This policy is still a draft. The final version will be published here after legal review, and any significant change will be announced.
Version: 2026-11-draft
What we collect
What you give us, and what is created as you use the site:
- Account: name, email, optional mobile number, language. Passwords are stored only in hashed form.
- Learning: enrolments, lesson progress, quiz answers and your own notes (notes are visible only to you).
- Payments: order and payment records. Card and mobile-banking details stay with the payment provider; we do not store them.
- Forms: what you write in the contact, newsletter, live registration, waitlist, scorecard, Founder Mastery and scholarship forms.
- Technical: IP address and browser type, for security and to prevent abuse.
Why we use it
- To run your account and give you access to what you have bought.
- To confirm payments and issue receipts.
- To answer your questions, registrations and applications.
- If you agree, to send news of new programs and live sessions.
- To keep the site secure and prevent abuse.
Consent and withdrawing it
Marketing email, and passing your details to our customer-relationship system (SUFI GROUP's Command Center), happen only with your separate, freely given consent. Consent boxes are never ticked in advance.
We record when each consent was given and under which policy version. You can withdraw it at any time through the link in any email or by writing to us; this does not affect what was done before.
Who receives it
We do not sell your information. It is processed only by the services needed to run the academy:
- Payment providers (to complete payments).
- Email and messaging services (to send receipts, reminders and news you asked for).
- Video hosting (to play lessons).
- SUFI GROUP's Command Center — only with your consent.
How long we keep it
Account and learning records are kept while your account is active. Payment records are kept for as long as the law requires. Application and form details are kept only as long as they are needed.
The exact retention period for each kind of record will be stated here after legal review.
Your rights
You can ask at any time to:
- receive a copy (export) of the information we hold about you;
- correct anything that is wrong;
- delete your information, except what we are legally required to keep (such as payment records);
- stop marketing messages.
How to make a request
Choose “My data” on the contact page and write to us. We will first confirm it is you, so nobody else can obtain your information.
Young people
If you are under 18, please have a parent or guardian's permission before creating an account or paying.
Security
Data travels over encrypted connections, access rules are enforced on every row of the database, and each team member sees only what their role needs.