Privacy Policy
Last Updated: February 2025
Our Commitment to Privacy
TechLead Institute is committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, and protect your personal information when you interact with our educational services and website.
We operate in accordance with the General Data Protection Regulation (GDPR) and Cyprus data protection laws. This policy applies to all personal data we process about individuals who visit our website, enroll in our courses, or interact with our services.
If you have any questions about this policy or how we handle your data, please contact our Data Protection Officer using the details provided at the end of this document.
Data Collection Information
Personal Data We Collect
- Contact Information: Name, email address, phone number, postal address
- Professional Information: Job title, company, industry experience, educational background
- Course Data: Enrollment details, progress tracking, assessment results, completion records
- Payment Information: Billing address, transaction records (payment card details are processed by secure third-party providers)
- Technical Data: IP address, browser type, device information, usage analytics
How We Collect Data
- Direct Collection: Contact forms, course enrollment, phone calls, email correspondence
- Automatic Collection: Website cookies, analytics tools, learning management system usage
- Third-Party Sources: Professional networking platforms, referral partners (with your consent)
Legal Basis for Processing
- Consent: Marketing communications, optional analytics, newsletter subscriptions
- Contract Performance: Course delivery, student support, certification issuance
- Legitimate Interest: Website security, fraud prevention, business administration
- Legal Obligation: Tax records, financial reporting, regulatory compliance
How We Use Your Data
Educational Services
- • Course enrollment and administration
- • Learning progress tracking and assessment
- • Student support and communication
- • Certification and credential issuance
- • Alumni network and career services
Communication
- • Course updates and announcements
- • Technical support and assistance
- • Marketing communications (with consent)
- • Event invitations and networking
- • Feedback surveys and research
Analytics & Improvement
- • Website usage analysis and optimization
- • Course effectiveness measurement
- • Student satisfaction monitoring
- • Curriculum development and updates
- • Quality assurance processes
Legal & Security
- • Financial record keeping and tax compliance
- • Fraud prevention and security monitoring
- • Legal dispute resolution
- • Regulatory compliance reporting
- • Data backup and recovery
Data Protection Measures
Technical Security Measures
- Encryption: All data transmission uses SSL/TLS encryption, stored data encrypted at rest
- Secure Hosting: Data stored on secure servers with regular security updates and monitoring
- Access Controls: Role-based access permissions with multi-factor authentication requirements
- Monitoring: Continuous security monitoring and intrusion detection systems
Organizational Security Measures
- Staff Training: Regular data protection and security awareness training for all personnel
- Policies: Comprehensive data protection policies and procedures regularly reviewed
- Audits: Regular security audits and penetration testing by independent specialists
- Incident Response: Established procedures for data breach notification within 72 hours
Data Retention Periods
Financial Records: 7 years for tax compliance
Marketing Data: Until consent withdrawn
Support Communications: 3 years
Legal Documents: As required by law
Your Privacy Rights
Under GDPR, you have the right to:
- Access: Request copies of your personal data and information about how we process it
- Rectification: Correct inaccurate or incomplete personal data
- Erasure: Request deletion of your personal data in certain circumstances
- Restriction: Limit how we process your data while disputes are resolved
- Portability: Receive your data in a structured format or transfer to another controller
- Object: Object to processing based on legitimate interests or for marketing purposes
How to Exercise Your Rights:
Submit a Request
Contact our Data Protection Officer using the details below. We will respond within 30 days.
privacy@domain.com
Verify Your Identity
For security purposes, we may need to verify your identity before processing requests involving personal data access or changes.
Lodge a Complaint
You have the right to lodge a complaint with the Cyprus Data Protection Commissioner if you believe we have not handled your data appropriately.
Data Sharing & Third Parties
We do not sell or rent your personal data to third parties. We may share your data only in the following circumstances:
Service Providers
We work with trusted service providers who assist with course delivery, payment processing, and website hosting. These providers are contractually bound to protect your data and use it only for specified purposes.
Examples: Learning management systems, payment processors, email service providers, cloud hosting services
Legal Requirements
We may disclose your data when required by law, to protect our rights, or in response to valid legal processes such as court orders or regulatory investigations.
Circumstances: Tax reporting, fraud investigation, legal proceedings, regulatory compliance
Business Transfers
In the event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction, subject to the same privacy protections.
Protection: Any new owner must honor this privacy policy or provide notice of changes
Contact Information & Data Protection Officer
Data Protection Inquiries
privacy@domain.com
+357 25 937642
38 Arch. Makarios III, 3020 Limassol, Cyprus
Policy Updates
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through:
- • Email notification to registered users
- • Prominent notice on our website
- • Updated "Last Modified" date at the top of this policy
International Data Transfers
Some of our service providers may be located outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place through adequacy decisions, standard contractual clauses, or other approved mechanisms to protect your data.