Privacy Policy

Last updated: 09/2025

This Privacy Policy describes how Laragod Ltd ("we", "us", "our") collects, uses, discloses, and safeguards your personal data when you use the Skillpeak service (the "Service"). By accessing or using the Service you agree to the practices described in this Policy.

1. Controller

Company: Laragod Ltd
Product: Skillpeak
Jurisdiction: United Kingdom
Contact email: contact@skillpeak.com

2. Overview of Data We Collect

a. Data you provide

• Account data: name, username, email address, password (hashed).
• Profile data: avatar, preferences, timezone.
• Content submissions: posts, messages, uploaded files.
• Support inquiries and other information you choose to provide.

b. Automatically collected data

• Log data: IP address, user agent, referrer, timestamps, error traces.
• Usage data: feature interactions, navigation paths, performance metrics.
• Device data: browser type, operating system, screen dimensions.
• Security signals: failed login attempts and suspicious request patterns.

c. Cookies and similar technologies

We use cookies and similar technologies to operate the Service and improve your experience. Typical categories we may use are:

• Essential: session cookies for authentication/CSRF protection.
• Functional: UI preferences such as theme.
• Analytics: Google Analytics (pseudonymous metrics).
• Optional: marketing or tracking cookies which are only activated if you consent.

d. Third‑party data

• OAuth / Social login profile basics (e.g., name, email, provider ID) when you use social sign-in.
• Payment provider metadata (e.g., Stripe transaction IDs). We do not store full card numbers on our servers.

3. Legal Bases (GDPR / UK GDPR)

Where applicable (for users in the UK/EU/EEA), we process personal data under one or more of the following legal bases:

• Contract performance: processing necessary to provide the Service.
• Legitimate interests: security, fraud prevention, service improvement (balanced against your rights).
• Consent: where you have given explicit consent (e.g., marketing, optional cookies).
• Legal obligations: to comply with tax, regulatory or other legal requirements.

4. How We Use Data

We use personal data to:

• Provide, maintain and improve the Service.
• Authenticate and authorize user accounts.
• Personalize your experience and deliver features you request.
• Monitor, debug and secure the Service.
• Process payments and subscriptions via Stripe for configuration).
• Send transactional and administrative emails.
• Perform analytics and capacity planning (Google Analytics).
• Enforce Terms of Service and prevent abuse.

5. Sharing and Disclosure

We do not sell personal data. We may share personal data with:

• Service providers: entities that provide hosting, payment processing (Stripe), email delivery, and analytics.
• Security/anti-abuse partners for fraud detection and abuse prevention.
• Legal/Regulatory authorities when required by law or to protect our rights.
• Business acquirers in the event of a merger, acquisition, or sale—subject to contractual protections.

6. Data Retention

Unless otherwise required by law, we retain personal data as follows (recommended defaults are configurable in your internal policies):

• Account data: retained while your account is active.
• Logs: retained for up to 90 days (adjustable).
• Backups: rotated and retained for up to 30 days.
• Deleted accounts: personal data is anonymized or purged within 90 days unless retention is required for legal reasons (e.g., tax records).

7. Security Measures

We implement technical and organizational measures to protect personal data, including:

• Hashed passwords using industry-standard algorithms (bcrypt/argon2).
• TLS encryption in transit for all web traffic (via https://skill-peak.com).
• Principle of least privilege for internal access controls.
• Audit and activity logging.
• Regular dependency updates and vulnerability scanning.

No method is 100% secure; please use strong, unique passwords and enable MFA where available.

8. International Transfers

Because parts of our infrastructure or service providers may be located outside your country, your personal data may be transferred to, stored, and processed in other jurisdictions. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

9. Your Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

• Access and obtain a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure (right to be forgotten) where applicable.
• Restrict or object to processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent to consent-based processing.
• Lodge a complaint with a supervisory authority (e.g., UK ICO).

To exercise any of the above rights, contact us at contact@skillpeak.com. We may require proof of identity before fulfilling requests.

10. Children’s Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16; if we become aware that we have collected such data we will take steps to delete it.

11. Cookies and Preferences

You can manage cookie preferences in your browser settings. Disabling essential cookies may break the Service. Where required by law, the Service will present a cookie consent banner to obtain lawful consent for optional cookies.

12. Third‑Party Services

Examples of third-party services that may be used in connection with the Service (update to reflect your stack):

• Payments: Stripe — card data is processed by Stripe.
• Analytics: Google Analytics.
• Hosting: self-hosted infrastructure managed by Laragod Ltd.

Each third party operates under its own privacy policy and terms; we recommend reviewing those policies directly.

13. Automated Decision‑Making / Profiling

We do not use automated decision-making that produces legal or similarly significant effects. The Service offers ranking/recommendation algorithms; these are user-selectable and are not used to make automated legal decisions.

14. Data Breach Procedure

In the event of a personal data breach, we will:

1. Investigate and contain the incident.
2. Assess the scope and impact of the breach.
3. Notify affected users and relevant regulators where legally required.

15. Account Deletion

Users may request deletion of their account by contacting support at contact@skillpeak.com. Certain data (e.g., financial records, logs necessary for security or legal compliance) may be retained as required by law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notice or email where practicable. Continued use of the Service following changes constitutes acceptance of the amended policy.

17. Contact

For privacy questions, data requests or complaints, contact us at:
Email: contact@skillpeak.com

If you are located in the EU/EEA, you may also consult your local supervisory authority (see: EDPB Member List).

18. Glossary

"Personal Data" means information relating to an identified or identifiable person. "Processing" means any operation performed on personal data. "Controller" means the entity determining the purposes and means of processing.