misleading information, or other activity that could harm students or other users.

Being accepted as a Hacksparrow Trainer does not mean that Hacksparrow has issued a government licence, academic qualification, professional qualification, or external professional accreditation to that Trainer.

Legal Basis for Processing

Where applicable, we process personal information under one or more lawful bases recognised by applicable data protection law, including the UK GDPR.

Contract

We may process information where it is necessary to provide a service, manage a Trainer subscription, process a transaction, provide training, or fulfil an agreement with you.

Legal Obligations

We may process personal information where necessary to comply with applicable legal, tax, accounting, regulatory, or other legal obligations.

Legitimate Interests

We may process personal information where necessary for our legitimate interests, including website security, fraud prevention, Trainer verification, service administration, service improvement, and protection of our legal rights.

Consent

Where consent is required, we may ask you to provide consent before processing your personal information for the relevant purpose.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Payment Information

Payments for Hacksparrow services may be processed through Stripe, a third-party payment service provider.

Stripe may process information necessary to complete and protect payment transactions, including payment details, billing information, transaction information, and information required for fraud prevention.

Hacksparrow does not intend to store complete payment card details on its own systems.

Payment information may therefore be processed directly by Stripe in accordance with its own privacy policy and applicable security requirements.

Live Training and Third-Party Platforms

Some training programs offered through Hacksparrow may be delivered live using third-party online communication platforms such as Zoom.

When you participate in a live training session, the relevant third-party platform may process certain personal or technical information in accordance with its own privacy policy and terms.

We recommend reviewing the privacy information of the relevant third-party service before using it.

Certificates and Verification

Hacksparrow may issue Certificates of Completion to individuals who successfully complete applicable training programs according to the requirements established for that training.

Certificate information may include:

• Recipient’s name
• Course or training title
• Trainer name
• Training start date
• Training completion date
• Certificate number
• QR code or verification identifier
• Certificate status

Certificate verification may be available publicly without requiring the person verifying the certificate to create an account.

The purpose of the verification system is to allow third parties to confirm that a certificate issued through Hacksparrow is genuine.

We aim to limit publicly displayed verification information to information that is reasonably necessary for certificate verification.

A certificate may be cancelled, withdrawn, or marked as invalid where there is a legitimate reason to do so, including fraud, inaccurate information, or violation of applicable terms.

Information We Share

We do not sell your personal information.

We may share personal information with third parties where reasonably necessary to provide our services, operate our website, protect users, prevent fraud, or comply with legal obligations.

These third parties may include:

• Payment service providers such as Stripe
• Online training and communication providers such as Zoom
• Website hosting providers
• Website security providers
• Email and communication providers
• Technology and software service providers
• Professional advisers where necessary
• Government authorities or law enforcement where legally required

We expect relevant service providers to process personal information appropriately and to maintain reasonable security measures.

International Data Transfers

Hacksparrow provides services internationally and may use service providers that operate or process information outside the United Kingdom.

Where personal information is transferred internationally and applicable law requires safeguards, we will take reasonable steps to ensure that appropriate legal safeguards are in place.

Cookies

Our website may use cookies and similar technologies to provide essential website functionality, maintain security, remember preferences, and understand how visitors use our website.

Depending on the technologies used on the website, cookies may be used for purposes including:

• Website functionality
• Security
• Session management
• Remembering preferences
• Website analytics
• Performance monitoring
• Marketing where applicable

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

You can also manage cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the website.

Marketing Communications

We may communicate with users and Trainers about services, training programs, platform updates, or other relevant information.

Where applicable law requires consent for marketing communications, we will obtain the appropriate consent before sending them.

You may unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Essential communications relating to your account, payments, security, certificates, or services you have requested may still be sent where necessary.

Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include appropriate access controls, security procedures, secure communications, hosting security, monitoring, backups, and other measures appropriate to the nature of the information and the risks involved.

However, no website, online service, or electronic transmission can be guaranteed to be completely secure.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by applicable law.

The period for which information is retained may depend on:

• The type of information
• The purpose for which it was collected
• The nature of our relationship with you
• Whether you continue to use our services
• Legal, tax, accounting, or regulatory requirements
• Fraud prevention and security requirements
• The need to resolve disputes or protect legal rights

Trainer verification information may be retained for an appropriate period to help maintain the security and integrity of the platform.

Certificate records may also be retained for an appropriate period so that certificates can continue to be verified.

Your Privacy Rights

Depending on your circumstances and applicable law, you may have certain rights regarding your personal information.

• The right to request access to personal information we hold about you
• The right to request correction of inaccurate or incomplete information
• The right to request deletion of personal information in certain circumstances
• The right to request restriction of processing in certain circumstances
• The right to object to certain processing
• The right to data portability where applicable
• The right to withdraw consent where processing is based on consent

These rights are not absolute and may be subject to legal conditions and exemptions.

To exercise a privacy right, please contact us at:

officialhacksparrow@gmail.com

We may need to verify your identity before responding to certain requests in order to protect your personal information from unauthorised disclosure.

Account and Trainer Information

Trainers are responsible for providing accurate and up-to-date information during the application and account management process.

If your information changes, you should update it where possible or contact us where necessary.

When a Trainer account is cancelled, suspended, or terminated, we may retain certain information where necessary for legal, security, fraud prevention, accounting, dispute resolution, or other legitimate purposes.

Minimum Age

Hacksparrow services are intended for individuals aged 16 years or older.

By using services that require you to provide personal information, you confirm that you meet the applicable minimum age requirement.

If we become aware that we have collected personal information from a person who does not meet the applicable minimum age requirement, we may take reasonable steps to delete or restrict that information where appropriate.

Third-Party Websites

Our website may contain links to third-party websites, applications, or services.

Third-party services may have their own privacy policies and terms of use. Hacksparrow is not responsible for the privacy practices of third-party services that we do not control.

We recommend reviewing the privacy policy of any third-party service before providing personal information to that service.

Fraud and Security

We may collect, use, and retain personal information where reasonably necessary to detect, prevent, investigate, or respond to fraudulent or harmful activity.

This may include:

• Fraudulent Trainer applications
• Identity misuse or impersonation
• Payment fraud
• Unauthorised access
• Abuse of the platform
• Attempts to compromise website security
• Violations of our Terms of Use
• Other unlawful or harmful activity

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

We encourage you to review this page periodically to remain informed about how we protect and process personal information.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal information is handled, please contact us.

Hacksparrow Ltd

Email: officialhacksparrow@gmail.com

We will review legitimate privacy requests and respond within the timeframe required by applicable data protection law.

Complaints

If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the issue.

Where applicable, you may also have the right to lodge a complaint with the relevant data protection supervisory authority.

For organisations operating in the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO).