Privacy Policy

Effective Date: April 2026 | Last Updated: April 2026

1. Data Controller

iUNI Ltd ("we", "our", "us"), trading as iUNI (Immersive University), is the data controller responsible for your personal data.

Registered Address: Unit 8, Lyon Road, Milton Keynes, MK1 1EX, United Kingdom
Email: info@iuni.ai
Phone: 0333 33 98 3 94

2. Information We Collect

We collect the following categories of personal data:

2.1 Information You Provide

Contact form submissions: Name, email address, company name, phone number, industry, service interest, and message content
Newsletter subscriptions: Email address
Course enquiries: Name, email, organisation, training requirements
Demo bookings: Name, email, company, preferred dates

2.2 Information Collected Automatically

Analytics data (via Plausible): Page views, referral source, country, device type, browser - all aggregated and anonymised with no personal data collected
Essential cookies: Session management and CSRF protection tokens (see Cookie Policy)

We do not collect: IP addresses (for analytics), browsing history, cross-site tracking data, or biometric data.

3. Lawful Basis for Processing (UK GDPR Article 6)

We process your personal data based on the following lawful bases:

Consent (Art. 6(1)(a)): When you submit a contact form, subscribe to our newsletter, or request a demo. You may withdraw consent at any time.

Contractual Necessity (Art. 6(1)(b)): To deliver VR/AR services and products you have engaged us for, process course enrolments, and manage your account.

Legitimate Interests (Art. 6(1)(f)): To improve our website and services, analyse aggregated analytics, and protect against fraud. We balance our interests against your rights.

Legal Obligation (Art. 6(1)(c)): To comply with UK tax, accounting, and regulatory requirements.

4. How We Use Your Information

To respond to your enquiries and provide requested information
To send project proposals, quotations, and course information
To process VR course enrolments and certifications
To send marketing communications (only with your explicit consent)
To improve our website, products, and user experience
To comply with legal and regulatory obligations

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share your data with:

Wartens UK Ltd (parent company) - for project delivery and business operations
Email service providers - to send transactional and marketing emails
Hosting providers (Vercel) - website hosting and content delivery
Payment processors (Stripe) - for course payment processing (Stripe is PCI DSS compliant)

All third-party processors are bound by data processing agreements and must comply with UK GDPR.

6. International Data Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure adequate safeguards are in place, including:

UK adequacy regulations
Standard Contractual Clauses (SCCs) approved by the ICO
Transfers to countries with adequate data protection laws

7. Data Retention

Contact form submissions: Retained for 24 months, then deleted
Newsletter subscriptions: Until you unsubscribe
Course records: Retained for 6 years (UK tax/legal requirements)
Project records: Retained for 6 years after project completion
Analytics data: Plausible retains aggregated data indefinitely (no personal data)

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access (Art. 15): Request a copy of personal data we hold about you
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing (Art. 18): Request we limit how we use your data
Right to Data Portability (Art. 20): Request your data in a machine-readable format
Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, email us at info@iuni.ai. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for all data in transit
Secure hosting infrastructure with Vercel
Access controls and authentication for internal systems
Regular security reviews and updates
ISO 9001:2015 certified quality management processes

10. Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will delete it immediately.

11. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

We encourage you to contact us first at info@iuni.ai so we can resolve your concern.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

13. Contact Us

For any questions about this Privacy Policy or your personal data:

iUNI Ltd (Immersive University)
Unit 8, Lyon Road, Milton Keynes, MK1 1EX, UK
Email: info@iuni.ai
Phone: 0333 33 98 3 94