Privacy Policy

1. Controller

The controller for personal data processed via this site is <COMPANY_LEGAL_NAME>, <COMPANY_ADDRESS>, VAT <COMPANY_VAT>. Contact: contact form or privacy@<DOMAIN>.

2. What we collect

• Account data: email, name, password (hashed by NextAuth) or OAuth identifier.
• Purchase data: billing details, VAT ID, country, invoice records.
• Learning data: lesson completion progress, quiz results, certificate metadata.
• Technical data: IP address, browser type, session cookies (essential only by default).
• Communications: messages submitted via contact or enterprise forms.

3. Legal basis (GDPR Art. 6)

• Contract performance — providing the courses you purchased.
• Legal obligation — VAT invoicing, accounting records.
• Legitimate interest — preventing fraud, securing the platform, contacting leads about a request they submitted.
• Consent — non-essential cookies, marketing emails.

4. Processors

• Stripe (payments)
• Resend (transactional email)
• Fakturownia (VAT invoicing)
• Notion (B2B lead tracking)
• Hosting provider (Coolify / VPS in <DATACENTER_LOCATION>)
• YouTube (video playback embed)

Each processor operates under a Data Processing Agreement. Some processing involves transfers outside the EEA under Standard Contractual Clauses.

5. Retention

Account and learning data: kept while your account is active and for up to <RETENTION_MONTHS> months afterwards. Invoicing records: retained as required by tax law (typically 5 years).

6. Your rights (GDPR Art. 15–22)

You may request access, rectification, erasure, restriction, portability, or object to processing. Email privacy@<DOMAIN>. You also have the right to lodge a complaint with your national data protection authority.

7. Cookies

We use essential cookies for authentication and security by default. Non-essential cookies (analytics, marketing) are loaded only with consent. See our Cookie Notice.

8. Changes

We will notify registered users by email of material changes to this Policy.