Privacy Policy (GDPR)

This Privacy Policy explains how The JuLee Project Limited (“we”, “us”, “our”) processes personal data when you visit or use the Au Pair Training website, dashboards, checkout and mobile learning services (together, the “Platform”).

Data controller: The JuLee Project Limited (company registration number HE481263)
Registered office: Gregori Afxentiou 157A, 2369 Agios Dometios-Nicosia, Cyprus
Contact: hello@aupairtraining.com
Website / Platform URL: https://aupairtraining.com/

1. Who uses the Platform

The Platform supports au pairs, host families, sponsor organisations, agencies and authorised platform administrators. Training accounts are intended for adults aged 18 or over.

2. Personal data we process

The information processed depends on your role and the features you use:

  • Host-family and sponsor accounts: account or organisation name, country of residence, email address, communication language, profile image and referral attribution.
  • Au-pair accounts: first name, full name, email address, nationality, date of birth, training language and profile image. Full name, nationality and date of birth are requested when needed to issue a certificate.
  • Agency accounts: agency and legal name, business address, VAT number, staff email addresses, role and status, referral codes, commission records and payout details supplied by the agency.
  • Learning and certificate records: course allocations, invitations, access dates, lesson and video progress, quiz attempts and scores, handout downloads, completion records, certificates, certificate-verification identifiers and verification status.
  • Sharing choices: whether an au pair shares earlier training history and certificates with a linked host family or sponsor.
  • Orders and payments: course, amount, currency, discounts, referral attribution, order and payment status, Stripe identifiers and invoice references or links.
  • Security and technical data: IP address, approximate IP-derived location, browser or app user agent, login times, device identifiers or hashes, session and authentication-token records.
  • Support data: the content of messages and device-unlock requests sent to support.

Billing addresses and card data: our own account and checkout forms do not store a billing address or complete card details. For host-family and sponsor purchases, Stripe’s hosted checkout requests the billing details required for payment and invoicing. Stripe processes those details; our Platform retains only the order, payment, customer and invoice references needed to administer the purchase.

3. How we obtain data

We obtain data directly from users when they register, edit a profile, purchase a course, accept an invitation, complete training, manage sharing or contact support. Host families and sponsors provide an au pair’s name and email when sending an invitation. Stripe sends us payment and invoice status through its checkout and webhook services. Technical and security records are produced when the Platform is used.

4. Why we use data and our legal bases

  • Contract (GDPR Art. 6(1)(b)): creating accounts, processing purchases, assigning and delivering courses, recording progress, issuing and verifying certificates, and providing support.
  • Legal obligation (Art. 6(1)(c)): maintaining accounting, tax and other records required by law.
  • Legitimate interests (Art. 6(1)(f)): securing the Platform, preventing misuse and certificate fraud, enabling recipients to confirm that a certificate is authentic, maintaining audit trails, resolving disputes and improving reliability, after considering users’ rights.
  • Consent (Art. 6(1)(a)): an au pair’s optional sharing of earlier course history and certificates, and any future non-essential cookies or marketing introduced with consent.

5. Progress visibility, certificate verification and sharing

A host family or sponsor that purchases and assigns a course can see progress and completion information for that sponsored course as part of administering the allocation. This is separate from optional sharing. An au pair controls whether a linked account can also see training history or certificates from earlier courses that the linked account did not sponsor. The au pair can change those choices in their account.

Certificate verification: a course-completion certificate contains a QR code linked to an official verification page. The link uses a signed, non-sequential identifier rather than the certificate number as the access key. Anyone who has the certificate, QR code or verification link can open that page without signing in.

The verification page displays the recipient’s name and nationality, certificate number and issue date, course title and version, final score where applicable, completed modules and module quiz scores where applicable. It may also display lesson numbers and titles when this detail is enabled by the platform administrator. It does not display the recipient’s email address, date of birth, account identifiers or other profile information.

The verification link is designed to be difficult to guess and the page is marked so that search engines should not index it, but it is a bearer link rather than a password-protected page. A person who receives it may copy, forward, photograph or otherwise share it. An au pair should therefore share a certificate or its QR code only with intended recipients and should understand that we cannot control further sharing by those recipients.

An au pair may contact hello@aupairtraining.com to request that a verification link be revoked or replaced. Revocation prevents future access through that link but cannot retrieve copies of the certificate or information already saved or shared by another person.

6. Payments and service providers

We use service providers only as needed to operate the Platform, including hosting and infrastructure, email delivery and support, and payment processing.

Stripe: payments are handled through Stripe. Stripe may process contact and billing details, payment-method data, fraud-prevention signals and transaction information. We do not store complete card details. Stripe’s own processing and international-transfer information is explained in the Stripe Privacy Policy.

We do not currently use Google Analytics, advertising pixels or similar behavioural tracking on the Platform. If that changes, we will update this policy and obtain consent before setting non-essential tracking technologies where required.

7. International transfers

Some service providers may process data outside the European Economic Area. Where GDPR requires it, transfers are protected by an adequacy decision, Standard Contractual Clauses or another recognised safeguard.

8. Retention and account anonymisation

We keep personal data only while it is needed for the purposes described above or to meet legal, accounting, security or claims requirements. Authentication challenges and access tokens expire or are revoked. Active profile data is retained while the account is in use. Certificate and verification records may remain available for as long as the certificate must be capable of being authenticated, unless the verification link is revoked or the record no longer needs to be retained.

Host-family, sponsor and au-pair users can request account deletion from their account page. The Platform disables access and automatically removes or replaces direct profile identifiers. Learning, allocation and transaction records may remain linked to an anonymised record where needed to preserve course history, certificates, sponsor records, accounting evidence, security or legal claims. Information held by Stripe remains subject to Stripe’s and applicable legal retention requirements.

9. Your rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.

To exercise a right, email hello@aupairtraining.com. We may ask for information needed to verify your identity and normally respond within one month. The right to erasure is not absolute where data must be retained for a legal obligation or legal claims.

You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority.

10. Contact information

The JuLee Project Limited
Gregori Afxentiou 157A
2369 Agios Dometios-Nicosia
Cyprus
Email: hello@aupairtraining.com
Website: https://aupairtraining.com/

Last updated: 8 September 2026