Personal Information You Provide

• Contact details including name, email address, phone number, and postal address when you register or inquire about our services
• Educational background and professional experience when completing program applications
• Payment information processed securely through third-party payment processors
• Communication preferences and feedback submitted through our contact forms
• Content you create or share during educational programs and assessments

Automatically Collected Information

• Technical data including IP address, browser type, operating system, and device identifiers
• Usage analytics such as pages visited, time spent on site, and interaction patterns
• Cookies and similar technologies for website functionality and user experience enhancement
• Location data (approximate) based on IP address for service localization

Service Delivery and Administration

• Providing access to educational programs, materials, and platform features
• Processing applications, enrollments, and managing student records
• Delivering customer support and responding to inquiries
• Issuing certificates and maintaining educational achievement records
• Processing payments and managing billing for our services

Communication and Marketing

• Sending educational updates, program announcements, and service-related notifications
• Providing information about new courses and career development opportunities (with consent)
• Conducting satisfaction surveys and gathering feedback to improve our services
• Sharing industry insights and career development resources through our newsletter

Legal and Security Purposes

• Complying with legal obligations including tax reporting and record-keeping requirements
• Protecting against fraud, unauthorized access, and security threats
• Enforcing our terms of service and protecting intellectual property
• Responding to legal requests from authorities when required by law

Service Providers and Partners

• Payment processors for secure transaction handling (Stripe, PayPal) with PCI DSS compliance
• Cloud hosting providers (AWS, Google Cloud) for platform infrastructure with data protection agreements
• Email service providers for communications with encryption and security measures
• Analytics services (Google Analytics) with data minimization and anonymization controls
• Customer support tools with access limited to necessary personnel only

Legal Disclosures

We may disclose your information when required by law, court order, or government request. This includes cooperation with tax authorities, law enforcement investigations, and regulatory compliance. We will notify you of such disclosures unless legally prohibited from doing so.

Access and Portability Rights

• Right of Access: Request a copy of all personal data we hold about you, including how it's used and who it's shared with
• Data Portability: Receive your data in a structured, machine-readable format to transfer to another service provider
• Transparency: Understand exactly what information we process and why we need it

Control and Correction Rights

• Rectification: Correct inaccurate or incomplete personal information in our systems
• Erasure: Request deletion of your data when it's no longer necessary or you withdraw consent
• Restriction: Limit how we process your data while disputes are resolved or accuracy is verified
• Objection: Object to processing based on legitimate interests or for direct marketing purposes

How to Make Requests

To exercise any of these rights, email us at [email protected] with "Privacy Request" in the subject line. Include your full name, contact details, and specific request details. We may ask for identity verification to protect against unauthorized access to your information.

If you're unsatisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ireland at [email protected] or through their website at dataprotection.ie.

Transfer Safeguards

• Standard Contractual Clauses approved by the European Commission for data transfers
• Adequacy decisions recognizing equivalent protection in destination countries
• Certification schemes and codes of conduct that ensure appropriate data protection
• Binding corporate rules for multinational service providers with consistent global standards

Technical Security Measures

• End-to-end encryption for data in transit using TLS 1.3 protocols
• AES-256 encryption for data at rest in our databases and storage systems
• Multi-factor authentication for all administrative access to systems
• Regular security audits and penetration testing by independent security firms
• Automated backup systems with encrypted off-site storage and regular recovery testing

Data Retention Policies

We retain personal data only as long as necessary for the purposes for which it was collected or as required by law. Student records and certificates are kept for seven years to support ongoing educational and career verification needs. Marketing communications data is retained until you unsubscribe or request deletion. Technical logs and analytics data are automatically deleted after 26 months.

Breach Response

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the breach, as required by GDPR. Our incident response team follows established procedures to contain breaches, assess their impact, and implement corrective measures to prevent recurrence.

Managing Cookie Preferences

You can manage your cookie preferences through your browser settings or our cookie preference center. Disabling certain cookies may limit some website functionality, but will not prevent you from accessing our core educational content and services. We respect Do Not Track signals where technically feasible.