General Data Protection Regulation (GDPR) Compliance

Last Updated: April 15, 2025

zylvor ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This policy explains how we collect, use, store, and protect your personal information.

1. Data Controller Information

zylvor is the data controller responsible for your personal data.

Contact Details:

Address: U10 Nugent Shopping Park, Orpington BR5 3RP, United Kingdom
Email: contact@zylvor.online
Phone: +442920451216

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide

Identity data: name, username, title
Contact data: email address, phone number, communication preferences
Account data: login credentials, course enrollment information
Financial data: payment card details, billing address, transaction history
Profile data: interests, preferences, course progress, feedback
Communication data: messages, support inquiries, survey responses

2.2 Information We Collect Automatically

Technical data: IP address, browser type, device information, operating system
Usage data: pages visited, time spent, interaction patterns, learning progress
Cookie data: preferences and tracking information as detailed in our Cookie Policy

3. Legal Basis for Processing

We process your personal data under the following legal grounds:

Contractual necessity: To provide our courses and services you have enrolled in
Legitimate interests: To improve our platform, prevent fraud, and ensure security
Legal obligation: To comply with applicable laws and regulations
Consent: For marketing communications and optional features (consent can be withdrawn at any time)

4. How We Use Your Personal Data

We use your personal data for the following purposes:

Delivering courses and educational content you have purchased or enrolled in
Processing payments and managing your account
Communicating with you about your courses, progress, and account
Providing customer support and responding to inquiries
Improving our platform, courses, and user experience
Sending marketing communications (with your consent)
Ensuring platform security and preventing fraudulent activity
Complying with legal and regulatory requirements
Analyzing usage patterns to enhance educational effectiveness

5. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

5.1 Service Providers

We engage third-party service providers who process data on our behalf, including:

Payment processors and financial institutions
Cloud hosting and infrastructure providers
Email and communication service providers
Analytics and performance monitoring services
Customer support platforms

5.2 Legal Requirements

We may disclose your data when required by law, court order, or governmental authority, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.

Important: We do not sell your personal data to third parties.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions confirming adequate protection levels
Other legally recognized transfer mechanisms

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Retention periods:

Account data: Duration of your account plus up to 7 years for legal and accounting purposes
Course progress and certificates: Indefinitely or until you request deletion
Marketing data: Until you withdraw consent or request deletion
Technical and usage data: Typically 24 to 36 months

8. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary or you withdraw consent.

8.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain circumstances.

8.5 Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used format.

8.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

8.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects.

8.8 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

9. Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details provided in Section 1. We will respond to your request within one month, though this may be extended by two months for complex requests.

You may also lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication mechanisms
Employee training on data protection practices
Incident response and breach notification procedures

11. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

14. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.

15. Data Protection Officer

If you have questions about this GDPR policy or our data practices, you may contact our data protection team at:

Email: contact@zylvor.online

16. Changes to This Policy

We may update this GDPR policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

17. Legal Framework

This policy is designed to comply with:

General Data Protection Regulation (EU) 2016/679
UK Data Protection Act 2018
Other applicable data protection legislation

Contact Us

If you have questions, concerns, or requests regarding this GDPR policy or your personal data, please contact us:

Email: contact@zylvor.online
Phone: +442920451216
Address: U10 Nugent Shopping Park, Orpington BR5 3RP, United Kingdom