Privacy Policy

INSTAKEYS LTD, trading as Frontend Artisans, is the controller of the personal data described here under the UK General Data Protection Regulation and the Data Protection Act 2018. The data comes from the enrolment form and from anything you send us, and we use it to talk to you about a course and then to teach it. We never sell it, and this site sets no advertising or analytics cookies.

To see, correct or delete what we hold, email [email protected]. We’ll do it, apart from anything UK tax law requires us to keep.

What you give us. The enrolment form asks for your name, email address and phone number, and optionally your company, role and country. You can also tell us what you want from the course and how well you know its bench. Anything you add by email or on the intro call joins the same record.

What the server logs. Like any web server, ours keeps standard access logs: IP address, time, the page requested and the browser’s user agent. We use them to keep the site secure and working, and we keep them briefly.

What we don’t collect. No advertising cookies, third-party trackers, session replays or fingerprinting, and nothing in the special categories of personal data, such as health information. We never see your card number; payments go through a payment provider.

• To answer your request and teach your course — arranging the intro call, sending session links, materials, recordings and your tutor’s review. The basis is contract: steps you asked us to take before a contract, and then the contract itself.
• To invoice and keep accounts — the basis is legal obligation, because UK company and tax law requires these records.
• To keep the site secure and answer your emails — the basis is our legitimate interest in running a safe, responsive school.
• To tell past students about a new course — now and then, by email, as the Privacy and Electronic Communications Regulations allow for people who have taken a course with us. Every one of those emails says how to stop them, and a one-line reply does it for good.

A handful of providers help us run the school. Each acts on our instructions as a processor and gets only what it needs to do its job:

• a hosting provider, which runs this website;
• an email provider, which carries our messages to you;
• a video-call service, which runs live sessions and stores their recordings;
• a code-hosting service, where course repositories live;
• a payment provider, which handles payment links and invoices;
• our accountant, who sees the financial records their work needs.

We never sell, rent or trade personal data, or share it for anyone else’s advertising. If the law requires us to disclose it, we will, and we’ll tell you unless we’re legally barred from doing so.

• Requests that don’t lead to enrolment: up to twelve months, then deleted.
• Records of people who took a course: as long as you could reasonably need your course materials, and no longer than we can justify.
• Invoices and financial records: six years from the end of the financial year they relate to, as UK tax law requires.
• Server logs: a few weeks, on a rolling basis.

You have the right to ask for a copy of the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Email [email protected]; we’ll reply within one month, and there’s no charge for a reasonable request.

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d be grateful for the chance to put things right first.

INSTAKEYS LTD is based in the United Kingdom. Some of our providers store data in other countries, including the United States. When personal data leaves the UK, we rely on UK adequacy regulations or on the safeguards the ICO approves for international transfers, such as the International Data Transfer Agreement.

Traffic to this site is encrypted in transit. Only the people who need enrolment records to run a course can open them, and every service account we use is protected with multi-factor authentication. If a breach ever puts your data at risk, we’ll tell you what happened, what we know and what we’re doing about it, and report it to the ICO where the law requires.

Our courses are for adults, and we don’t knowingly collect data from anyone under 18. If you think a child has sent us their details, email us and we’ll delete them.

This site sets no advertising, analytics or tracking cookies, which is why there’s no cookie banner. If a payment or video-call provider needs a strictly necessary cookie to work, that provider sets it when you use its service, not this site.

Write to [email protected], or by post to INSTAKEYS LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Registered in England and Wales, company number 17531546.

When this policy changes, the date at the top changes with it. If a change materially affects data we already hold about you, we’ll email you about it rather than expect you to come back and check.