GCSE Maths Resit Privacy Notice
Last updated: 1 September 2026.
Who we are
NexisLearn is operated by Muhammad Asif Khan, trading as NexisLearn, in Taunton, Somerset, United Kingdom.
- Website: nexislearn.co.uk
- Privacy enquiries: [email protected]
- A full business address is provided in the Terms of Use and Sale, where UK consumer contract law requires it. For privacy questions, email is the fastest route.
What this notice covers
This notice explains how NexisLearn handles personal information when someone visits our website, creates an account, uses the GCSE Maths Resit Free Introduction, purchases an individual course, contacts support, or accesses NexisLearn through a school, sixth form or college.
Who the service is for
Individual self-registration is for learners aged 16 or over. Learners under 16 must use an institution-led route arranged through their school or college. That route uses school-managed contact information, including a school email address and school address, rather than the learner’s private or home contact details.
Information we may collect
Depending on the route used, we may collect:
- name, email address and country/region
- age-route confirmation
- school or college name and institution-managed contact details
- WooCommerce account, order and payment records
- Moodle username, enrolment and login information
- answers, attempts, feedback, progress and completion records
- support messages and accessibility requests
- an optional marketing preference (see “Marketing” below)
- limited device, security, cookie and technical log information
The free individual checkout currently asks for email address, country/region, first name, last name, and confirmation that the learner is aged 16 or over. A separate, optional marketing tick-box, left unticked by default, appears on this and other NexisLearn checkouts; leaving it unticked does not affect access to the Free Introduction. It does not require a street address, town, postcode, company or telephone number.
Please do not send medical information, detailed safeguarding disclosures, examination candidate numbers or other unnecessary sensitive information through ordinary forms or support email.
Marketing
At checkout, learners can optionally tick a box, left unticked by default and kept separate from the required 16+ confirmation, that reads: “Email me about new NexisLearn courses and occasional relevant updates. I can unsubscribe at any time.” This same tick-box appears on other NexisLearn course checkouts too, since it covers updates across NexisLearn’s courses rather than the GCSE route alone. Ticking this box is never a condition of using the Free Introduction — the free course remains available whether or not a learner consents to marketing emails. We do not use quiz answers, confidence responses or support messages for marketing, and we do not sell personal information. Learners can unsubscribe at any time using the link in any marketing email or by contacting [email protected].
Why we use this information
We use information to:
- create and secure WordPress and Moodle accounts
- enrol the correct learner on the correct course
- provide learning activities, feedback and progress records
- process orders and maintain financial records
- send essential account, order and service messages
- send optional marketing emails to those who have opted in
- provide technical and accessibility support
- prevent misuse and protect the platform
- meet legal, accounting and safeguarding obligations
- improve the service using proportionate, privacy-respecting information
Lawful bases
Depending on the purpose, we rely on performance of a contract or steps requested before a contract, legitimate interests in operating and protecting the service, compliance with legal obligations, and consent where the law specifically requires it, such as optional marketing or certain cookies. For an institution-led route, the school/college and NexisLearn will document their respective controller and processor responsibilities in the relevant agreement.
Children and privacy by design
NexisLearn treats the learner’s best interests as a primary consideration. We aim to use high-privacy defaults, collect only what is needed, avoid unnecessary sharing, avoid manipulative prompts, and explain information use in clear language. The direct individual route is restricted to age 16+, while access for an under-16 learner is arranged and managed through their school or college.
Who receives information
We use the following service providers to operate the website, learning platform, communications and payments:
- WordPress / WooCommerce — website, account and order records
- Moodle (self-hosted) — learning platform, enrolment, activity and progress records
- Cloudflare — security, spam/bot protection (Turnstile) and traffic routing
- Brevo — transactional and marketing email
- Stripe — payment processing, only once the paid £99 route is live; not used for the £0 Free Introduction
International transfers: Cloudflare and Stripe are global services and may process data outside the UK.
How long we keep information
- Financial/order records: 7 years (HMRC requirement)
- Inactive individual accounts: deleted within 30 days of a deletion request
- Moodle attempts and progress records: 12 months after last activity
- Support messages: 12 months
- Security logs: 12 months
- Optional marketing records: kept for as long as you remain subscribed, or until you ask us to stop
Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information, object to certain uses, receive portable information, or withdraw consent. To make a request, email [email protected]. We may need to verify identity before acting.
You may also complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to address a concern directly first.
Cookies
Confirmed cookie inventory, matching the live AI-course Cookie Policy (same platform):
- wordpress_* / wp-settings-* — login session and preferences (WordPress)
- MoodleSession / MOODLEID_ — course login session (Moodle)
- woocommerce_* / wc_session_* — basket/checkout session (WooCommerce)
- cf_clearance and Cloudflare Turnstile — security/anti-spam (Cloudflare)
- No analytics, advertising or social-media tracking cookies are used
Changes and contact
We may update this notice when the service or law changes. Material updates will be dated on this page. Questions should be sent to [email protected].