Privacy Policy

MUN Group Ltd ("we", "us", "our") is the data controller responsible for your personal data collected through the MyUniversityNotes platform at myuniversitynotes.com ("Platform").

We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what data we collect, how we use it, and your rights.

We may collect and process the following categories of personal data:

We process personal data for the following purposes:

• Account management – to create and maintain user accounts
• Content hosting & delivery – to store, display and distribute notes
• Payment processing – to facilitate purchases and seller payouts
• Platform security – to prevent fraud and misuse
• Communication – to respond to enquiries and send service updates
• Legal compliance – to meet tax, accounting and regulatory obligations

Under UK GDPR, we rely on the following lawful bases:

• Contract – to provide the Platform services you request
• Legitimate interests – to operate, secure and improve the Platform
• Legal obligation – for tax, accounting and compliance requirements
• Consent – where you opt in to marketing communications

You may withdraw consent for marketing at any time.

We use third-party service providers to operate the Platform, including:

• Stripe – payment processing
• Hosting providers – website and database infrastructure
• Email providers – transactional communications

These providers act as data processors and process personal data on our behalf under contractual safeguards.

Stripe's privacy policy is available at: https://stripe.com/privacy

We do not store your full payment card details.

We retain personal data only as long as necessary:

• Account data: for as long as your account remains active
• Transaction data: at least 6 years for tax and accounting compliance
• Uploaded content: retained in accordance with our contractual rights and legal obligations.

You may request deletion of your account, subject to legal obligations.

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted connections (HTTPS)
• Secure hosting infrastructure
• Access controls
• Secure password storage

However, no online platform can guarantee absolute security.

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (where applicable)
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent (where applicable)

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

To exercise your rights, contact us using the details below.

We use cookies and similar technologies to:

• Maintain user sessions
• Improve user experience
• Analyse platform usage

You may control cookies through your browser settings.