GDPR Privacy Policy

Last updated: June 30, 2025

This Privacy Policy describes how Sabundelor (referred to as "we," "us," or "our") collects, uses, stores, and protects personal data in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR). By accessing or using our services at sabundelor.biz, you acknowledge that you have read and understood this policy.

1. Data Controller

Sabundelor acts as the data controller for personal data collected through this website and its associated services. If you have questions or concerns regarding the processing of your personal data, you may contact us at:

2. Personal Data We Collect

We collect personal data only to the extent necessary to provide our services. The categories of personal data we may collect include:

• Identity data: name, username, or similar identifiers
• Contact data: email address, phone number, and postal address
• Account data: login credentials, profile preferences, and settings
• Usage data: information about how you interact with our platform, including pages visited, features used, and time spent
• Technical data: IP address, browser type and version, device type, operating system, and referring URLs
• Communication data: messages you send us through contact forms, email, or support channels
• Payment data: billing information processed securely through third-party payment processors; we do not store full card details

3. How We Collect Personal Data

We collect personal data through the following means:

• Direct interactions when you register an account, make a purchase, submit a form, or contact us
• Automated technologies such as cookies, server logs, and analytics tools as you navigate our platform
• Third-party sources such as analytics providers, payment processors, and authentication services

4. Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so. The legal bases we rely upon include:

• Contractual necessity: processing required to provide the services you have requested or to fulfil a contract with you
• Legitimate interests: processing that serves our reasonable business interests, such as improving our services, preventing fraud, and ensuring platform security, provided such interests are not overridden by your rights
• Legal obligation: processing necessary to comply with applicable laws and regulations
• Consent: where you have given clear, informed, and freely given consent to specific processing activities, including the use of non-essential cookies or receipt of marketing communications

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Creating and managing your account and providing access to our educational platform
• Processing payments and fulfilling your orders or subscriptions
• Delivering course content, updates, and service-related communications
• Responding to your inquiries, feedback, and support requests
• Improving and personalising your experience on our platform
• Monitoring platform performance, detecting errors, and ensuring security
• Complying with legal obligations and enforcing our terms
• Sending marketing communications where you have provided consent or where we have a legitimate interest, with a clear option to opt out at any time

6. Cookies and Tracking Technologies

6.1 Types of Cookies Used

We use cookies and similar technologies to operate and improve our platform. These include:

• Strictly necessary cookies: essential for the platform to function, including session management and security
• Performance cookies: help us understand how visitors interact with our site by collecting anonymous usage statistics
• Functional cookies: remember your preferences and personalise your experience
• Marketing cookies: used to deliver relevant content and, where applicable, advertising; these require your explicit consent

6.2 Managing Cookies

You may manage or withdraw your consent to non-essential cookies at any time through your browser settings or our cookie preference tool. Disabling certain cookies may affect the functionality of some features of our platform.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share your personal data with third parties only in the following circumstances:

• Service providers: trusted third parties who assist us in operating our platform, processing payments, delivering email communications, or analysing usage data, bound by contractual data processing agreements
• Legal requirements: where disclosure is required by law, court order, or regulatory authority
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, and you will be notified in advance
• Protection of rights: where disclosure is necessary to protect the rights, property, or safety of Sabundelor, our users, or the public

8. International Data Transfers

Where your personal data is transferred to or processed in countries outside your region, we ensure that appropriate safeguards are in place. These safeguards may include standard contractual clauses approved by relevant data protection authorities, adequacy decisions, or other legally recognised transfer mechanisms. You may request information about the specific safeguards applicable to your data by contacting us.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. The criteria used to determine retention periods include:

• The nature and sensitivity of the data
• The purposes for which it is processed and whether those purposes can be achieved by other means
• Applicable legal, regulatory, or contractual requirements

When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention procedures.

10. Your Rights Under GDPR

Where GDPR applies to the processing of your personal data, you have the following rights:

• Right of access: you may request a copy of the personal data we hold about you
• Right to rectification: you may request correction of inaccurate or incomplete personal data
• Right to erasure: you may request deletion of your personal data where there is no longer a lawful basis for us to retain it
• Right to restriction of processing: you may request that we limit processing of your data in certain circumstances
• Right to data portability: you may request a copy of your personal data in a structured, machine-readable format for transfer to another service
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority responsible for data protection in your jurisdiction

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law, generally within 30 days. We may need to verify your identity before processing your request.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption of data in transit, access controls, regular security assessments, and staff training. While we take reasonable steps to secure your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected personal data from a minor, please contact us immediately and we will take steps to delete that information as promptly as possible.

13. Third-Party Links

Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you access, as we have no control over and accept no responsibility for their content or privacy practices.

14. Automated Decision-Making and Profiling

We do not make decisions about you solely based on automated processing, including profiling, that produce legal or similarly significant effects. Where any automated processing is used to personalise your experience, it does not result in decisions that materially affect your rights or interests without human review.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acknowledgment of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us: