Legal & community

Privacy Policy

Effective date: [date]

DRAFT TEMPLATE. This is a structure, not legal advice. Because you collect personal data from people in Cyprus, GDPR applies. Have it reviewed before you publish.

1. Who is responsible for your data

[Legal company name, address, contact email for privacy questions, and a data protection contact if you have one.]

2. What we collect

• Details you give in forms: name, email, phone, business name, industry, number of employees, whether your company is registered with HRDA, and your free-text answers.
• Technical data such as IP address and browser type, if you use analytics. [Say which tools, or state that you use none.]
• [Payment data is handled by your payment provider. Name it.]

3. Why we use it, and our legal basis

[For each purpose (replying to enquiries, registering you for the course, HRDA paperwork, marketing emails), state the lawful basis, for example contract, legal obligation or consent. Marketing emails need clear, separate consent.]

4. Who we share it with

[List processors, for example your form provider (Formspree), email tool, payment provider and hosting provider (Hostinger), and HRDA where required for the subsidy. Note any transfers outside the EU/EEA and the safeguard used.]

5. How long we keep it

[Retention period for each type of data.]

6. Your rights

Under GDPR you can ask to access, correct, delete, restrict or move your data, and you can object to certain uses or withdraw consent. You can also complain to the Office of the Commissioner for Personal Data Protection in Cyprus. [Add how to contact you to make a request.]

7. Cookies

[This site sets no cookies unless you add analytics or embeds. If you add them, add a consent banner and describe them here.]

8. Changes

[How you will notify changes.]