Privacy Policy

Last updated: 18 September 2026

This Privacy Policy explains how CyberWayFinder Global collects, uses, and protects personal data when you visit our website and use our online courses and related services (the “Services”).

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Data controller

The data controller is:

• Name: CyberWayFinder Global
• Address: Hoeilaart, Belgium
• Company/VAT number: BE1024786390
• Email: info@cyberwayfinder.com

If you have any questions about this Privacy Policy or your personal data, you can contact us at [info@cyberwayfinder.com].

2. Personal data we collect

We may collect and process the following categories of personal data:

1. Account and profile data
   • Name and surname
   • Email address
   • Username and password
   • Profile information (photo, bio, timezone, etc., if provided)
2. Course and usage data
   • Courses you enroll in and complete
   • Progress, quiz results, assignments, and certificates
   • Interactions in forums, comments, or messaging (where applicable)
   • Logs related to access dates, times, and features used
3. Communication data
   • Content of messages you send to us (support requests, feedback, etc.)
   • Email preferences and subscriptions
4. Payment and transaction data (if you purchase paid courses)
   • Billing details (name, address, VAT number)
   • Transaction details (date, amount, payment method)
   • We do not store full payment card details.
5. Technical data
   • IP address
   • Browser type, operating system, and device information
   • Cookies and similar technologies (see Section 7)

3. Purposes and legal bases of processing

We process personal data for the following purposes and legal bases, under the EU General Data Protection Regulation (GDPR):

1. Provision of the Services
   • To create and manage your account
   • To provide access to courses, track your progress, and issue certificates
   • Legal basis: Performance of a contract (Article 6(1)(b) GDPR)
2. Customer support and communication
   • To respond to your requests, questions, and feedback
   • To send you important service-related notices (e.g., account or security alerts)
   • Legal basis: Performance of a contract and legitimate interest (Article 6(1)(b) and 6(1)(f) GDPR)
3. Billing and administration
   • To process payments and manage invoices
   • To comply with accounting and tax obligations
   • Legal basis: Performance of a contract and legal obligation (Article 6(1)(b) and 6(1)(c) GDPR)
4. Improvement and security of the Services
   • To analyze how the Services are used and improve user experience
   • To monitor, prevent, and detect fraud or security incidents
   • Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
5. Marketing and newsletters
   • To send you newsletters or promotional communications about our courses and services
   • Legal basis: Consent (Article 6(1)(a) GDPR) or legitimate interest where allowed
   • You can withdraw your consent or opt out at any time (see Section 9).

4. Data sharing and recipients

We may share personal data with:

1. Service providers (processors)
   • Hosting and platform providers (including our Odoo hosting/provider)
   • Payment service providers
   • Email and communication tools
   • Analytics and security tools

These providers process data only on our instructions and are bound by data protection agreements.

1. Professional advisers and authorities
   • Accountants, auditors, legal advisers
   • Public authorities, regulators, or law enforcement when required by law or to protect our rights

We do not sell your personal data to third parties.

5. International transfers

Some of our service providers may be located outside the European Economic Area (EEA).

When personal data is transferred outside the EEA, we ensure that an adequate level of protection is in place, for example through:

• An adequacy decision by the European Commission, or
• Standard contractual clauses (SCCs) or equivalent safeguards.

You can contact us for more information on these safeguards.

6. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

In particular:

• Account and course data: kept for the duration of your account and for a reasonable period afterwards, unless you request deletion.
• Billing and transaction data: retained for the period required by accounting and tax laws.
• Communication data: kept as long as necessary to manage our relationship with you.

When data is no longer needed, it will be deleted or anonymized.

7. Cookies and similar technologies

We use cookies and similar technologies to:

• Enable essential functions of the website (e.g., login, session management).
• Remember your preferences (e.g., language).
• Analyze usage and performance of the Services.

Where required by law, we will ask for your consent before setting non-essential cookies.

You can manage your cookie preferences via your browser settings and, if implemented, our cookie banner.

8. Security

We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures may include:

• Access controls and authentication
• Encryption where appropriate
• Regular backups and monitoring
• Restricting access to personal data to authorized personnel and providers

However, no system is completely secure, and we cannot guarantee absolute security.

9. Your rights under GDPR

As a data subject in the EU/EEA, you have the following rights (subject to conditions and legal exceptions):

• Right of access: To obtain confirmation whether we process your data and to receive a copy.
• Right to rectification: To have inaccurate or incomplete data corrected.
• Right to erasure (“right to be forgotten”): To have your data deleted in certain circumstances.
• Right to restriction of processing: To limit our processing in certain cases.
• Right to data portability: To receive your data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Right to object: To object to processing based on legitimate interests or to direct marketing.
• Right to withdraw consent: When processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, please contact us at [info@cyberwayfinder.com] and clearly state your request.

You also have the right to lodge a complaint with your local data protection authority.

In Belgium, this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit): https://www.dataprotectionauthority.be.

10. Children’s privacy

Our Services are not directed to children under the age of [13/16 – choose appropriate age based on your policy].

We do not knowingly collect personal data from children without appropriate parental consent.

If you believe a child has provided us with personal data, please contact us so we can delete it where required.

11. Third-party links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of those third parties, and this Privacy Policy does not apply to them.

We encourage you to review their privacy policies before providing any personal data.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we will notify you by updating the “Last updated” date and, where appropriate, by additional notice (e.g., email or a notice on the website).

Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acceptance of the changes.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you can contact us at:

CyberWayFinder Global

Email: [info@cyberwayfinder.com]