Privacy Notice
Last updated: 25 August 2026
MVRC Learning & Solutions operates the Distributor Portal and acts as the data controller for the personal data described in this notice. This means we decide why and how your personal data is processed when you use the Service.
Data we collect and why
- Account data (name, email address, login credentials, address, country, bank name and account number you enter in your profile) — to create and administer your account, and to place your details on the invoices you generate. Legal basis: performance of our contract with you.
- Business content you enter (your clients, products, orders, invoices and payment records) — to provide the Service. Legal basis: performance of our contract. You are responsible for the lawfulness of the client data you upload.
- Support messages — to answer your questions. Legal basis: performance of our contract and our legitimate interest in supporting users.
- Usage and technical data (device identifiers, IP address, log and telemetry data) — for security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.
- Subscription data (plan, status, renewal dates) — to give you access to the features you paid for and to comply with accounting obligations. Legal basis: contract and legal obligation.
Card and payment details are collected and processed by Paddle, not by us. We never see or store your full card details.
Who we share data with
- Service providers / subprocessors — hosting, database, email and analytics providers acting on our instructions.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
- Professional advisers such as accountants and lawyers, where necessary.
- Authorities, where we are required to disclose data by law.
Where personal data is transferred outside the EEA or UK, we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.
Retention
We keep account and business data for as long as your account is active, and for a reasonable period afterwards so you can reactivate or export it. Invoicing and tax records are kept as long as the law requires. After that, data is deleted or anonymised.
Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level database isolation so that each account can only read its own data.
Your rights
You have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent where processing relies on it. You may also lodge a complaint with your supervisory authority. We respond to requests within one month. To exercise your rights, contact marf06@gmail.com.
Cookies
We use only essential cookies and local browser storage needed to keep you signed in and to remember your preferences. We do not use advertising cookies. You can clear this storage in your browser at any time, though doing so will sign you out.