GDPR policy.

Business Development Academy ("we," "us," or "our") is committed to protecting the privacy and security of your personal information in compliance with the General Data Protection Regulation (GDPR).

Data Collection and Processing

- We collect and process personal information for specified, explicit, and legitimate purposes. We will not process personal data in a manner that is incompatible with these purposes.

- We collect personal information only when necessary for the provision of our services and with your consent.

- The types of personal information we collect may include your name, email address, postal address, phone number, and payment information.

- We may also collect usage information such as your IP address, browser type, operating system, and referring URL.

- We will not retain personal data for longer than is necessary for the purposes for which it was collected.

Lawful Basis for Processing

- We will only process personal data when we have a lawful basis to do so. This may include:

  - The data subject has given consent to the processing of their personal data for one or more specific purposes.

  - Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  - Processing is necessary for compliance with a legal obligation to which the controller is subject.

  - Processing is necessary to protect the vital interests of the data subject or of another natural person.

  - Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

  - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Data Security

- We take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

- We implement measures such as encryption, access controls, and regular security assessments to protect the security of your personal information.

Data Subject Rights

- You have the right to request access to and rectification or erasure of your personal data, as well as the right to restrict processing, object to processing, and data portability.

- If you wish to exercise any of these rights, please contact us at [your contact information].

- You also have the right to lodge a complaint with a supervisory authority if you believe that your rights under the GDPR have been violated.

International Data Transfers

- If we transfer your personal data to countries outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your personal information.

Contact Us

If you have any questions or concerns about our GDPR policy, please get in touch with us us through our contact page