Privacy Policy (GDPR Compliant)

We value your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy outlines how we collect, use, store, and safeguard your information.

1. Data Collection

We may collect personal information when you:

• Register for our training
• Subscribe to our newsletter
• Contact us for inquiries
• Purchase a course or service

The types of data collected may include:

• Name, email, phone number, and address
• Payment details (processed securely through third-party providers)
• Professional or demographic information (if applicable)

2. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide your information for a specific purpose
• Contractual Necessity: To fulfill our obligations when you register for a course or service
• Legal Obligation: Compliance with applicable laws and regulations
• Legitimate Interest: To improve our services and user experience

3. Use of Information

Your personal data is used for:

• Managing your enrollment and participation in our training programs
• Providing course-related updates, materials, and customer support
• Sending newsletters and promotional offers (only with your consent)
• Ensuring the security of our website and services

4. Data Protection & Security

We implement strict security measures to prevent unauthorized access, loss, or misuse of your personal data. Your data is stored securely, and access is restricted to authorized personnel only.

5. Data Sharing & Third Parties

We do not sell your personal data. However, we may share it with trusted third-party service providers who assist in processing payments, course delivery, or website hosting, always ensuring GDPR compliance.

6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure adequate safeguards are in place to protect your data, in compliance with GDPR requirements.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the right to:
- Access your personal data and request a copy
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data (“right to be forgotten”)
- Object to processing based on legitimate interest
- Withdraw consent for marketing communications at any time
- Request data portability to transfer your information to another provider

To exercise your rights, please contact us at sanela@theinnerartsacademy.com.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law.

9. Updates to This Policy

We may update this Privacy Policy periodically. Any significant changes will be communicated through our website or via email.

For any questions or to exercise your data rights, contact us at:
sanela@theinnerartsacademy.com