POLICY
Privacy Policy
Effective date: 11 December 2025
Last updated: 11 December 2025
1. Introduction
Welcome to upSkill (“we”, “us”, “our”). upSkill is an affiliate content website that publishes articles, reviews, and recommendations and may earn affiliate commissions when users click affiliate links and make purchases. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, your rights, and how to contact us.
2. Controller and contact details
Data controller: upSkill (legal entity name: Synergy Edu Limited)
Registered address: 85 Great Portland Street, London, England WIW 7LT
Data protection officer / privacy contact (if any): “N/A”
Email for privacy queries: contact@upskill.biz
If you are a California resident, you can also contact us at the same email for CCPA/CPRA requests.
3. Information we collect
We collect the following categories of personal data in a variety of ways:
a. Information you give us
- Name, email address, billing / shipping address (if you contact us, sign up for newsletters, or make purchases through third-party flows where we collect such data).
b. Information we collect automatically
- Device and technical data: IP address, browser type/version, device identifiers, operating system, pages visited, referral URL, timestamps, and other server log data.
- Cookies and similar technologies (see Cookies section).
c. Information from third parties
- Analytics providers, advertising networks, affiliate partners and social networks (e.g., Google Analytics, affiliate networks).
- Public sources or other third-party services where you have given consent or where permitted by law.
4. How we use your information (purposes)
We use personal data to:
- Provide, operate, maintain and improve the website and user experience (including personalisation).
- Operate affiliate links and process related communications and tracking.
- Communicate with you (newsletters, replies to inquiries).
- Analytics and site performance measurement.
- Detect, prevent and respond to fraud, abuse, security incidents and legal requests.
- Comply with legal obligations.
5. Legal bases for processing (GDPR / UK-GDPR)
If you are in the EEA/UK, our lawful bases for processing include:
- Contract / performance — where data processing is necessary to perform a service you requested.
- Consent — for non-essential cookies, marketing emails, or other optional processing (you may withdraw consent at any time).
- Legitimate interests — for analytics, site security, and running our affiliate business, where those interests are not overridden by your rights. We will document and balance these interests.
(See ICO guidance on what must be included in privacy notices and how to explain lawful bases.) ICO+1
6. Cookies and similar technologies
We use cookies and similar technologies to operate the site, enable affiliate tracking, provide analytics, and (with consent) deliver marketing and advertising. You will be presented with a cookie consent mechanism for non-essential cookies; strictly necessary cookies are exempt from consent. You may manage or withdraw cookie consent in your browser or via the cookie control provided on our site. For more on cookies and consent requirements, see official guidance.
Typical cookie categories we use
- Strictly necessary cookies (site operation).
- Performance / analytics cookies (e.g., Google Analytics).
- Functional cookies (preferences).
- Advertising / tracking cookies (used by third parties to deliver ads and measure conversions).
7. Affiliate links, third-party advertisers & sharing
upSkill contains affiliate links. When you click an affiliate link, we may share click/transaction identifiers with affiliate networks to receive commission. We do not sell personal data for advertising purposes. We may share personal data with:
- Affiliate networks and merchants to attribute referrals and process payments.
- Analytics and advertising providers (subject to your cookie/consent choices).
- Service providers who help operate the site (hosting, email delivery, security).
We require third parties to protect personal data and limit their use to the services they provide to us.
8. CCPA / CPRA — California residents
If you are a California resident, you have rights under the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), including:
- Right to know categories of personal information collected, sold, or shared and the purpose.
- Right to access the specific pieces of personal information we hold about you.
- Right to delete certain personal information.
- Right to opt out of the sale or sharing of personal information (click the “Do Not Sell or Share My Personal Information” link on our site, if presented).
- Right to non-discrimination for exercising your privacy rights.
We will respond to verified requests as required by the law and provide a “Notice at Collection” where required. For details on CCPA requirements, see California guidance.
9. Data retention
We retain personal data only as long as necessary to fulfil the purposes described (e.g., affiliate attribution, analytics, legal compliance). Retention times vary by data category (for example, cookies by cookie lifetime; analytics aggregate data typically kept for 26 months unless configured otherwise). We will anonymize or delete data once it is no longer required.
10. International transfers
We may transfer or store personal data outside your country (e.g., to service providers in the U.S.). Where transfers occur from the EEA/UK, we will rely on an appropriate safeguard (e.g., adequacy decision, Standard Contractual Clauses, or other lawful mechanism) as required by applicable law.
11. Security
We use reasonable administrative, technical and physical measures to protect personal data against loss, misuse and unauthorized access. However, no internet transmission or storage is fully secure — absolute security cannot be guaranteed.
12. Your rights (GDPR/UK & general)
Subject to local law, you may have rights including:
- Right to access your data.
- Right to rectification.
- Right to erasure (right to be forgotten) subject to exceptions.
- Right to restrict or object to processing.
- Right to data portability.
- Right to withdraw consent where processing is based on consent.
To exercise these rights, contact us at contact@upskill.biz. We may require verification before fulfilling requests.
13. Children
Our website is not intended for children under 13 (or the higher age required in your country). We do not knowingly collect personal information from children. If we learn we have collected data from a child without parental consent, we will delete it promptly.
14. Third-party sites and services
Our site may contain links or embedded content from third parties (payment providers, affiliate merchants, social platforms). This policy does not apply to those third parties. Please review their privacy policies before using their services.
15. Changes to this Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements. We will post the updated policy on the site with a new “Last updated” date.
16. How to contact us / lodge complaints
If you have questions, requests, or concertns about this Privacy Policy or our privacy practices contact: contact@upskill.biz. If you are in the EU/UK and remain unsatisfied, you have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK).