Privacy Policy

1. Who we are and how to contact us

LessonComputer.mu is operated by Lesson Computer Ltd, a company incorporated in Mauritius under Business Registration Number C24215107, with its registered address at Belvedere Road, Brisée Verdière, 1402-03, Mauritius.

Lesson Computer Ltd is the data controller for the personal data described in this policy. That means we decide what data is collected and what it is used for, and we are responsible for looking after it.

For anything to do with privacy or your personal data, contact us at:

2. What this policy covers

This policy explains what personal data we collect when you use LessonComputer.mu, why we collect it, who we share it with, how long we keep it, and what rights you have.

We handle personal data in line with the Data Protection Act 2017 of Mauritius. Because we teach students outside Mauritius as well, where the General Data Protection Regulation (GDPR) applies to a student in the European Economic Area or the United Kingdom, we handle their data in line with that too.

Please read this policy alongside our Terms of Service.

3. The personal data we collect

Account and profile data. When you register we collect your full name, email address, the grade or course level you select, your answer to "How did you hear about us?", and a password (which is stored in encrypted form and is never visible to us).

Sign-in data from Google. If you choose "Sign up with Google", Google sends us your name, email address and profile picture so we can create your account. We do not receive your Google password and we have no access to your Gmail, Drive or any other Google service.

Parent or guardian data. Where the student is under 18, we collect the name, email address and, where provided, the telephone number of the parent or guardian who gives consent and makes payment.

Payment data. When you buy a course, payment is handled by our payment provider, MIPS (Mauritius Internet Payment Solutions). Your full card number, expiry date and security code go directly to them and never reach our servers. We receive only a record of the transaction — the amount, the currency, the date, whether it succeeded, and the last four digits and card type.

Learning and usage data. We record which videos you watch and how far through them you get, which live classes you attend, which courses you are enrolled in, and your progress through a course. This is what lets you pick up where you left off and lets us see which lessons students find difficult.

Live class data. If you join a live class on Zoom we process your display name, your microphone audio if you speak, any messages you post in the class chat, and your camera image if you choose to turn your camera on. Live classes are recorded — see section 7.

Communications. If you use the contact form we collect your name, email address, subject and message. If you email or message us on WhatsApp, we keep that correspondence. If you subscribe to our new-class notifications, we collect your email address.

Technical data. Our servers and service providers automatically record your IP address, browser type and version, device type, operating system, approximate location derived from your IP address (country and city level only), and the pages you visit with timestamps. This is standard for any website and is used for security, fraud prevention and diagnosing faults.

We do not ask for and do not want your national identity number, passport number, bank account details, health information, religious beliefs, or any other special category of data. Please do not send us any of these.

4. Why we use your data, and our legal basis

Where we rely on legitimate interests, we have considered whether our interest is fair to you and have concluded that it does not override your rights. You may object at any time — see section 13.

5. What we never do

We never sell your personal data.

We never rent, trade or share your personal data with third parties for their own marketing.

We do not use your personal data, your questions, or live class recordings to train artificial intelligence models, and we do not allow our suppliers to do so.

We do not make decisions about you by purely automated means that produce legal or similarly significant effects.

6. Students under 18 — parental consent and children's data

Our students are secondary school students aged 11 to 18, so we take children's privacy seriously.

Consent. If you are under 18, you must have the consent of a parent or legal guardian before you create an account or buy a course. When registering we ask you to confirm that consent has been given and to provide a parent or guardian email address.

What we collect from children. We deliberately keep this to a minimum: name, email address, grade level, learning progress and live class participation. We do not ask children for a home address, a date of birth beyond the grade level, a telephone number, or payment details.

Marketing. We do not send marketing emails to students we know to be under 18. Marketing about courses and new classes goes to the parent or guardian email on the account.

Parental rights. A parent or guardian may at any time ask to see what data we hold about their child, ask us to correct it, ask us to delete the account, or withdraw consent. Email lessonscomputers@gmail.com from the parent or guardian address on the account.

Safeguarding. Live classes are supervised by the teacher. There is no private student-to-student messaging on the platform. If we become aware of conduct that puts a child at risk we will act on it, including by contacting the parent or guardian and, where necessary, the relevant authorities.

7. Live class recordings

We record live classes so that students who cannot attend can watch afterwards and so that those who attended can revise.

A recording captures the teacher's screen and voice. It may also capture the voice of any student who speaks and any message posted in the class chat. Students are never required to switch on a camera and may keep it off throughout. If you prefer not to be recorded at all, ask your question through the chat or by email instead of speaking.

Recordings are stored securely and are made available only to students enrolled in that course. They are not published publicly, not posted on social media, and not shared with anyone else.

We keep a recording for 52 weeks from the date of the class, after which it is deleted.

If you or your child appear in a recording and you want that portion removed, contact us and we will edit or delete the relevant part where it is technically possible to do so.

8. Cookies and similar technologies

We use cookies and similar technologies in two categories.

Strictly necessary cookies. These make the platform work and cannot be switched off: an authentication cookie that keeps you signed in, a session cookie that remembers your place in a video, and a security cookie that protects forms against cross-site request forgery.

Analytics and advertising cookies. These help us understand how people find and use the site, and measure whether our advertising is working. We set them only with your consent, given through the cookie banner shown on your first visit. They are:

• Google Tag Manager (container GTM-K9WPDXKM) — the container that loads our measurement tags. It does not itself store analytics data, but it controls which of the tags below run.
• Google Analytics 4 — measures how many people visit the site, which pages and courses they look at, and how they move through the site.
• Meta Pixel — measures whether our Facebook and Instagram advertising leads to enrolments, and allows us to show relevant ads to people who have visited the site.
• Stape.io — a server-side tagging service that forwards measurement events to Meta and Google on our behalf, using our own server rather than your browser alone.

Where these tools are provided by Meta Platforms or Google, those companies act as separate controllers of the data they collect, and their own privacy policies apply.

You can change or withdraw your cookie consent at any time through the "Cookie settings" link in the footer of every page, and you can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop you being able to sign in.

9. Marketing

If you subscribe to new-class notifications, or ask us to keep you informed, we will email you about new courses, new lessons and upcoming live classes.

Every marketing email carries an unsubscribe link, and you can also unsubscribe from your account settings or by emailing us. Unsubscribing from marketing does not stop essential account emails such as receipts, class reminders and schedule changes — those are part of the service you have paid for.

We do not send marketing to students we know to be under 18; it goes to the parent or guardian on the account.

10. Who we share your data with

We share personal data only with service providers who help us run the platform, and only to the extent they need it. They act on our instructions, are bound by contract to protect it, and may not use it for their own purposes.

We may also disclose personal data where we are legally required to — for example to a court, a regulator, the Data Protection Office, or the Mauritius Revenue Authority — or where disclosure is necessary to protect the safety of a child or to establish or defend a legal claim.

If the business is ever sold or reorganised, personal data may transfer to the new owner, who would remain bound by this policy until they gave you notice of any change.

11. Sending data outside Mauritius

Our main database is hosted in the European Union, and several of our service providers operate outside Mauritius. This means your personal data is transferred out of Mauritius.

Under the Data Protection Act 2017 we may only do this where there are appropriate safeguards. We rely on the fact that our providers are located in, or contractually committed to, jurisdictions with comparable data protection standards, and our contracts with them include standard data protection clauses obliging them to protect your data to the standard required by Mauritian and European law.

You can ask us for details of the safeguards that apply to a particular transfer by emailing lessonscomputers@gmail.com.

12. How long we keep your data

Where we no longer need data but cannot delete it immediately — for example because it sits in a backup — we isolate it and delete it when the backup cycle next runs.

13. Your rights

You have the following rights over your personal data:

• Access — ask for a copy of the data we hold about you.
• Correction — ask us to fix anything inaccurate or incomplete. You can update most of this yourself in your account settings.
• Deletion — ask us to delete your data. We will do so unless we are legally required to keep it, such as payment records for tax purposes.
• Restriction — ask us to stop using your data while a dispute about it is resolved.
• Objection — object to processing we carry out on the basis of legitimate interests, and object to direct marketing at any time.
• Portability — ask for the data you gave us in a structured, commonly used, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time. This does not affect anything we did before you withdrew it.

To exercise any of these rights, email lessonscomputers@gmail.com. We will respond within one month. If your request is complex we may need longer, and we will tell you if so. There is no charge.

We may ask you to confirm your identity before we act, to make sure we are not giving your data to someone else. For a student under 18, a request should come from the parent or guardian on the account.

14. Security

We protect your data with measures including encryption of data in transit (HTTPS) and at rest, hashed password storage, role-based access controls so that only people who need access have it, and regular review of our providers' security.

No system is completely secure, and we cannot guarantee absolute security. You help by choosing a strong, unique password and never sharing your login details.

If a data breach occurs that is likely to affect your rights, we will notify the Data Protection Commissioner of Mauritius as required by law, and we will tell you directly where the breach is likely to result in a high risk to you.

15. Links to other sites

Our site links to our pages on Facebook, Instagram, TikTok and WhatsApp. Those platforms have their own privacy policies and we are not responsible for how they handle your data. This policy covers only LessonComputer.mu.

16. Changes to this policy

We may update this policy as our service changes or as the law changes. The "Last updated" date at the top always shows the current version. Where a change materially affects your rights, we will tell you by email or by a clear notice on the platform before it takes effect.

17. Contact us, and how to complain

If you have a question or a concern about how we handle your data, contact us first — we would much rather fix it directly.

If you are not satisfied with our response, you have the right to complain to the Data Protection Office of Mauritius:

If you live in the European Economic Area or the United Kingdom, you may instead complain to the supervisory authority in your own country.