Privacy Policy

1. Who we are

SkillsNest is operated by Skills Nest Limited, a company registered in England and Wales. SkillsNest is an online training and certification-practice platform available to customers internationally.

For the personal information we collect through the website and learning service, Skills Nest Limited is the data controller.

Privacy and data-protection questions: support@skills-nest.com. General enquiries: info@skills-nest.com. You can also use https://www.skills-nest.com/contact.

2. Information we collect

Account information: full name, email address, and a password handled by our authentication provider. We do not store your password in a form we can read.

Learning information: course and lesson progress, knowledge-check and practice attempts, mock-exam and case-study attempts, scores, and related timestamps. We use this to provide the service you asked for, not to publish a public league table.

Billing information: if you subscribe, Stripe processes your payment card. We store Stripe customer and subscription identifiers, plan status, and period dates. We do not store full card numbers on SkillsNest.

Technical information: authentication cookies and similar session data needed to keep you signed in. Server logs from our host may include IP address, browser type, and request paths for security and reliability.

Approximate location: when you use the hosted SkillsNest application, we may store a coarse geographic location derived from our hosting platform’s request metadata. That may include country, region or city, and a timezone when the platform supplies one. We use this for account administration, understanding geographic use of SkillsNest, service analytics, helping keep the service secure, and improving the product. We do not request the device GPS or browser geolocation permission for this, we do not store precise latitude or longitude, and we do not store a raw IP address on your profile for this feature. Existing accounts without a stored location continue to work normally.

Optional analytics information: Google Analytics 4 is not loaded or used until you accept optional analytics. If you accept, Google Analytics 4 may collect usage information such as page interactions, device and browser information, and approximate location. If you accept optional analytics and then complete a paid Premium subscription, we may also send a completed-purchase measurement event to Google Analytics. Analytics is optional. You can reject it and still use SkillsNest, including paying for Premium.

Optional advertising information: if you accept optional advertising cookies, we may load the Reddit Pixel so Reddit can measure advertising performance and conversions on SkillsNest, such as page visits and completed account sign-up. Advertising consent is independent from analytics consent. You can accept analytics and reject advertising, or the other way around. The Reddit Pixel is not loaded until you accept advertising cookies. SkillsNest does not intentionally send your email address, phone number, name, or SkillsNest account ID through this Pixel implementation, and SkillsNest does not enable Reddit advanced matching. Reddit may still receive technical visit information, conversion-event names, and identifiers that Reddit’s Pixel places or reads in the browser. Advertising cookies are optional. You can reject them and still use SkillsNest.

Optional marketing preference: when you create an account you may choose to receive marketing communications. That choice is not pre-selected. Declining marketing does not prevent you from creating or using a SkillsNest account. If you opt in, we may keep a record of your current preference, when it was given or withdrawn, how it was recorded, the wording or version shown at the time, and any relevant certification or content interest associated with signup, so we can honour that choice. That email-marketing preference is separate from advertising cookies.

3. How we use information

To create and maintain your account, sign you in, and send essential service emails (for example email confirmation, password reset, account security, subscription or billing messages, and important account notices) through our authentication, billing, or hosting providers as needed to operate the service.

To deliver courses, practice questions, mock exams, and progress tracking, including deciding which preview, free-mock, or Premium resources you can use.

To take payment, manage subscriptions, handle cancellations at period end, and keep billing records.

To keep the service secure, prevent abuse, debug faults, and meet legal obligations.

To understand coarse geographic use of SkillsNest (such as country, region or city derived from hosting-platform request metadata) for account administration, security, service analytics, and product improvement.

If you have accepted optional analytics, to measure completed Premium subscription purchases in Google Analytics. That measurement is not used to decide whether your payment or Premium access succeeds.

If you have accepted optional advertising cookies, to measure Reddit advertising performance and conversions, currently page visits and completed account sign-up. That measurement is not used to decide whether signup, payment or Premium access succeeds. SkillsNest does not currently send a Reddit purchase event from the browser.

If you have opted in, to send optional marketing communications. Marketing is separate from essential service emails and from advertising cookies. SkillsNest is not currently sending marketing newsletters or campaigns.

4. Lawful bases

Because the operator is established in England and Wales, UK data-protection law (including UK GDPR) is an important framework for how we handle personal information. Where that law applies, we typically rely on: performance of a contract (providing the account and subscribed service); legitimate interests (securing the service, understanding how the product is used at an aggregate level, and improving reliability); and legal obligation (for example keeping certain billing records).

Other privacy or consumer-protection laws may also apply depending on where you live. This policy does not claim that UK GDPR is the only regime that could ever apply, and it does not attempt to set out every local privacy statute.

Optional marketing communications are only sent if you choose to receive them. Optional analytics and advertising cookies are also used only if you choose those categories. SkillsNest is not currently sending marketing newsletters or campaigns. We will update this policy as appropriate if that changes or if a dedicated email-marketing provider is introduced.

5. Marketing communications

When you create a SkillsNest account, you may choose to receive optional marketing communications. Examples may include certification study tips, new practice tests and mock exams, new courses, exam and certification updates, and SkillsNest news and offers.

Marketing is optional. The signup marketing choice is not pre-selected. You can create and use a SkillsNest account without agreeing to marketing. Marketing consent is separate from essential account communications.

If you opt in, we may retain information needed to manage your marketing preference. That may include your current preference, when consent was provided, when consent was withdrawn, the source of the preference, the consent wording or version shown at the time, and any relevant certification or content interest associated with signup.

You can withdraw marketing consent at any time from Email preferences in your account (https://www.skills-nest.com/account/preferences). When marketing emails are introduced, those emails will include an appropriate way to unsubscribe. SkillsNest is not currently sending marketing newsletters or campaigns, so an email unsubscribe link is not in use yet.

Essential service communications are different from marketing. They may include account or email verification, password reset, account security messages, subscription and billing emails, and important service or account notices. Withdrawing marketing consent does not stop those essential communications where they are needed to operate the account or service.

SkillsNest has implemented marketing-preference functionality but has not yet connected a dedicated email-marketing provider and is not currently sending marketing newsletters or campaigns. This policy will be updated as appropriate when a provider is introduced.

6. Account and learning data

Your learning record stays inside your account. Public catalogue pages show product metadata such as titles and published counts. They do not include lesson transcripts, video files, question wording, or answers.

Administrators may access account and content-administration tools as needed to operate the platform. We do not sell student learning data.

7. Payments

Paid subscriptions are processed by Stripe. Stripe acts as an independent payment provider and has its own privacy notice. We receive enough billing metadata to recognise your subscription and entitlement.

Prices, billing intervals and any applicable taxes are shown on the pricing page at the time of purchase. This policy does not freeze a price or assume a particular currency.

8. Cookies and authentication

We use necessary cookies and similar storage to keep you signed in (Supabase authentication sessions), remember display preferences such as currency, and to run the website. These are required for the service to work. We may also set a first-party cookie so we do not refresh approximate location on every request.

Optional analytics cookies are used only if you accept them. Until you accept, SkillsNest does not load the Google Analytics tag and does not send analytics events or cookieless analytics pings. You can accept or reject analytics independently from advertising, and you can change that choice later using Cookie settings in the website footer. Rejecting analytics does not prevent you from using SkillsNest.

When you accept analytics, Google Analytics 4 may set cookies such as _ga and _ga_*. We also store a first-party preference cookie (sn_analytics_consent) with the value granted or denied so we can remember your choice. That preference cookie does not contain your name, email, or account identifiers. If you accept analytics and start Checkout, we may copy a Google Analytics browser identifier and session identifier onto the Stripe subscription metadata solely so a later server-side purchase measurement can be connected to the same analytics session. Those identifiers are not your email, name, address, or SkillsNest account id, and we do not send payment card details to Google Analytics.

If you later reject analytics using Cookie settings, we stop using Google Analytics and do not load the Google tag on later visits. We remove Google analytics cookies such as _ga and _ga_* if they were set. We do not remove necessary cookies such as your sign-in session or currency preference.

Optional advertising cookies are used only if you accept the advertising category. Until you accept advertising, SkillsNest does not load the Reddit Pixel and does not send Reddit PageVisit or SignUp events. Advertising consent is stored in a separate first-party preference cookie (sn_advertising_consent) with the value granted or denied. That cookie does not contain your name, email, or account identifiers. Existing visitors who already chose analytics keep that analytics choice; advertising stays off until they choose it.

When you accept advertising, the Reddit Pixel may set first-party cookies on skills-nest.com whose names begin with _rdt_. Reddit may also set cookies on Reddit’s own domains. If you later reject advertising, we stop loading the Reddit Pixel, stop sending Reddit events, and remove Reddit first-party cookies on the SkillsNest domain that JavaScript can reach. We cannot delete third-party cookies stored on Reddit’s domains.

SkillsNest does not enable Reddit advanced matching in this implementation and does not send email, phone number, name, mobile advertising IDs, or SkillsNest account IDs as Reddit match keys. We do not use Google Ads, Google remarketing, or Google personalised advertising. Google advertising storage remains denied even if you accept analytics or Reddit advertising cookies.

9. Service providers

We use specialist providers to run the service, including: Supabase (authentication and database); Stripe (payments); Vercel (website hosting); Google (Google Analytics 4, only when you have accepted optional analytics); and Reddit (Reddit Pixel, only when you have accepted optional advertising cookies). Lesson video may be delivered through our hosting infrastructure.

These providers process information on our instructions or as independent controllers for their own payment or authentication functions, as described in their notices. We do not list unused vendors here. We have not yet connected a dedicated email-marketing provider, so none is named in this policy.

10. Data retention

We keep personal information only for as long as we need it to provide the service, resolve disputes, and meet legal or accounting requirements.

If you close your account, we will delete or anonymise personal data we no longer need, except where we must keep a record (for example certain billing records).

11. Data security

We use industry-standard hosting, encrypted connections (HTTPS), access controls, and row-level security on the database. No online service can guarantee absolute security. Please use a strong unique password and keep your login details private.

12. International transfers

SkillsNest serves customers internationally. Our providers and some of our customers may be located in the United Kingdom, the European Economic Area, the United States, or other countries.

Where personal information is transferred internationally, we rely on the safeguards those providers offer (such as contractual clauses) as applicable. Google Analytics may process analytics data outside the UK, including in the United States, when analytics is accepted. Reddit may process advertising-measurement data outside the UK, including in the United States, when advertising cookies are accepted. A formal transfer register by region can be maintained as the business grows.

13. Your rights

If UK GDPR applies to you, you may have the right to access, correct, delete, or restrict use of your personal information, to object to certain processing, and to receive a portable copy of information you provided to us. You may also complain to the Information Commissioner’s Office (ICO) in the UK.

Depending on where you live, other local privacy rights may also apply. This policy does not try to list every US-state, Canadian, Australian or EU right separately. We will consider requests in line with the laws that apply to you.

Please contact support@skills-nest.com in the first instance, or use the contact page.

14. Children

SkillsNest is an online professional-certification training service. We do not knowingly target children.

The current registration form does not collect date of birth, and a specific minimum account age has not been published. If you are not old enough to enter a contract where you live, you should not create an account.

15. Changes to this policy

We may update this policy as the product changes. The “Last updated” date at the top will change when we do. Continued use of SkillsNest after an update means you should read the revised policy.

16. Contact

Privacy and data-protection: support@skills-nest.com. General enquiries: info@skills-nest.com. Website: https://www.skills-nest.com/contact.