Privacy policy

Last updated: 6 October 2026

This policy explains what personal information VPage collects, why we collect it and what your rights are. We have tried to keep it short and clear.

Who we are

MKD Limited, [Company address], company number [Company number], is responsible for the personal information described in this policy. You can ask us about privacy through our contact page.

Schools, studios and instructors use VPage to run their classes. For information about students and families that a school enters or collects through VPage, the school decides how it is used, and we act on the school's behalf. A school's own privacy notice covers that use.

What we collect

  • Account details: your name, email address, a scrambled form of your password, your passkeys and your two-factor settings.
  • School details: the school name and what the school adds, such as classes, prices, and instructor names and bios. In VPage, any business or person that teaches classes is called a school.
  • Family and student details: a child's name, date of birth, level (recorded as a belt colour) and notes, and which classes they join.
  • Billing details: your Stripe customer reference, your subscription status, your invoices, and the card brand and last four digits. Stripe collects and stores your full card number. We never see it.
  • Messages: what you send us through the contact form.
  • Technical details: your IP address, stored with your login session and used to limit repeated attempts, and the cookies listed below.

Children's information

Parents and guardians give us information about their children. We use it only so that the child can take part in classes and so that the family can be billed. Please only add information about children you are responsible for.

How we use it, and why

  • To provide VPage and run accounts, classes and billing. This is needed to carry out our contract with you.
  • To keep VPage secure and to prevent misuse. This is in our legitimate interest in running a safe service.
  • To answer your messages. This is in our legitimate interest in replying, or is a step you ask for before a contract.
  • To meet legal duties, such as keeping accounting records.

We do not sell personal information, and we do not use it for advertising.

Who we share it with

  • The school a student belongs to. School owners can see their own students and families.
  • Stripe, which processes payments.
  • Google, which provides Google Analytics, but only if you accept analytics cookies.
  • Companies that help us run VPage, such as hosting and email delivery. They may only use the information to provide their service to us.
  • Authorities, where the law requires it.

We do not share a family's information with other schools.

Moving information outside the UK

Some of our providers, including Stripe and Google, may process information outside the UK. When they do, we make sure the law's protections still apply, for example through approved contract terms.

How long we keep it

  • Account and class information: while your account is open.
  • Class enrolment history: kept so that school records stay accurate.
  • Billing records: for as long as the law requires, usually six years.
  • Contact messages: for as long as we need to deal with them.

When an account is closed, we delete or anonymise information we no longer need, except records the law requires us to keep.

Your rights

You can ask us to:

  • give you a copy of your personal information;
  • correct information that is wrong;
  • delete information we no longer need;
  • restrict or stop how we use your information; and
  • give you your information in a format you can move.

To use any of these rights, send us a message through our contact page and choose "Privacy question" as the topic. If your information is in a school's control, we may pass your request to the school. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

VPage uses a few essential cookies to work, and one cookie to remember your colour choice. With your permission, we also use Google Analytics to see how the public pages are used, so that we can improve them. When you first visit, a banner asks whether you accept analytics cookies. If you do not accept, no analytics cookies are set and nothing is sent to Google.

These essential cookies are always on:

  • vpage-session: keeps you logged in to the app.
  • XSRF-TOKEN: protects forms from forgery.
  • appearance: remembers whether you chose light, dark or system colours. It is also kept in your browser storage.
  • sidebar_state: remembers whether the sidebar is open in the app.
  • cc_cookie: remembers your choice in the cookie banner. It lasts six months.

These analytics cookies are set only if you accept them:

  • _ga and _ga_*: set by Google Analytics to tell visits and visitors apart. They last up to two years. Google receives your IP address and details of your device and browser.

You can change your choice at any time with the Cookie settings button at the bottom of every page. If you turn analytics off, we delete the Google Analytics cookies from your browser. The public pages of this website do not send you any cookies when you visit. The banner saves your choice in your browser, and the theme cookie is saved only when you change the theme.

Keeping information safe

We serve VPage over HTTPS and store passwords in a scrambled form. You can sign in with a passkey and turn on two-factor sign in. No system is perfectly safe, so please use a strong password or a passkey.

Changes to this policy

We may update this policy from time to time, and when we do we will change the date at the top. If a change is important, we will tell you.

Contact us

If you have a question about privacy, please send it through our contact page.