Last updated: March 2026
Who we are
Consent Angel (“we”, “us”, “our”) operates this consent education platform. We are committed to protecting your privacy and handling your personal data in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
What data we collect
We collect the minimum data necessary:
- Email address — for authentication (magic link sign-in)
- Display name — how you want to be addressed (first name or nickname)
- Learning progress — which stages you've completed and quiz scores
- Badge records — which badges you've earned
- Consent records — timestamps and metadata of your consent decisions
We do not collect: full names, addresses, phone numbers, payment information, or any special category data. We do not use third-party analytics or tracking.
Why we collect it (legal basis)
- Consent (Art. 6(1)(a) GDPR) — You explicitly consent to data processing when registering
- Performance of a contract (Art. 6(1)(b)) — To provide the education service you signed up for
- Legitimate interest (Art. 6(1)(f)) — To maintain security and prevent abuse
How we use cookies
We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
Data sharing
We do not sell, trade, or share your personal data with third parties. Email delivery is handled by our email service provider (Resend) solely for sending authentication emails.
Data retention
Your data is retained for as long as your account is active. If you delete your account, all your data is permanently and immediately removed from our systems.
Your rights
Under GDPR, you have the right to:
- Access — Export all your data from your profile page
- Rectification — Update your display name at any time
- Erasure — Delete your account and all data from your profile page
- Data portability — Download your data in machine-readable JSON format
- Withdraw consent — You can withdraw consent by deleting your account
Security
We use encryption in transit (HTTPS), secure session management, and passwordless authentication to protect your data. Database access is restricted and monitored.
Contact
For any privacy-related questions or to exercise your rights, contact us at: [email protected]