Privacy Policy
Last updated: 15 June 2026
This is a template document provided for general guidance and is pending review by qualified legal counsel. It does not yet constitute legally binding terms. Please consult a lawyer before relying on it.
Tarkur ("Tarkur", "we", "us") operates an online course marketplace based in Estonia and serving learners and course creators across the European Union. This policy explains what personal data we collect, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Who is the data controller
Tarkur is the data controller for account, billing, and platform-usage data. For data tied to a specific course or school, the course creator (the operator of that school) acts as an independent controller for their learner relationships. We act as a processor on their behalf for that course-specific data.
What data we collect
We collect the account details you provide (name, email address, and password credentials handled by our authentication provider), the schools and courses you create or enrol in, your learning progress, and the payment metadata required to process purchases. We also collect technical data such as IP address, device and browser information, and pages visited, in order to operate and secure the service.
How we use your data
We process your data to provide and maintain your account, deliver purchased courses, process payments and platform fees, issue certificates, communicate service and security notices, comply with legal obligations, and improve the platform. Our legal bases are performance of a contract, our legitimate interests in running a secure marketplace, your consent where required, and compliance with legal obligations.
Sharing and processors
We share data with sub-processors who help us run the service, including our hosting and database provider, our payment processor, our email-delivery provider, and our analytics and error-monitoring tools. Each is bound by a data-processing agreement. We do not sell your personal data. Course creators receive the enrolment and progress data of learners in their own schools.
International transfers and retention
Your data is primarily stored within the European Economic Area. Where a sub-processor transfers data outside the EEA, that transfer is protected by Standard Contractual Clauses or an equivalent safeguard. We retain account data for as long as your account is active and for a limited period afterwards to meet accounting and legal-retention obligations, after which it is deleted or anonymised.
Your rights and contact
Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. You may withdraw consent at any time and lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). To exercise any right, or to ask about cookies (see our cookie usage below), contact us at privacy@tarkur.com.
Cookies
We use strictly necessary cookies to keep you signed in and to remember your language preference, and a limited set of analytics cookies to understand how the platform is used. You can control non-essential cookies through your browser settings; disabling necessary cookies may break sign-in and other core features.