Privacy Policy

Our Commitment to Privacy

StrategyWorks Academy is committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, and protect your information when you use our website and services.

This policy applies to all personal data we process through our website, training programs, and related services. Please read this policy carefully to understand our practices regarding your personal data.

Information We Collect

Personal Information You Provide

We collect the following types of personal data when you interact with our services:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Job title, company, industry, experience level
• Educational Background: Academic qualifications, previous training
• Program Information: Course enrollments, assessments, progress data
• Communication Data: Messages sent through contact forms, support requests
• Payment Information: Billing details for course payments (processed securely)

Information Collected Automatically

• Usage Data: Pages visited, time spent, click patterns, referral sources
• Technical Data: IP address, browser type, device information, operating system
• Cookie Data: Preferences, session information, analytics data

How We Use Your Information

We process your personal data for the following purposes:

Legal Basis for Processing

We process your data based on the following legal grounds under GDPR:

• Contract: To provide requested services and fulfill our obligations
• Consent: For marketing communications and optional features
• Legitimate Interest: For business operations, security, and improvement
• Legal Obligation: For tax, accounting, and regulatory compliance

Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

Data Security

We implement comprehensive security measures to protect your personal data:

• Encryption: All data transmitted and stored is encrypted using industry standards
• Access Controls: Limited access on a need-to-know basis with multi-factor authentication
• Security Monitoring: Continuous monitoring for unauthorized access or breaches
• Regular Audits: Periodic security assessments and vulnerability testing
• Staff Training: Regular privacy and security training for all personnel
• Incident Response: Established procedures for data breach notification and response

Breach Notification: In the unlikely event of a data breach, we will notify affected individuals and relevant authorities within 72 hours as required by GDPR.

Data Retention

We retain your personal data only for as long as necessary:

• Contact Form Data: 3 years from last contact
• Student Records: 7 years from course completion (educational requirements)
• Financial Records: 7 years (tax and legal requirements)
• Marketing Data: Until consent is withdrawn or 3 years of inactivity
• Website Analytics: 26 months (Google Analytics default)
• Security Logs: 1 year for monitoring and investigation purposes

Your Rights

Under GDPR and Cyprus data protection law, you have the following rights:

To exercise any of these rights, please contact us using the information below. We will respond within one month of receiving your request.

International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data internationally, we ensure appropriate safeguards are in place:

• European Commission adequacy decisions
• Standard contractual clauses approved by the European Commission
• Binding corporate rules for multinational service providers
• Certification schemes recognized under GDPR

Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we may also send you an email notification.

Contact Information

If you have questions about this privacy policy or wish to exercise your data protection rights, please contact us:

Supervisory Authority: If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection or your local data protection authority.