About this policy
This Cookie Policy explains how GoStudious ("we", "us", "our") uses cookies and similar technologies when you visit or use our website and learning platform at www.gostudious.com (the "Platform").
It sets out what these technologies are, why we use them, and the choices you have. Please read it alongside our Privacy Policy, which explains how we handle your personal data more generally.
By using GoStudious, you agree to the use of the strictly necessary technologies described below, which are required for the Platform to function. We do not use advertising, marketing or third-party tracking cookies.
1. What are cookies and similar technologies?
Cookies are small text files that a website places on your device (computer, tablet or phone) when you visit. They allow the website to recognise your device and remember certain information about your visit.
"Similar technologies" include browser storage methods such as local storage and session storage. These work like cookies but store information directly in your browser rather than sending it back and forth with every request.
We describe both cookies and these browser storage technologies together in this policy because they serve the same purpose: making the Platform work and remembering your preferences.
2. How we use these technologies
We keep our use of cookies and browser storage deliberately minimal. We only use technologies that are necessary to sign you in securely, keep you signed in, and remember basic preferences so the Platform works as expected.
We do not use cookies to track your activity across other websites, to build advertising profiles, or to sell your information. We do not run third-party advertising or marketing trackers on the Platform.
3. Types of cookies and storage we use
We use a small number of strictly necessary technologies. We do not use analytics, performance, advertising or targeting cookies of any kind.
Authentication and security (browser storage)
When you sign in, we store your login session securely in your browser's local storage. This keeps you signed in as you move between pages and is essential for the Platform to work. Without it, you would be signed out on every page and unable to use your account. This information is removed when you sign out.
Interface preferences (cookie)
We use a small cookie named "sidebar_state" to remember whether you have the navigation sidebar open or closed, so the layout stays the way you left it. This is a convenience preference and does not identify you.
Consent and settings (browser storage)
We store a record of the policies you have accepted, along with a small number of interface settings, in your browser's storage. This lets us remember that you have agreed to our Terms and Privacy Policy so we do not ask you again unnecessarily.
4. Legal basis for our use of cookies
United Kingdom — UK GDPR & PECR
Under the Privacy and Electronic Communications Regulations (PECR), cookies and similar technologies that are strictly necessary to provide a service you have requested do not require consent. All of the technologies described in this policy fall into that category, so we do not ask for separate cookie consent.
Where these technologies involve processing personal data (for example, your sign-in session), we do so under the UK GDPR on the basis that it is necessary to perform our contract with you — namely, to give you access to your account and the Platform.
Zimbabwe — Cyber and Data Protection Act 2021 (CDPA)
For users in Zimbabwe, any processing of personal data through these technologies is carried out in line with the Cyber and Data Protection Act 2021, on the basis that it is necessary to deliver the service you have signed in to use.
5. Your cookie choices and rights
Managing the technologies we use
Because we only use strictly necessary technologies, there is nothing optional to switch off — every item we store is needed for the Platform to work or to keep your account secure. We therefore do not provide a separate cookie preference centre. You remain in full control through your browser and by signing out.
Browser-level controls
Most browsers let you view, delete and block cookies and browser storage under Settings → Privacy and security. Please note that blocking or deleting these will sign you out and may prevent you from signing in again until they are allowed.
Your rights under UK law (UK GDPR / PECR)
If you are in the United Kingdom, you have the right to access, rectify, erase, restrict or object to our processing of your personal data, and the right to data portability. You can exercise these rights, or complain to the Information Commissioner's Office (ICO) at www.ico.org.uk, at any time.
Your rights under Zimbabwean law (CDPA 2021)
If you are in Zimbabwe, you have comparable rights under the Cyber and Data Protection Act 2021, including the right to access and correct your data and to complain to the Data Protection Authority (POTRAZ).
6. Children's privacy and cookie use
Some GoStudious accounts are used by children under the supervision of a parent, tutor, teacher or school. The technologies described in this policy are limited to what is necessary to sign a learner in and run their practice safely.
We do not use cookies or similar technologies to profile children or to serve them advertising.
United Kingdom — ICO Children's Code
For users in the United Kingdom, we design our use of these technologies in line with the ICO's Age Appropriate Design Code (the Children's Code), keeping data collection to the minimum needed to provide the service.
Zimbabwe — Children's Act (Cap. 5:06) & CDPA 2021
For users in Zimbabwe, our handling of children's data is carried out consistently with the Children's Act (Cap. 5:06) and the Cyber and Data Protection Act 2021. Our wider approach to children's data is explained in our Privacy Policy.
7. Third-party services
We use trusted service providers to operate the Platform, including secure hosting and authentication infrastructure. Where these providers set technologies in your browser, they do so only to deliver the core service — for example, to keep your sign-in session secure — and not for advertising or cross-site tracking.
We do not embed third-party advertising networks or social media tracking pixels on the Platform.
8. International data transfers
GoStudious currently operates in the United Kingdom and Zimbabwe (2026). The service providers we rely on to host the Platform and keep you signed in may process limited data outside your country.
Where data is transferred out of the United Kingdom, we rely on an adequacy decision or appropriate safeguards, such as the UK International Data Transfer Agreement or Standard Contractual Clauses. Where data is transferred out of Zimbabwe, we take steps to ensure it receives a comparable level of protection consistent with the Cyber and Data Protection Act 2021. Further detail is set out in our Privacy Policy.
9. Cookie retention periods
We keep information for no longer than it is needed:
- Your sign-in session (browser storage) lasts until you sign out. For your security, you are also signed out automatically after one hour of inactivity.
- The "sidebar_state" preference cookie lasts up to seven days before it expires on its own.
- The record of the policies you have accepted is kept for as long as your account is open, so we do not ask you to re-accept unnecessarily.
10. Cookie data security
The Platform is served over an encrypted HTTPS connection, so information stored in and sent from your browser is protected in transit. Your sign-in session is held securely in your browser and transmitted only over these encrypted connections.
None of the cookies or browser storage we use holds your password or any payment details.
11. Updates to this policy
We may update this Cookie Policy from time to time to reflect changes to the Platform or to legal requirements. When we make material changes, we will update the "Last reviewed" date at the top of this policy and, where appropriate, let you know within the Platform.
12. Contact & complaints
If you have any questions about this Cookie Policy or how we use cookies and similar technologies, please contact us:
General enquiries: support@gostudious.com
Privacy and data protection: privacy@gostudious.com
Complaints: complaints@gostudious.uk
Website: www.gostudious.com
United Kingdom — ICO
If you are in the UK and are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.
Zimbabwe — Data Protection Authority (POTRAZ)
If you are in Zimbabwe, you may raise a concern with the Data Protection Authority, the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).