Privacy Policy
Last updated: August 2026
This policy explains how Iteretta is operated by JEA Operations Ltd. We collect and use personal data when you visit our website, create an account, purchase a lab, use the digital residency, or contact us.
1. Who is responsible for your data?
JEA Operations Ltd is the controller of the personal data described in this policy. Iteretta is the name of the digital residency. For privacy questions, contact hello@iteretta.com.
2. Data we collect
- Account data: email address, name, authentication details, profile information, and account preferences.
- Learning data: lab enrolments, module progress, task or quiz answers, Vera conversations, feedback, revisions, and certificates.
- Project data: generated business challenges, submissions, uploaded evidence, descriptions, and publication choices.
- Transaction data: purchase, currency, billing status, and payment identifiers. Payment card details are handled by our payment provider, not stored by Iteretta.
- Technical data: IP address, device and browser information, logs, authentication events, and information about how the service is used.
- Messages: information you include when contacting support or reporting a problem.
3. How we use data
We use personal data to provide and secure the service, administer accounts and purchases, deliver learning content, review submissions, generate requested business challenges, issue certificates, communicate service updates, prevent abuse, improve reliability, and comply with legal obligations.
Our lawful bases may include performance of a contract, our legitimate interests in operating and securing the service, compliance with a legal obligation, and consent where consent is required. Where we rely on legitimate interests, we balance those interests against your rights and expectations.
4. Vera and service providers
When you ask Vera for help or submit work for review, relevant learning content and your submission may be processed by the AI service providers used to provide that feature. We use service providers for hosting, authentication, email delivery, payments, error monitoring, analytics where enabled, and AI processing. They may process data only under our instructions or for their documented service purposes.
Do not upload confidential, special category, or third-party personal data unless you have a lawful basis and it is necessary for the exercise. Use sample or redacted data for learning work whenever possible. We do not use learner submissions to train our own foundation models.
5. Sharing and international transfers
We do not sell personal data. We share data with trusted processors only when needed to operate the service, comply with law, protect users, or complete a transaction. Some providers may process data outside the UK. Where required, we use an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful safeguard.
6. Retention
We keep account and learning records while your account is active and for a reasonable period afterwards where needed for support, security, disputes, certificates, or legal and financial records. We delete or anonymise data when it is no longer needed, subject to backups, legal requirements, and legitimate record-keeping needs. Retention can vary by data type and purpose.
7. Security
We use access controls, authentication safeguards, encrypted connections, provider security controls, and least-privilege operational access appropriate to the data and risk. No internet service can guarantee absolute security. If we become aware of a personal data breach that requires notification, we will follow applicable UK data protection requirements.
8. Your choices and rights
You can ask us to access, correct, delete, restrict, or provide a copy of your personal data, and you may object to certain processing or withdraw consent where consent is the lawful basis. See Data rights for the process and limits.
9. Children
Iteretta is intended for adults and is not directed at children. Please contact us if you believe a child has provided personal data.
10. Changes and contact
We may update this policy when our service or legal obligations change. We will publish the current version on this page and update the date above. Contact us at hello@iteretta.com with privacy questions or requests.