1. Who We Are
FEthink provides digital products, tools, surveys, and educational resources focused on professional and AI-enabled work.
For the purposes of UK data protection law, FEthink acts as the data controller.
Contact:
Email: help@fethink.co.uk
FEthink services are primarily intended for professionals. Where services are used in educational contexts, organisations are responsible for ensuring appropriate safeguards are in place when involving learners.
2. What Data We Collect
We may collect and process the following personal data:
- Name and contact details (e.g. email address)
- Transaction data (e.g. purchases via ecommerce platforms)
- Survey and poll responses
- Usage data from AI tools and website interaction
- Feedback and research data (e.g. educational insights).
We only collect data that is necessary and relevant to our services, in line with UK GDPR principles.
While we work with educational organisations and professionals, we do not knowingly collect personal data directly from children without appropriate consent.
We do not intentionally collect or process special category data (such as information relating to health, ethnicity, or safeguarding) unless explicitly required and with appropriate safeguards.
We instruct users not to input such data into AI tools or surveys unless specifically authorised.
3. How We Use Your Data
We use your data to:
- provide digital products and services
- deliver purchases and downloads
- send email communications and updates
- conduct research into professional and educational practices
- improve our tools, including AI-based services
- analyse survey and poll results (usually in aggregated or anonymised form).
4. Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Consent – for email marketing, surveys, and optional data collection
- Contract – to deliver purchased products or services
- Legitimate interests – to improve services, analyse usage, develop tools and conduct research, as long as this does not override the user’s rights.
We only process personal data where a valid lawful basis applies. Where we rely on legitimate interests, we ensure that this processing is necessary and balanced against your rights and freedoms.
FEthink does not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.
5. Ecommerce, Tools and Third Parties
We may use third-party platforms to deliver services, for example:
- ecommerce platforms (e.g. Payhip for product purchases)
- email marketing providers (e.g. Mailerlite).
- survey and poll tools
- AI-based tools and applications (e.g. OpenAI/ ChatGPT).
These providers act as data processors and are required to comply with UK legislation on data protection and privacy.
6. Educational Research and Surveys
Where data is collected for research purposes:
- it is used to identify trends and insights
- results are typically anonymised or aggregated
- no individual is identifiable in published findings
- contracted work is undertaken in accordance with client data protection policies
- the basis of our research approach is grounded in the British Educational Research Association (BERA) guidelines.
7. How We Store and Protect Data
We take appropriate technical and organisational measures to protect personal data, including:
- secure platforms and hosting
- access controls
- data minimisation
Data is retained only for the purposes for which it was collected. As a general guide:
- account and transaction data is retained for up to 6 years for legal and financial compliance
- email subscriber data is retained until the user unsubscribes or requests deletion
- survey and research data is retained in anonymised form wherever possible, with personal data deleted 6 months after the work/ research is completed/ published, in accordance with standard UK academic practice.
8. International Data Transfers and AI Processing
Some of the services used by FEthink, including AI-powered tools, may involve the processing of data outside the United Kingdom or European Economic Area (EEA), including in countries such as the United States.
Where personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with UK data protection law. These may include:
- the use of Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office
- reliance on providers that implement appropriate technical and organisational safeguards
- contractual obligations to protect personal data.
Where AI tools are used to process user inputs (for example, prompts or task-related content), this data may be transmitted to third-party providers for processing. Users are advised not to submit sensitive personal data (e.g. identifiable personal information, confidential organisational data) into AI tools unless appropriate safeguards are in place.
We take steps to ensure that:
- personal data is minimised wherever possible
- sensitive or identifiable data is not intentionally submitted for AI processing unless necessary
- users are explicitly instructed not to submit personal data into AI engines when they are engaged in AI-powered tasks
- processing is carried out in accordance with applicable UK data protection requirements.
Where users choose to input personal data into AI tools, they do so at their own discretion. FEthink provides guidance to minimise risk but cannot control the content submitted by users. We do not use personal data to train AI models unless explicitly stated.
8. Your Rights
Under UK GDPR, you have the right to:
- access your personal data
- correct inaccurate data
- request deletion (the “right to be forgotten”)
- restrict or object to processing
- request data portability
- withdraw consent at any time
You also have the right to be informed about how your data is used.
9. Complaints and Resolution Process
If you have concerns about how your data is used, you should first contact:
help@fethink.co.uk.
We will aim to respond within a reasonable timeframe and resolve the issue.
If you remain dissatisfied, you have the right to lodge a complaint with the UK Information Commissioner's Office.
Website: https://ico.org.uk
This is your legal right under UK data protection law.
In the event of a personal data breach, we will take appropriate steps in line with UK GDPR, including notifying affected individuals and the Information Commissioner’s Office where required.
10. Changes to This Policy
We may update this privacy notice from time to time. Our available policy is always the latest version.
Last updated: 30th March 2026
