Effective date: December 31, 2025

VYKN is committed to protecting personal data and respecting privacy rights. This Privacy Policy explains how VYKN collects, uses, discloses, stores, and protects personal data when individuals access our website, learning platforms, or related services.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. About VYKN

VYKN is a regulatory technology and learning company that designs and delivers digital platforms, content, and services focused on compliance, risk, and financial crime education.

For questions relating to this Privacy Policy or our data practices, please contact: Email: contact@vykn.com Website: www.vykn.com

2. Scope of This Policy

This Privacy Policy applies to:

· Visitors to the VYKN website

· Users of VYKN learning platforms, including StudyAML

· Individuals who contact VYKN or engage with our services

· Learners accessing training through an employer or institutional client

This Policy does not apply to third party websites that may be linked from our site.

3. Roles Under Data Protection Law

Depending on the context:

· VYKN acts as a data controller for website visitors, marketing communications, and direct platform users

· VYKN acts as a data processor when providing learning platforms and services on behalf of institutional or corporate clients

Where VYKN acts as a processor, personal data is processed solely in accordance with documented client instructions.

4. Personal Data We Collect

4.1 Information You Provide

· Name

· Email address

· Employer or organization

· Job title

· Contact details

· Information submitted through forms, inquiries, or account registration

4.2 Information Collected Automatically

When you visit our website, we may collect:

· IP address

· Browser type and version

· Device and operating system information

· Pages viewed and time spent

· Referring website

· Cookie and tracking data

4.3 Learning Platform and Training Data

When you access a VYKN learning platform, we may collect:

· User identification details

· Course enrollment and completion records

· Assessment and quiz results

· Time spent on modules and learning interactions

· Certification and audit records

5. How We Use Personal Data

Personal data is used for the following purposes:

· Operating and maintaining our website and platforms

· Providing access to learning content and services

· Communicating with users and responding to inquiries

· Generating compliance, audit, and management information reports

· Improving platform functionality and learning outcomes

· Meeting legal, regulatory, and contractual obligations

· Protecting the security and integrity of our systems

VYKN does not sell personal data.

6. Legal Basis for Processing

Where required by applicable law, VYKN processes personal data based on one or more of the following legal grounds:

· Consent

· Performance of a contract

· Compliance with legal obligations

· Legitimate business interests, provided those interests do not override individual rights

7. Cookies and Tracking Technologies

VYKN uses cookies and similar technologies to support website functionality and performance.

Types of Cookies Used

· Strictly necessary cookies for security and core functionality

· Performance and analytics cookies to understand usage and improve services

· Functional cookies to enhance user experience

You may manage or disable cookies through your browser settings. Disabling cookies may limit website functionality.

8. Learning Data and Employer Access

Where learning services are provided through an employer or institutional client:

· That organization may access learner data for compliance, reporting, and oversight purposes

· Learner assessment data is not used for automated decision making that produces legal or similarly significant effects

VYKN processes such data strictly in line with client agreements and applicable law.

9. Data Sharing and Disclosure

Personal data may be shared only in the following circumstances:

· With trusted service providers supporting platform and website operations

· With professional advisers such as legal, accounting, or compliance consultants

· Where required by law, regulation, or lawful authority request

· In connection with corporate transactions such as mergers or restructurings

All third parties are subject to confidentiality and data protection obligations.

10. International Data Transfers

Personal data may be transferred to and processed in jurisdictions outside your country of residence. Where this occurs, VYKN implements appropriate safeguards in accordance with applicable data protection laws.

11. Data Retention

Personal data is retained only for as long as necessary to:

· Fulfill the purposes described in this Policy

· Meet legal, regulatory, contractual, and audit requirements

When no longer required, data is securely deleted or anonymized.

12. Data Security

VYKN implements appropriate technical and organizational measures to protect personal data, including access controls, encryption, monitoring, and secure storage.

While no system can be guaranteed to be completely secure, VYKN maintains a strong commitment to data protection and continuous improvement of security practices.

13. GDPR and UK GDPR Rights

Individuals located in the European Economic Area or the United Kingdom have the following rights, subject to applicable law:

· Right of access

· Right to rectification

· Right to erasure

· Right to restrict processing

· Right to data portability

· Right to object to processing

· Right to withdraw consent

You also have the right to lodge a complaint with a supervisory authority. Requests may be submitted to contact@vykn.com. Identity verification may be required.

14. Data Processing for Clients

Where VYKN acts as a data processor for clients:

· Personal data is processed only on documented instructions

· Confidentiality obligations apply to all authorized personnel

· Appropriate security measures are maintained

· Subprocessors may be engaged under equivalent data protection obligations

· Clients are notified without undue delay of personal data breaches

· Personal data is returned or deleted at service termination, subject to legal requirements

15. Children’s Privacy

VYKN services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

16. Third Party Links

The website may contain links to third party sites. VYKN is not responsible for the privacy practices or content of external websites.

17. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect legal or operational changes. Updates will be posted on this page with a revised effective date.

18. Contact Information

For questions or concerns regarding this Privacy Policy or personal data processing, contact:

VYKN Email: contact@vykn.com

· A Records Retention Policy

· An Information Security Statement

· A Breach Response Notice template

Say the word and we will finish the stack properly.