PRIVACY POLICY
Last Updated: February 2025
Our Commitment to Your Privacy
At Viral Academy, we are committed to protecting your personal data and respecting your privacy. This policy explains what personal data we collect, how we use it, and your rights regarding your information when you use our website and educational services.
This privacy policy applies to all services offered by Viral Academy, including our website, social media courses, and any related educational materials. By using our services, you agree to the practices described in this policy.
Information We Collect
Personal Information You Provide
We collect information you voluntarily provide when using our services:
- Contact Information: Name, email address, phone number when you contact us or enroll in courses
- Course Information: Course preferences, educational background, professional goals
- Communication Data: Messages, feedback, and correspondence sent through our contact forms
- Payment Information: Billing details and transaction data for course enrollment (processed securely)
Automatically Collected Information
We automatically collect certain information when you visit our website:
- Usage Data: Pages visited, time spent on site, browser type, device information
- Technical Data: IP address, browser settings, operating system, referring websites
- Cookie Data: Information stored through cookies and similar technologies
- Location Data: General geographic location based on IP address
How We Use Your Information
Service Delivery
- • Process course enrollments and manage student accounts
- • Provide customer support and respond to inquiries
- • Deliver course materials and educational content
- • Process payments and manage billing
- • Send course updates and important notifications
Communication
- • Send promotional materials about new courses
- • Share educational content and industry insights
- • Provide updates about our services and policies
- • Respond to feedback and support requests
- • Send newsletters and educational resources
Website Improvement
- • Analyze website usage and user behavior
- • Improve site functionality and user experience
- • Develop new features and course offerings
- • Optimize content and course recommendations
- • Ensure website security and prevent fraud
Legal Compliance
- • Comply with legal obligations and regulations
- • Protect our rights and prevent misuse
- • Respond to legal requests and court orders
- • Maintain records for tax and regulatory purposes
- • Enforce our terms and conditions
Legal Basis for Processing
Under EU General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
Consent
For marketing communications, newsletter subscriptions, and optional website features. You can withdraw consent at any time.
Contract Performance
To provide requested educational services, process enrollments, and fulfill our contractual obligations to students.
Legitimate Interest
For website analytics, security measures, fraud prevention, and improving our educational services and user experience.
Legal Obligation
To comply with tax laws, regulatory requirements, and other legal obligations applicable to educational institutions in Cyprus.
Data Sharing and Third Parties
We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:
Service Providers
We work with carefully selected service providers who help us deliver our educational services:
- • Payment processors for secure transaction handling
- • Email service providers for course communications
- • Cloud storage providers for course materials and data backup
- • Analytics providers for website performance monitoring
- • Customer support platforms for efficient inquiry handling
Legal Requirements
We may disclose your information when required by law, court order, or government regulations, or to protect our rights, property, or the safety of our students and staff.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner with appropriate privacy protections maintained.
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
Contact Form Submissions
Retained for 3 years for customer service and follow-up purposes
Student Records
Maintained for 7 years to support alumni services and certification verification
Financial Records
Kept for 7 years in compliance with Cyprus tax and accounting regulations
Marketing Data
Retained until consent is withdrawn or you opt out of communications
Data Security
We implement comprehensive security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:
Technical Safeguards
- • SSL encryption for all data transmission
- • Secure cloud storage with encryption at rest
- • Regular security updates and patches
- • Firewall protection and intrusion detection
- • Secure backup and disaster recovery systems
Administrative Controls
- • Limited access on a need-to-know basis
- • Staff training on data protection practices
- • Regular security audits and assessments
- • Incident response and breach notification procedures
- • Vendor security assessments and agreements
Data Breach Notification
In the unlikely event of a data breach affecting your personal data, we will notify you and relevant authorities within 72 hours as required by GDPR regulations.
Your Rights
Under GDPR and Cyprus data protection laws, you have several rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
Correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data in certain circumstances, subject to legal retention requirements.
Right to Data Portability
Receive your personal data in a machine-readable format and transfer it to another service provider.
Right to Object
Object to processing of your personal data for marketing purposes or based on legitimate interests.
Right to Withdraw Consent
Withdraw your consent for data processing at any time where we rely on consent as the legal basis.
Contact Us
If you have questions about this privacy policy or want to exercise your rights, please contact us:
Data Protection Inquiries
1095 Nicosia, Cyprus
Response Times
File a Complaint
You can file complaints with the Cyprus Data Protection Commissioner at dataprotection.gov.cy