Privacy Policy

---

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you register for an account, enrol in a workshop, complete assignments, contact our support team, or otherwise interact with our platform. This may include:

• Full name and display name
• Email address
• Password (stored in encrypted form)
• Billing and payment information
• Profile details and preferences
• Messages, feedback, and support requests
• Content you submit as part of exercises or collaborative tools

1.2 Information Collected Automatically

When you use our platform, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Pages visited, features used, and time spent on the platform
• Referring URLs and exit pages
• Clickstream data and interaction logs
• Cookie identifiers and session tokens

1.3 Information from Third Parties

We may receive information about you from third-party services, such as payment processors, authentication providers, or analytics partners. We use this information only as described in this policy and only to the extent permitted by applicable agreements with those third parties.

---

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and provide access to our services
• To process enrolments, payments, and transactions
• To deliver workshop content, assignments, and interactive features
• To personalise your learning experience and track your progress
• To communicate with you about your account, updates, and support requests
• To send service-related notifications and, where you have opted in, promotional communications
• To monitor and analyse usage patterns and improve our platform
• To detect, investigate, and prevent fraudulent activity or security incidents
• To comply with legal obligations and enforce our terms

---

3. Legal Bases for Processing

We process your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contract performance: Processing necessary to provide the services you have requested or to fulfil our obligations under an agreement with you
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and maintaining security, provided those interests are not overridden by your rights
• Consent: Processing based on your explicit consent, such as for marketing communications or optional analytics
• Legal obligation: Processing required to comply with applicable laws and regulations

---

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

We use cookies and similar tracking technologies to operate and improve our platform. These include:

• Essential cookies: Required for authentication, session management, and core functionality
• Functional cookies: Used to remember your preferences and settings
• Analytics cookies: Used to understand how users interact with our platform and to measure performance
• Marketing cookies: Used, with your consent, to deliver relevant promotional content

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform. Where required by applicable law, we will request your consent before placing non-essential cookies on your device.

---

5. Sharing of Information

We do not sell your personal information. We may share your information with third parties only in the following circumstances:

• Service providers: We share data with trusted vendors who assist us in operating our platform, including hosting providers, payment processors, email delivery services, and analytics tools. These parties are contractually required to protect your data and use it only for the purposes we specify.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid legal process, such as a court order or government request.
• Protection of rights: We may disclose information when we believe it is necessary to protect the rights, property, or safety of our company, our users, or others.
• With your consent: We may share your information with additional third parties when you have given us explicit permission to do so.

---

6. International Data Transfers

Our platform operates globally and your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. Where such transfers occur, we take appropriate measures to ensure your information remains protected in accordance with this policy, including the use of standard contractual clauses or other legally recognised transfer mechanisms where required.

---

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• The duration of your account and ongoing use of our services
• Our legal obligations to retain records for specified periods
• Applicable statutes of limitation relevant to potential disputes
• Guidance from relevant regulatory authorities

When your information is no longer required, we securely delete or anonymise it.

---

8. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: The right to request a copy of the personal information we hold about you
• Correction: The right to request that we correct inaccurate or incomplete information
• Deletion: The right to request that we delete your personal information, subject to certain exceptions
• Restriction: The right to request that we restrict the processing of your information in certain circumstances
• Portability: The right to receive your information in a structured, machine-readable format and to transfer it to another service
• Objection: The right to object to processing based on legitimate interests or for direct marketing purposes
• Withdrawal of consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details provided in the Contact section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing certain requests.

---

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and staff training.

While we take security seriously and apply industry-standard practices, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password and to notify us immediately if you suspect any unauthorised access to your account.

---

10. Children's Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from individuals under this age. If we become aware that we have inadvertently collected information from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal information without appropriate consent, please contact us.

---

11. Third-Party Links and Services

Our platform may contain links to third-party websites, tools, or services that are not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the privacy practices or content of third-party sites.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by providing additional notice such as an email notification or an in-platform alert.

Your continued use of our services after any changes take effect constitutes your acceptance of the updated policy. If you do not agree with the revised policy, you should discontinue use of our services and may request deletion of your account.

---

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: