Privacy & Cookie Policy

1. Who we are (Data Controller)

This service ("CanoryX", "we", "us") is operated by Canoryx Limited, a company registered in England under company number 17266164, with its registered office at Office 19389 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA. Where applicable, we are registered with the UK Information Commissioner's Office (ICO) under registration number [ICO Registration Number].

For any privacy question, or to exercise your data-protection rights, contact us at hello@canoryx.com. Our Data Protection contact is Hashan Jayaweera / CPO.

2. What we collect

Depending on how you use CanoryX, we may process:

• Student / enquirer data (course finder): the name, email address, WhatsApp / phone number and the search criteria or enquiry details you submit through a course finder widget operated by one of our partner agencies.
• Agency / agent account data: agency name, contact name, email, WhatsApp / phone number, country, website, and login credentials (passwords are stored only as salted hashes, never in plain text).
• Usage, cookies & analytics: a strictly necessary cookie / local storage entry that remembers your cookie choice, and — only with your consent — optional analytics about how the product is used (see section 7).
• Technical data: limited server logs (such as request method, path, status and timing) used for security and reliability. These are not used to identify you.

3. Why we use it and our legal bases

• To respond to course enquiries and connect students with a relevant education agency — legal basis: consent and/or legitimate interests.
• To provide and secure agency accounts and deliver the service — legal basis: performance of a contract.
• To operate, secure and improve the platform — legal basis: legitimate interests.
• Optional analytics — legal basis: consent, which you may withdraw at any time via "Cookie settings".
• To meet legal obligations — legal basis: legal obligation.

4. How long we keep it (retention)

We retain personal data only for as long as necessary to fulfil the purposes described above. Enquiry and lead data is retained for up to 24 months after last activity, after which it is deleted or irreversibly anonymised. Account data is retained for the duration of the account and for up to 12 months after closure. Specific retention periods may vary depending on the type of data and legal requirements, and are applied automatically where appropriate.

5. Who we share it with (processors)

We use trusted third-party processors who act on our instructions under appropriate data protection terms, which may include:

• Cloud hosting and infrastructure (e.g. Microsoft Azure).
• Payment processing (e.g. Stripe), where you purchase a paid plan.
• Email delivery (e.g. our configured email / SMTP or SendGrid provider).
• Optional product analytics (only if you consent).
• The partner education agency whose course finder you used, to handle your enquiry.

A current list of processors is available on request from hello@canoryx.com.

6. International transfers

Some processors may store or process data outside the UK / EEA. Where that happens, we rely on an appropriate safeguard such as UK / EU adequacy decisions or Standard Contractual Clauses (with the UK International Data Transfer Addendum where relevant). Details are available on request.

7. Cookies & analytics

We use a strictly necessary cookie / local storage value to remember your cookie choice. Optional analytics cookies are off by default and load only after you select "Accept analytics". You can change or withdraw your choice at any time using the Cookie settings link in the footer. Declining analytics does not affect access to the service.

8. Your rights

Subject to applicable law, you have the right to:

• access a copy of your personal data;
• rectify inaccurate data;
• erase your data ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time; and
• lodge a complaint with a supervisory authority (in the UK, the ICO).

To exercise any of these rights, email hello@canoryx.com and we will respond within the timeframe required by law. We may need to verify your identity before acting on a request. For your security, we do not offer self-service account deletion online — requests are handled by our team.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, notified to account holders.

10. Contact

Questions about this policy or your data? Contact hello@canoryx.com.