Privacy Policy

1About This Policy

This policy applies to our website at https://regulab.academy and describes how we collect and process your personal data. For the purposes of data protection law, Regulab Academy is the controller responsible for your information.

2Data We Collect

We collect personal data in the following categories:

• Account Registration: When you create an account, we collect your name, email address, password, and any other information you voluntarily provide during the registration process.
• Communication: If you contact us, we retain your email address, message content, and any attachments you send.
• Comments and Feedback: When you leave comments on our site, we collect your name, email address, website (if provided), IP address, and comment content.
• Technical and Usage Data: We automatically collect information about your device, browser, IP address, and how you interact with our website to improve functionality and security.
• Images: If you upload images, we store the files. Please note that images may contain embedded location data (EXIF GPS); you are responsible for removing sensitive data before uploading.
• Authentication: When you log in, we collect and temporarily store your login credentials to verify your identity.

3How We Use Your Data

We process your personal data for the following purposes:

• Providing and administering your account and access to our courses
• Responding to your inquiries and providing customer support
• Sending administrative messages and service updates
• Detecting and preventing fraudulent activity and security threats
• Complying with legal obligations
• Improving our website functionality and user experience
• Conducting spam detection on comments

4Legal Basis for Processing

Under the GDPR, we process your personal data only where a lawful basis under Article 6 applies, including:

• Contractual Necessity (Article 6(1)(b)): Processing that is necessary for the performance of a contract with you, or to take steps at your request before entering into such a contract, including providing our services and administering your account.
• Legal Obligation (Article 6(1)(c)): Processing that is necessary for compliance with legal obligations to which we are subject under applicable laws and regulatory frameworks.
• Legitimate Interests (Article 6(1)(f)): Processing that is necessary for the purposes of our legitimate interests, such as fraud prevention, security, website functionality, and service improvement, in each case only where those interests are not overridden by your interests or fundamental rights and freedoms, as assessed under Article 6(1)(f).
• Consent (Articles 6(1)(a) and 7): Processing based on your freely given, specific, informed and unambiguous consent for clearly defined purposes, where you choose to provide such consent and retain the right to withdraw it in accordance with Article 7.

We rely on these legal bases only to the extent necessary for the purposes described above and as permitted by the GDPR.

5Cookies and Similar Technologies

Cookies are small files placed on your device when you visit a website. Our website uses cookies to make the site work, to remember your choices and, only if you agree, to understand how the site is used so that we can improve it. We do not use advertising or targeting cookies.

5.1 Your choices

When you first visit the site, a cookie banner asks for your choice:

• Necessary: always on. These cookies are required to run the site, for example to keep you signed in and to process payments. They do not need your consent.
• Analytics: off unless you switch it on. It lets us measure how the site is used.

You can select Accept all, Reject all or Save my choices. You can change or withdraw your choice at any time using the “Cookie settings” link in the footer of every page, or the button below.

Open cookie settings

5.2 Cookies we set

5.3 Payment cookies

When you pay for a course, Stripe may set the cookies below to process the payment and help prevent fraud. If you pay with PayPal, PayPal sets its own cookies, which are described in PayPal’s own cookie statement.

5.4 Analytics

If you switch on Analytics, we use Jetpack Stats, a service provided by Automattic Inc., to collect and analyse usage information, such as which pages are visited. This helps us improve the site and our courses. The service is not loaded unless you accept Analytics. The cookies and similar technologies it uses are described in Automattic’s cookie policy.

5.5 Your browser

You can also enable or disable cookies in your browser settings, though some website features, such as signing in and paying, will not work without strictly necessary cookies. Instructions for the main browsers: Google Chrome, Microsoft Edge, Safari (macOS), Safari (iOS) and Mozilla Firefox.

6Third-Party Services and Spam Detection

Our website may contain embedded content such as videos, images, and articles from external websites. These third-party services operate independently and may collect your data, use cookies, deploy tracking technologies, and monitor your interaction with their content. If you are logged into an external service, they may link this activity to your account. We recommend reviewing the privacy policies of any third-party services before using them.

We use the following service providers to run the site:

Gravatar: When you leave a comment, an anonymised string created from your email address (also called a hash) may be sent to the Gravatar service to check whether you use their profile picture service. This is subject to Automattic’s privacy policy. After your comment is approved, your profile picture is visible to the public in the context of your comment.

Spam detection and comment moderation: Visitor comments may be checked through an automated spam detection service to protect our community from harmful content. This processing is based on our legitimate interest in maintaining site security and providing a safe user experience.

7Data Retention

We retain your personal data for the following periods:

• Comment Data: Comments and their metadata (including commenter name, email, and IP address) are retained indefinitely to help recognise and automatically approve follow-up comments and prevent spam.
• User Accounts: If you register on our website, your personal information remains in your user profile. You may edit or delete your personal information at any time, except your username cannot be changed. Website administrators retain the ability to view and edit user information.
• Password Reset: If you request a password reset, your IP address is included in the reset email and retained as part of the reset log.

When you request account deletion, we delete your personal data unless we are legally obliged to retain it for administrative, legal, or security purposes.

8Your Data Protection Rights

Under GDPR and applicable data protection laws, and subject always to the conditions and limitations set out in those laws, you may be entitled to exercise the following rights:

• Right of Access (Article 15 GDPR): You may request confirmation as to whether we process personal data concerning you and, where that is the case, access to such personal data and related information, in accordance with Article 15 GDPR.
• Right to Rectification (Article 16 GDPR): You may request that we correct inaccurate personal data concerning you and complete any incomplete data, in accordance with Article 16 GDPR.
• Right to Erasure – “Right to be Forgotten” (Article 17 GDPR): You may request the deletion of your personal data where one of the grounds set out in Article 17 GDPR applies, subject to applicable exceptions (for example, where we must retain it for legal, administrative, or security reasons).
• Right to Restrict Processing (Article 18 GDPR): You may request that we restrict the processing of your personal data in the circumstances described in Article 18 GDPR.
• Right to Data Portability (Article 20 GDPR): You may request to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit that data to another controller where the conditions of Article 20 GDPR are met.
• Right to Object (Article 21 GDPR): You may object, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests, and you may object at any time to processing for direct marketing purposes, in accordance with Article 21 GDPR.
• Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR, in accordance with Article 77 GDPR.

To exercise any of these rights, please contact us using the details provided in Section 11 below.

9Data Security and International Transfers

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

If your data is transferred internationally (including for cloud storage or third-party services), we ensure appropriate safeguards are in place in accordance with GDPR requirements, such as Standard Contractual Clauses or adequacy decisions.

10Testimonials and Marketing Communications

10.1 Testimonials and reviews

If you give us a review, comment or testimonial about our courses, we will publish it on our website or use it in our marketing only with your prior permission, and we will tell you where and how it will be used. You can withdraw your permission at any time by contacting contact@regulab.academy, and we will stop using it from that point.

10.2 Email marketing

If you subscribe to our newsletter or choose to receive offers, we use your name and email address to send them through MailPoet, our email service provider. We send marketing emails only with your consent. Every marketing email contains an unsubscribe link, and you can withdraw your consent at any time. Our emails measure whether they are opened and whether links in them are clicked, so that we can see which content is useful. This measurement does not use cookies. Service emails, such as confirmations and course access messages, are not marketing: we send them because they are necessary to provide the service you asked for.

11Right to make a complaint

Contact Us. For questions about this Privacy Policy, to exercise your data protection rights, or to report a data breach, please contact: Email: contact@regulab.academy Website: https://regulab.academy. When you contact us regarding a data subject right request, please allow us reasonable time to verify your identity and respond. We will try to respond to all requests within 1 (one) month. Occasionally, it may take us longer than 1 (one) month if your request is particularly complex or you have made a number of requests. In this case, we will notify you within 1 (one) month of the receipt of your request and keep you updated.

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the Cyprus Data Protection Commissioner. You can find details about how to do this on the following website: http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/page1i_gr/page1i_gr?opendocument