Effective Date: January 1, 2026
We are committed to protecting the rights of individuals under the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and what rights you have regarding your personal data.
We process your personal data based on the following legal grounds: performance of contract when you enroll in our programs, legitimate interests for improving our services and communication, consent for marketing communications, and legal obligation where required by law.
You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.
If your personal data is inaccurate or incomplete, you have the right to request correction. We will update your information promptly upon verification.
You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes collected or if you withdraw consent.
You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, machine-readable format and transmit it to another controller where technically feasible.
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
We do not engage in automated decision-making or profiling that produces legal effects or significantly affects you.
For questions about our GDPR compliance or to exercise your rights, contact our data protection representative at [email protected].
When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with GDPR requirements.
Where we process your data based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, typically for the duration of your program enrollment plus seven years for financial records, or as required by applicable law.
To exercise any of your GDPR rights, send a request to [email protected]. We will verify your identity and respond within one month. In complex cases, we may extend this period by two additional months with notification.