Privacy Policy

Last updated: 4 September 2025

Who we are

Polymath Harbor (“we”, “us”, “our”) operates the website polymath.website. Our registered address is 42 Wren Quay, Bristol, BS1 4TR, United Kingdom. You can contact us at info@polymath.website.

What data we collect

• Account & contact data: name, email, role, and messages you submit through forms.
• Usage data: pages viewed, referring URLs, device/browser info, approximate location (city/country).
• Payment data: processed by our payment provider; we do not store full card numbers.
• Student work: project files and deliverables you upload for reviews.
• Cookies: small files used for essential features, analytics, and remembering preferences.

Why we process your data

• To provide courses, mentoring, and support.
• To improve our content and platform through analytics.
• To communicate about applications, cohorts, and updates.
• To detect, prevent, and address fraud or technical issues.
• To comply with legal obligations and enforce our terms.

Lawful bases

We rely on one or more of the following bases under UK GDPR: contract (to deliver requested services), legitimate interests (to run and secure our platform), consent (for non‑essential cookies/marketing), and legal obligation.

Sharing your data

We share data with vendors that help operate our services (hosting, analytics, support). These processors are bound by confidentiality and data‑processing terms. We may also disclose data if required by law or to protect rights, safety, and property.

International transfers

Where data is transferred outside the UK, we use appropriate safeguards (e.g., International Data Transfer Agreement or EU SCCs with UK Addendum).

Data retention

We keep personal data only as long as needed for the purposes above. Typical retention: account records for the life of the account; support emails for up to 24 months; analytics data per vendor defaults unless aggregated/anonymised sooner.

Your rights

• Access, rectification, deletion.
• Restriction or objection to processing.
• Data portability.
• Withdraw consent where processing relies on consent.
• Complain to the ICO (UK) if you believe your rights are infringed.

Cookies

Essential cookies run for security and session continuity. Non‑essential cookies (e.g., analytics) run only with your consent. You can change preferences in your browser or via any cookie banner provided.

Security

We use encryption in transit (HTTPS), access controls, and periodic security reviews. No method is 100% secure; we strive to protect your data but cannot guarantee absolute security.

Contact

For questions or requests, email info@polymath.website.