Privacy policy

Who controls your data

RAM Bookkeeping Services Limited operates harehiru and is the data controller for the learner information described here. For privacy requests, write to RAM Bookkeeping Services Limited at its registered office, as recorded in the UK Companies House register. Stripe handles payment information under its own privacy notice at https://stripe.com/privacy. Historical Paddle purchases remain subject to the original payment provider’s privacy notice.

What we collect and why

• Name, email address, account identifier and sign-in information: to create and secure your account and provide access, on the basis of our contract with you.
• Display name, preferred language and lesson completion records: to personalise your learning and save progress, on the basis of our contract.
• Subscription identifiers, status, billing period and cancellation status: to provide membership access and support billing enquiries, on the basis of contract performance and legal obligations.
• IP address, device/browser information and technical error or security logs: to operate, troubleshoot and protect the service, based on legitimate interests in a reliable and secure service.
• Messages you send us: to respond to requests and resolve problems, based on contract performance or legitimate interests in customer support.

We do not receive full payment-card details. Stripe collects payment information directly. Signing in with Google or Lovable shares the account information needed for sign-in, such as your name, email address and provider identifier. We do not use your learner information for marketing without an appropriate legal basis and, where required, your consent.

Who receives information

We use Lovable Cloud and its hosting and authentication providers to operate and secure the service. We share account and subscription information with Stripe for product sales, subscription management, payments, invoicing, tax compliance and customer support. Technical providers may process error logs or support information for us. Google supplies website fonts and may receive your IP address when those fonts load; video and checkout providers may receive device and network information when you use those features. We may disclose necessary information to professional legal or accounting advisers and to authorities where legally required. We do not sell your personal information.

Retention and security

We retain account, profile and progress information while your account is active and as needed to provide the service. After account closure, we delete or anonymise information no longer needed, subject to legal retention requirements, unresolved disputes and limited backup retention. Financial records may be retained for up to six years to meet UK accounting obligations. Security and error logs are retained only as long as necessary for investigation and service protection. We use appropriate technical and organisational measures, including encrypted connections and access controls; no system can be guaranteed completely secure.

International transfers

Our service providers may process information outside the UK or EEA. Where required, transfers are protected by an adequacy decision, appropriate standard contractual clauses with the UK addendum or other valid safeguards under applicable data-protection law. You may request information about the safeguards applicable to your information.

Your rights

Subject to applicable law, you can request access, correction, deletion, restriction, portability or object to processing. You can withdraw consent where processing relies on it, without affecting earlier lawful processing. Contact RAM Bookkeeping Services Limited at its registered office to exercise these rights. We may verify your identity and ordinarily respond within one month. You can complain to the UK Information Commissioner’s Office at ico.org.uk, or your local data-protection authority.

Cookies and browser storage

We use essential browser storage and session technologies to keep you signed in and support checkout and security. These are necessary for the features you request. Google AdSense is configured to show advertisements only after advertising consent has been confirmed by a certified consent service. When enabled, Google and the advertising partners identified in its consent message may receive your IP address, browser/device information, cookie identifiers and page or ad interactions to deliver and personalise ads, measure performance and prevent fraud. We do not send learner profiles, course progress or billing details to AdSense. Advertising stays blocked until the consent service is configured and confirms permission. External checkout providers apply their own cookie notices. You can manage cookies and site storage in your browser, but blocking essential storage may prevent sign-in or payments. You can reject advertising or withdraw permission through the Google consent message and its privacy settings. Global Privacy Control is also honored by our advertising loader. See Google’s privacy policy at https://policies.google.com/privacy for its handling of advertising data.

Updates

We may update this notice as the service changes. Material changes will be communicated to account holders; the date above identifies the current version.