ClassTech Development

Privacy Policy

Last Updated: 23 September 2026

ClassTech Development ("ClassTech", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our websites, purchase or use our products and services, contact us, use our software, use our hosting services, or otherwise interact with ClassTech.

This Privacy Policy is intended to provide information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable data protection legislation.

We may update this Privacy Policy from time to time. The latest version will be made available through the relevant ClassTech website.

---

1. Who We Are

ClassTech Development is responsible for the processing of personal data described in this Privacy Policy, unless otherwise stated.

If you have questions about this Privacy Policy or how we process your personal data, you can contact us using the contact information above.

2. What Personal Data We Collect

The personal data we collect depends on how you interact with ClassTech. We only seek to collect information that is reasonably necessary for the relevant purpose.

2.1 Account Information

When you create or use a ClassTech account, we may collect:

• Name or display name.
• Email address.
• Username or account identifier.
• Password information or authentication credentials.
• Account creation and login information.
• Account status and subscription information.

Passwords should be stored using appropriate security measures and should not normally be stored in plain text.

2.2 Customer and Order Information

When you purchase or subscribe to a ClassTech Service, we may collect:

• Name.
• Email address.
• Billing information.
• Purchase history.
• Subscription information.
• Invoices and transaction identifiers.
• Information necessary to provide customer support.

Payment card details may be processed directly by our payment providers. ClassTech does not generally need to store complete payment card numbers.

2.3 Hosting Information

If you use ClassTech Hosting Services, we may process information required to provide and secure the service, including:

• Account identifiers.
• Server identifiers.
• IP addresses.
• Connection information.
• Resource usage information.
• System and application logs.
• Security and abuse information.
• Technical configuration information.

Customers are responsible for determining whether the data they upload to a hosting environment contains personal data belonging to other individuals.

2.4 Technical and Usage Information

When you use our websites, software, APIs or other services, we may automatically collect certain technical information, including:

• IP address.
• Browser type and version.
• Operating system.
• Device information.
• Approximate location derived from IP address where necessary.
• Pages or services accessed.
• Access times and dates.
• Error logs.
• Security and fraud prevention information.

2.5 Communications

If you contact ClassTech through email, support tickets, Discord, forms, or other communication channels, we may process the information you provide, including:

• Your name or username.
• Your contact details.
• The contents of your communication.
• Attachments or information you choose to provide.
• Support history.

2.6 Discord Information

Certain ClassTech products may interact with Discord or use Discord functionality.

Where applicable, ClassTech may process information made available through Discord, such as Discord user IDs, usernames, server IDs, roles, permissions, interaction information, and information required for the relevant bot or integration to function.

Discord processes personal data under its own privacy policy. ClassTech is not responsible for Discord's independent processing of personal data.

3. How We Use Personal Data

We may use personal data to:

1. Create and manage customer accounts.
2. Provide purchased products and services.
3. Provide hosting services.
4. Process and manage subscriptions and payments.
5. Provide customer support.
6. Communicate with customers regarding their Services.
7. Monitor and maintain the security of our infrastructure.
8. Detect and prevent fraud, abuse and unauthorised activity.
9. Monitor service performance and availability.
10. Maintain and improve our software and services.
11. Resolve technical problems.
12. Comply with legal and regulatory obligations.
13. Establish, exercise or defend legal claims.
14. Send marketing communications where permitted by law and where required consent has been obtained.

4. Lawful Bases for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. The lawful basis we rely upon depends on the purpose of the processing. The ICO states that organisations should determine and document the appropriate lawful basis before processing personal data.

Where we rely on legitimate interests, we consider whether our interests are appropriate and proportionate and whether they are overridden by your rights and interests.

5. Marketing

We may send information about ClassTech products, services, updates and promotions where permitted by applicable law.

Where consent is legally required, we will obtain consent before sending the relevant marketing communications.

You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the communication or by contacting us.

The Privacy and Electronic Communications Regulations 2003 may impose additional requirements on electronic marketing and cookies.

6. Cookies and Similar Technologies

Our websites may use cookies and similar technologies.

Cookies may be used for purposes such as:

• Keeping users logged in.
• Maintaining security.
• Remembering preferences.
• Understanding website usage.
• Improving website performance.
• Analytics.

Strictly necessary cookies may be required for certain website functions to operate.

Where applicable law requires consent for non-essential cookies or similar tracking technologies, we will request consent before using them.

You may manage cookies through your browser settings and, where provided, through our cookie preference controls.

Further information may be provided through a separate ClassTech Cookie Policy.

7. Payment Providers

Payments may be processed through third-party payment providers.

Depending on the payment method used, payment providers may process information such as your name, email address, billing information, transaction information and payment details.

ClassTech does not generally store complete payment card details.

Payment providers may process your information under their own privacy policies and terms.

8. Service Providers and Data Processors

We may use trusted third-party providers to help us provide our Services. These providers may process personal data on our behalf where necessary.

These may include providers for:

• Cloud and server infrastructure.
• Hosting and data centres.
• Payment processing.
• Email delivery.
• Customer support.
• Authentication.
• Security and fraud prevention.
• Analytics.
• Website infrastructure.
• Software monitoring.

Where required, we will take appropriate steps to ensure that processors process personal data only in accordance with our instructions and applicable data protection law.

9. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will use an appropriate legal mechanism where required by applicable data protection law.

Depending on the circumstances, this may include an adequacy regulation, appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism.

Where required, we will take reasonable steps to ensure that appropriate protections are in place for transferred personal data.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods may depend on the type of information.

• Account information: Generally retained while your account remains active and for a reasonable period afterwards where required for legitimate business or legal purposes.
• Transaction and billing information: Retained for as long as necessary to meet accounting, tax, legal and dispute resolution requirements.
• Support communications: Retained for as long as reasonably necessary to provide support, maintain records and resolve disputes.
• Security and technical logs: Retained for a period appropriate to security, troubleshooting and operational requirements.
• Hosting data: Retained according to the applicable Hosting Service and any applicable retention period following suspension or termination.

When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.

11. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, disclosure or other unlawful processing.

Depending on the Service, security measures may include:

• Access controls.
• Authentication mechanisms.
• Encryption where appropriate.
• Network security controls.
• Monitoring and logging.
• Security updates.
• Restricted administrative access.
• Backups where specifically provided as part of a Service.

No internet transmission or storage system can be guaranteed to be completely secure. While we take reasonable precautions, we cannot guarantee absolute security of personal data.

12. Data Breaches

If we become aware of a personal data breach, we will assess the breach and take appropriate action in accordance with applicable data protection law.

Where legally required, we will notify the Information Commissioner's Office and affected individuals within the applicable statutory timeframes.

13. Your Data Protection Rights

Subject to applicable law and any relevant exemptions, you may have the following rights under UK data protection law:

1. Right to be informed
   You have the right to receive clear information about how your personal data is collected and used.
2. Right of access
   You can request a copy of the personal data we hold about you.
3. Right to rectification
   You can request correction of inaccurate or incomplete personal data.
4. Right to erasure
   You may request deletion of your personal data in certain circumstances.
5. Right to restriction
   You may request that we restrict processing of your personal data in certain circumstances.
6. Right to data portability
   In certain circumstances, you may request personal data in a structured, commonly used and machine-readable format.
7. Right to object
   You may object to certain types of processing, including processing based on legitimate interests and certain direct marketing.
8. Rights relating to automated decision-making
   Where applicable, you may have rights relating to solely automated decision-making that produces legal or similarly significant effects.

These rights are not absolute and may be subject to legal conditions or exemptions.

14. How to Exercise Your Rights

To exercise your data protection rights, contact us using the privacy contact details provided in this Privacy Policy.

We may need to verify your identity before fulfilling certain requests. This is intended to prevent personal data from being disclosed to someone who is not authorised to receive it.

We will normally respond to valid data protection requests within the timeframe required by applicable law.

Where permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

15. Children's Privacy

Our Services are not intentionally directed at children where applicable law requires additional safeguards.

We do not knowingly collect personal data from children for purposes that are unlawful or inappropriate.

If you believe that a child has provided personal data to ClassTech and you believe that we should not have collected it, please contact us.

16. Automated Decision-Making and Profiling

ClassTech does not generally make decisions about customers solely through automated processing that produce legal or similarly significant effects.

We may use automated systems for operational purposes such as fraud prevention, security monitoring, abuse detection, licence validation, resource monitoring and service management.

Where automated processing becomes subject to specific rights under applicable data protection law, we will provide the information and safeguards required by law.

17. Discord Bots and Integrations

Some ClassTech products operate through Discord.

When a ClassTech bot is added to a Discord server, it may process information necessary to perform its configured functions.

Depending on the product and configuration, this may include:

• Discord user IDs.
• Discord usernames.
• Server IDs.
• Role information.
• Permission information.
• Command interactions.
• Moderation or ranking information.
• Configuration information.

Customers who install or configure a ClassTech bot are responsible for configuring and using the bot in accordance with applicable law and Discord's applicable rules.

18. Customer Hosted Data

Where customers upload, store or process personal data using ClassTech Hosting Services, the Customer may remain responsible for determining the lawful basis and purposes for processing that data.

Customers must not use ClassTech infrastructure to unlawfully process personal data or to infringe another person's privacy rights.

Where ClassTech processes customer data solely on behalf of a Customer, the parties may need to enter into additional data processing terms or a Data Processing Agreement depending on the nature of the processing.

19. Data Protection Agreements

Where ClassTech acts as a processor on behalf of a Customer and applicable law requires a written data processing agreement, the parties may enter into a separate Data Processing Agreement ("DPA").

A DPA may specify matters including the subject matter and duration of processing, nature and purpose of processing, categories of personal data, categories of data subjects, security requirements, subprocessors, international transfers and assistance with data protection obligations.

20. Sharing Personal Data

We do not sell personal data to third parties.

We may disclose personal data where reasonably necessary to:

• Our service providers and processors.
• Payment providers.
• Hosting and infrastructure providers.
• Email and communication providers.
• Security and fraud prevention providers.
• Professional advisers where necessary.
• Law enforcement or regulatory authorities where legally required.
• Courts or other authorities where required by law.

We may also disclose information where necessary to establish, exercise or defend legal claims.

21. Legal Requests

We may disclose personal data where we are legally required to do so or where disclosure is necessary to comply with a lawful request from a competent authority.

Where legally permitted, we will consider whether a request is valid and appropriate before disclosing personal data.

22. Third Party Websites

Our websites and Services may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices, content or security of third-party websites.

You should review the privacy policy of any third-party service before providing personal information to it.

23. Data Protection Officer

ClassTech will appoint a Data Protection Officer where required by applicable data protection law.

Where a formal Data Protection Officer is not required, privacy enquiries can be made using the contact information provided in Section 1.

24. Complaints

If you have concerns about how ClassTech handles your personal data, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

You can find information about making a complaint through the ICO's official website.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements, or data processing activities.

When we make significant changes, we may provide additional notice where appropriate.

The "Last Updated" date at the top of this Privacy Policy indicates when the policy was most recently revised.

26. Contact Us

If you have any questions about this Privacy Policy, your personal data, or your data protection rights, please contact ClassTech Development.