GDPR Privacy Policy
Last updated: May 19, 2026
Fehujao ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our website at fehujao.com and any related services we provide. It also describes your rights under the General Data Protection Regulation (GDPR) and how you can exercise them.
Please read this policy carefully before using our platform. By accessing or using our services, you acknowledge that you have read and understood this policy.
1. Data Controller
For the purposes of applicable data protection law, the data controller responsible for your personal data is:
Fehujao
34, 54 Glasthule Rd, Glenageary, Dublin, A96 W312, Ireland
Email: support@fehujao.com
Phone: +353469054118
If you have any questions about how we handle your personal data, you may contact us using the details above.
2. What Personal Data We Collect
We collect and process personal data that you provide to us directly, as well as data collected automatically when you use our services.
2.1 Data You Provide Directly
| Category | Examples |
|---|---|
| Identity data | First name, last name, username or similar identifier |
| Contact data | Email address, telephone number, postal address |
| Account credentials | Password (stored in encrypted form), security questions |
| Profile data | Learning preferences, course history, instructor feedback, session notes |
| Payment data | Billing address, transaction reference (payment card details are handled by our payment processor and not stored by us) |
| Communications | Messages sent through contact forms, support requests, survey responses |
2.2 Data Collected Automatically
| Category | Examples |
|---|---|
| Technical data | IP address, browser type and version, device type, operating system |
| Usage data | Pages visited, session duration, click paths, features used |
| Cookie data | Session identifiers, preference cookies, analytics identifiers |
2.3 Special Categories of Data
We do not intentionally collect any special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data). Please do not submit such data through our platform. If we become aware that such data has been submitted, we will delete it promptly.
3. How We Collect Personal Data
We collect personal data through the following means:
Direct interactions: When you register for an account, enrol in a course, book a session, contact our support team, or complete any form on our platform.
Automated technologies: As you navigate our website, we automatically collect technical and usage data using cookies, server logs, and similar tracking technologies.
Third parties: We may receive data from analytics providers, payment processors, and authentication services you use to sign in to our platform (such as single sign-on providers), where you have authorised such sharing.
4. Legal Basis for Processing
We only process your personal data where we have a lawful basis to do so. The legal bases we rely on are:
| Legal Basis | When We Rely on It |
|---|---|
| Contract | Processing is necessary to perform the contract we have with you, including providing access to courses and sessions |
| Legal obligation | Processing is required to comply with applicable laws and regulations |
| Legitimate interests | Processing is in our legitimate interests and does not override your rights — for example, improving our platform, preventing fraud, and ensuring security |
| Consent | Where we ask for your consent, such as for optional marketing communications or non-essential cookies |
Where we rely on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Purposes of Processing
We use your personal data for the following purposes:
Account management: Creating and managing your user account, authenticating your identity, and maintaining your profile and learning history.
Service delivery: Providing access to courses, group and individual sessions, personalised learning paths, and live instructor interactions.
Payments: Processing transactions and maintaining records for billing and accounting purposes.
Communications: Sending service-related notifications, responding to enquiries, and providing customer support.
Marketing: Sending promotional content and updates about our services where you have given consent or where we have a legitimate interest and you have not opted out.
Analytics and improvement: Understanding how users interact with our platform to improve functionality, content, and user experience.
Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, abuse, and other illegal activities.
Legal compliance: Meeting our obligations under applicable law and responding to lawful requests from public authorities.
6. Cookies and Tracking Technologies
6.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit.
6.2 Types of Cookies We Use
| Type | Purpose | Basis |
|---|---|---|
| Strictly necessary | Enable core functions such as login, session management, and security | Necessary for service delivery |
| Functional | Remember your preferences and personalise your experience | Legitimate interest / Consent |
| Analytics | Collect aggregated data on how users navigate the platform | Consent |
| Marketing | Track visits across websites to deliver relevant advertising | Consent |
6.3 Managing Cookies
You can manage your cookie preferences through our cookie consent tool displayed when you first visit the site. You may also configure your browser to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our platform.
7. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with the following categories of recipients only where necessary and under appropriate safeguards:
Service providers: Third-party vendors who assist us in operating our platform, including hosting providers, payment processors, email delivery services, analytics providers, and video conferencing tools. These parties process data only on our instructions and are bound by data processing agreements.
Instructors: Where you book a session with an instructor, relevant profile and session data is shared with that instructor to facilitate the learning experience.
Professional advisers: Lawyers, accountants, and auditors who require access to data to provide professional services to us, subject to confidentiality obligations.
Regulatory and law enforcement authorities: Where we are required to disclose data by law, court order, or to protect the rights, property, or safety of our users or the public.
Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the relevant third party. We will notify you before your data is transferred and becomes subject to a different privacy policy.
8. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place, such as:
Adequacy decisions: Transfers to countries recognised by the European Commission as providing an adequate level of data protection.
Standard Contractual Clauses (SCCs): Contractual protections approved by the European Commission that bind the recipient to protect your data to EEA standards.
Other approved mechanisms: Any other transfer mechanism permitted under applicable data protection law.
You may request a copy of the safeguards we have in place for international transfers by contacting us at support@fehujao.com.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
| Data Type | Retention Period |
|---|---|
| Account and profile data | Duration of your account plus 3 years after closure |
| Transaction and billing records | 7 years from the date of transaction |
| Support communications | 3 years from the date of the last interaction |
| Marketing consent records | Until consent is withdrawn, plus 3 years |
| Analytics and usage data | Up to 26 months in aggregated or anonymised form |
When data is no longer required, we securely delete or anonymise it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate it from further processing until deletion is possible.
10. Your Rights Under GDPR
Under the GDPR, you have the following rights in relation to your personal data:
| Right | Description |
|---|---|
| Right of access | You may request a copy of the personal data we hold about you and information about how we process it |
| Right to rectification | You may ask us to correct inaccurate or incomplete personal data |
| Right to erasure | You may request deletion of your personal data where there is no compelling reason for us to continue processing it |
| Right to restrict processing | You may ask us to suspend processing of your data in certain circumstances, for example while you contest its accuracy |
| Right to data portability | You may request a copy of data you have provided to us in a structured, commonly used, machine-readable format |
| Right to object | You may object to processing based on legitimate interests or for direct marketing purposes |
| Rights related to automated decision-making | You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects |
| Right to withdraw consent | Where processing is based on consent, you may withdraw it at any time without affecting prior processing |
10.1 How to Exercise Your Rights
To exercise any of the rights listed above, please submit a written request to us at:
Email: support@fehujao.com
Post: 34, 54 Glasthule Rd, Glenageary, Dublin, A96 W312, Ireland
We will respond to your request within one calendar month of receipt. In complex cases or where we receive a high volume of requests, we may extend this period by a further two months, in which case we will notify you. We may need to verify your identity before processing your request. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
10.2 Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence or place of work. You may also seek a judicial remedy if you consider that your rights have been infringed.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Encryption: Data is encrypted in transit using TLS and at rest using industry-standard encryption protocols.
Access controls: Access to personal data is restricted to authorised personnel who require it to perform their duties, and is governed by role-based access policies.
Security assessments: We conduct regular security reviews and vulnerability assessments of our systems and infrastructure.
Incident response: We maintain a data breach response procedure and will notify you and the relevant supervisory authority of any breach that is likely to result in a risk to your rights and freedoms, within the timeframes required by law.
No method of transmission over the internet or electronic storage is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.
12. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under this age. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at support@fehujao.com and we will take steps to delete that information promptly.
Where local law sets a higher age threshold for the lawful processing of children's data, we will comply with that higher threshold.
13. Automated Decision-Making and Profiling
We may use automated processes to personalise learning recommendations and adapt content to your usage patterns. These processes do not produce legal effects or similarly significant effects on you. They are designed solely to improve your learning experience and are always subject to human oversight.
We do not make any decisions about you based solely on automated processing that would have a legal or similarly significant effect without human review.
14. Third-Party Links
Our platform may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control those third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting a prominent notice on our platform or by sending you an email notification prior to the change taking effect.
The date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically to stay informed about how we protect your data.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Fehujao
34, 54 Glasthule Rd, Glenageary, Dublin, A96 W312, Ireland
Email: support@fehujao.com
Phone: +353469054118
Website: fehujao.com
We aim to respond to all enquiries within five business days.