Last updated: 30 June, 2026

This Privacy Policy explains how LEARNY BUNNY LTD collects, uses, stores, shares, protects, and processes personal data when you access or use learnybunny.com, create an account, purchase digital products or courses, download files, contact us, or otherwise interact with our website and services.

The website learnybunny.com is owned and operated by LEARNY BUNNY LTD, a company registered in England and Wales under registration number 17201888, with its registered address at 77 Smiths Square, London, England, W6 8AF (“Learny Bunny”, “we”, “us”, or “our”).

By using our website, creating an account, placing an order, accessing digital products, downloading files, or contacting us, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.

1. Who We Are

Learny Bunny provides digital educational materials, downloadable learning resources, and digital course packs. Our products may include PDF files, video lessons, worksheets, quizzes, printable activities, learning bundles, and other child-focused educational resources.

For the purposes of applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and where applicable the General Data Protection Regulation (“GDPR”), LEARNY BUNNY LTD acts as the data controller for the personal data we collect and process through the website.

This means we decide why and how your personal data is processed.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected when you:

• • visit the website;
• • create an account;
• • place an order;
• • purchase digital products or courses;
• • vaccess download links or course materials;
• • receive order confirmations;
• • contact customer support;
• • subscribe to communications, if available;
• • use account features;
• • submit forms or messages;
• • interact with cookies or similar technologies.

This Privacy Policy does not apply to third-party websites, payment providers, external platforms, or services that we do not own or control. Such third parties may process your personal data under their own privacy policies.

3. Personal Data We May Collect

We may collect and process different types of personal data depending on how you use the website.

3.1 Account Data

When you create an account, we may collect:

• • your name;
• • email address;
• • username or account identifier;
• • password in encrypted or protected form;
• • account creation date;
• • account activity;
• • login records;
• • order history;
• • download history;
• • account preferences.

We use this data to create and manage your account, provide access to purchased content, maintain security, and support your use of the website.

3.2 Order and Purchase Data

When you place an order, we may collect:

• • your name;
• • email address;
• • billing details;
• • order number;
• • purchased products or courses;
• • order amount;
• • selected currency;
• • purchase date;
• • order status;
• • refund status, if applicable;
• • transaction reference provided by the payment provider;
• • limited payment confirmation details.

We use this data to process your order, provide access to digital content, issue order confirmations, manage refunds where applicable, maintain records, and comply with legal obligations.

3.3 Digital Access and Download Data

When you access purchased content, we may collect:

• • account email;
• • product or course accessed;
• • download activity;
• • access dates;
• • file delivery status;
• • technical access logs;
• • support-related access information.

We use this data to provide digital products and course packs, confirm delivery, prevent misuse, resolve access issues, and protect our intellectual property rights.

3.4 Communication Data

When you contact us, we may collect:

• • your name;
• • email address;
• • message content;
• • attachments or screenshots you provide;
• • order number, if relevant;
• • support history;
• • date and time of communication.

We use this data to respond to your enquiries, resolve support issues, review complaints, process refund requests, and maintain customer service records.

3.5 Technical and Usage Data

When you visit or use the website, we may collect technical data, including:

• • IP address;
• • browser type and version;
• • device type;
• • operating system;
• • approximate location based on IP address;
• • pages visited;
• • time spent on the website;
• • referring website;
• • error logs;
• • security logs;
• • cookie identifiers;
• • website usage information.

We use this data to operate the website, improve performance, maintain security, detect fraud, diagnose technical issues, and understand how users interact with our services.

4. Payment Data

During checkout, your payment may be processed directly by a third-party payment provider. That provider may collect and process payment information in accordance with its own terms, privacy policy, security standards, and legal obligations.

We may receive limited payment-related information necessary for order management, accounting, fraud prevention, customer support, and legal compliance. This may include:

• • payment status;
• • transaction reference;
• • payment amount;
• • currency;
• • payment date;
• • billing name;
• • billing email;
• • partial card reference, where provided by the payment provider.

We are not responsible for how third-party payment providers process your payment data. You should review the privacy policy of the relevant payment provider before completing payment.

5. How We Use Your Personal Data

We may use your personal data for the following purposes:

5.1 To Provide the Website and Services

We use personal data to:

• • create and manage accounts;
• • process orders;
• • provide access to purchased digital products;
• • provide access to digital course packs;
• • deliver download links or files;
• • maintain order history;
• • manage account features;
• • provide customer support.

5.2 To Process Orders and Purchases

We use order and purchase data to:

• • confirm successful purchases;
• • identify purchased products;
• • make digital products and course packs available;
• • send order confirmations;
• • manage failed or pending payments;
• • process approved refunds;
• • maintain transaction records.

5.3 To Provide Customer Support

We use communication data to:

• • respond to enquiries;
• • resolve technical access issues;
• • review refund requests;
• • investigate complaints;
• • verify order ownership;
• • provide support related to digital downloads, course packs, and account access.

5.4 To Maintain Security

We use personal data and technical data to:

• • protect user accounts;
• • detect suspicious activity;
• • prevent fraud;
• • prevent unauthorised access;
• • secure the website;
• • investigate misuse;
• • protect our intellectual property and digital content.

5.5 To Comply with Legal Obligations

We may process personal data where necessary to:

• • maintain accounting records;
• • comply with tax obligations;
• • respond to lawful requests;
• • handle disputes;
• • comply with consumer protection laws;
• • comply with data protection laws;
• • meet payment, fraud prevention, and security requirements.

5.6 To Improve the Website

We may use technical and usage data to:

• • analyse website performance;
• • improve user experience;
• • fix technical errors;
• • understand product demand;
• • improve website layout and functionality;
• • monitor website reliability.

5.7 To Send Communications

We may use your contact details to send:

• • account-related messages;
• • order confirmations;
• • download access information;
• • support replies;
• • refund updates;
• • security notices;
• • legal or policy updates;
• • marketing communications, where permitted.

6. Legal Bases for Processing Personal Data

We process personal data only where we have a lawful basis under applicable data protection laws.

6.1 Contract

We process personal data where necessary to perform a contract with you or take steps before entering into a contract. This applies when we:

• • create your account;
• • process your order;
• • provide purchased content;
• • deliver digital products;
• • provide course packs;
• • respond to order-related support requests.

6.2 Legal Obligation

We process personal data where necessary to comply with legal obligations, including:

• • tax records;
• • accounting obligations;
• • consumer law requirements;
• • fraud prevention requirements;
• • compliance with lawful requests;
• • data protection obligations.

6.3 Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include:

• • improving the website;
• • preventing fraud;
• • protecting accounts;
• • resolving disputes;
• • maintaining security;
• • protecting intellectual property;
• • analysing website usage;
• • managing business records.

6.4 Consent

We may rely on your consent where required, including for:

• • non-essential cookies;
• • optional marketing communications;
• • certain analytics or tracking technologies;
• • any other activity where consent is legally required.

You may withdraw consent at any time where processing is based on consent.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction.

Our security measures may include:

• • encryption where appropriate;
• • secure hosting environments;
• • access controls;
• • password protection;
• • restricted access to personal data;
• • security monitoring;
• • regular technical reviews;
• • fraud detection tools;
• • secure payment processing through third-party providers;
• • administrative controls;
• • internal confidentiality practices.

We also review our security practices from time to time to help maintain appropriate protection for the personal data we process.

However, no website, internet transmission, or digital storage system can be guaranteed to be completely secure. You are responsible for keeping your account login details confidential and for notifying us if you believe your account has been compromised.

8. GDPR, UK GDPR, and Data Protection Compliance

We process personal data in accordance with applicable data protection laws, including the UK GDPR, the Data Protection Act 2018, and where applicable the GDPR.

We follow key data protection principles, including:

• • processing personal data lawfully, fairly, and transparently;
• • collecting personal data for specified and legitimate purposes;
• • limiting personal data to what is necessary;
• • keeping personal data accurate and up to date where possible;
• • retaining personal data only for as long as necessary;
• • protecting personal data with appropriate security measures;
• • respecting user rights under applicable data protection laws.

We implement reasonable technical and organisational measures to protect personal data and maintain confidentiality. These may include access limitations, security checks, internal procedures, and staff awareness where relevant.

9. Strong Customer Authentication and PSD2

Online payments may be subject to Strong Customer Authentication (“SCA”) and Payment Services Directive 2 (“PSD2”) requirements.

SCA is a security process that may require customers to verify their identity using two or more authentication elements, such as:

• • something the customer knows, such as a password or security code;
• • something the customer has, such as a mobile phone or banking app;
• • something the customer is, such as biometric verification.

These checks are usually handled by your bank, card issuer, or third-party payment provider during the payment process.

Learny Bunny does not collect or store the authentication information used for SCA. Such information is processed by the relevant third-party payment provider, bank, or card issuer.

PSD2 and SCA requirements are intended to improve payment security and reduce fraud in online transactions. Where SCA applies, your payment may not be completed unless the required authentication step is successfully completed.

10. Sharing Personal Data with Third Parties

We may share personal data with trusted third parties where necessary to operate the website, provide our services, process orders, maintain security, or comply with legal obligations.

Such third parties may include:

• • payment providers;
• • website hosting providers;
• • email service providers;
• • analytics providers;
• • fraud prevention tools;
• • customer support tools;
• • accounting or bookkeeping providers;
• • legal, tax, or professional advisers;
• • authorities or regulators where required by law.

We only share personal data where there is a valid reason to do so and where appropriate safeguards are in place.

Third-party service providers are expected to process personal data only for authorised purposes and in accordance with applicable data protection requirements.

11. Payment Providers

Because all payments are made through third-party payment providers, those providers may independently collect and process payment data.

The payment provider may process data such as:

• • cardholder name;
• • payment card details;
• • billing details;
• • transaction data;
• • fraud checks;
• • SCA authentication information;
• • payment authorisation results.

Learny Bunny does not control the full payment process and does not store full payment card data.

You should review the relevant payment provider’s privacy policy to understand how your payment data is handled.

12. International Transfers of Personal Data

Your personal data may be transferred to, stored in, or processed in countries outside the United Kingdom or the European Economic Area.

This may occur where we use service providers, hosting systems, payment providers, analytics tools, support tools, or other business services located in other countries.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are used in accordance with applicable data protection laws. These safeguards may include:

• • adequacy decisions;
• • standard contractual clauses;
• • international data transfer agreements;
• • contractual security obligations;
• • other lawful transfer mechanisms.

By using the website, you acknowledge that international processing may be necessary to provide the website, process purchases, deliver digital content, maintain security, and operate our business.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• • the type of personal data;
• • the purpose of processing;
• • legal and accounting requirements;
• • tax obligations;
• vorder history;
• • refund or dispute records;
• • fraud prevention needs;
• • account status;
• • customer support history.

Examples of retention may include:

• • account data retained while your account remains active;
• • order records retained for accounting, tax, and legal purposes;
• • support communications retained for customer service and dispute management;
• • technical logs retained for security and maintenance purposes;
• • marketing data retained until you unsubscribe or withdraw consent.

When personal data is no longer required, we will delete, anonymise, or securely restrict it where appropriate.

14. Your Data Protection Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

14.1 Right of Access

You may request a copy of the personal data we hold about you.

14.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

14.3 Right to Erasure

You may request deletion of your personal data in certain circumstances.

14.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances.

14.5 Right to Object

You may object to certain types of processing, including processing based on legitimate interests.

14.6 Right to Data Portability

You may request that certain personal data be provided in a structured, commonly used, machine-readable format, where applicable.

14.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

14.8 Right to Complain

You may have the right to complain to a data protection authority if you believe your personal data has been processed unlawfully.

In the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office.

To exercise your rights, contact us at [email protected]. We may ask you to verify your identity before responding to your request.

15. Cookies and Similar Technologies

The website may use cookies and similar technologies to:

• • operate essential website functions;
• • support account login;
• • remember user preferences;
• • process checkout functions;
• • improve website performance;
• • analyse website traffic;
• • detect security risks;
• • support user experience.

Some cookies are necessary for the website to function. Others may require your consent, depending on their purpose and applicable law.

For more information, please review our Cookies Policy.

16. Automated Decision-Making

Learny Bunny does not normally use personal data for automated decision-making that produces legal or similarly significant effects.

However, third-party payment providers, fraud prevention systems, banks, or card issuers may use automated checks to assess payment risk, prevent fraud, verify transactions, or comply with legal obligations.

Such checks are usually controlled by the relevant third party and may be subject to that third party’s own privacy policy and terms.

17. Fraud Prevention and Misuse Protection

We may process personal data to detect, prevent, and respond to fraud, misuse, unlawful activity, unauthorised access, chargebacks, account abuse, intellectual property infringement, or breaches of our Terms and Conditions.

This may include reviewing:

• • order records;
• • payment status;
• • account activity;
• • download activity;
• • IP addresses;
• • technical logs;
• • support communications;
• • dispute records.

Where necessary, we may share relevant information with payment providers, fraud prevention tools, legal advisers, authorities, or other parties where permitted by law.

18. Third-Party Links and External Websites

The website may contain links to third-party websites, tools, platforms, or services.

We are not responsible for the privacy practices, content, security, or policies of third-party websites or services. You should review the privacy policy of any third-party service before providing personal data to it.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be posted on this page with a revised “Last updated” date. The updated Privacy Policy will apply from the date it is published, unless otherwise stated.

You should review this Privacy Policy regularly to stay informed about how we process personal data.

20. Governing Law

This Privacy Policy and any dispute or claim arising from it shall be governed by the laws of England and Wales, subject to any mandatory data protection rights that may apply to you under applicable law.

21. Contact Information

If you have any questions about this Privacy Policy, your personal data, or your data protection rights, you can contact us at:

LEARNY BUNNY LTD
Company Number: 17201888
Registered Address: 77 Smiths Square, London, England, W6 8AF
Email: [email protected]