GDPR Compliance

This policy outlines how Sparkling Embers complies with the EU General Data Protection Regulation (GDPR) regarding your personal data and privacy.

What Data Do We Collect?

We collect data you provide (such as your name, email, and course selections) and data generated by your use of our services (e.g., browser information, session data).

How We Use Your Data

• Provision and improvement of our educational services
• Processing enrollments and managing your account
• Marketing communications (with opt-out)
• Fulfilling legal and regulatory obligations

Your Rights Under GDPR

• Access, correct, or delete your personal information
• Withdraw consent for data usage
• Object to or restrict certain processing activities
• Request data portability
• Lodge a complaint with relevant authorities

Retention Period

Personal data is only retained as long as necessary for the purposes set out in this policy, except where required by law.

Security Measures

We use encryption, access controls, and regular security audits to protect your data from unauthorized access or loss.

Contact

For requests or questions regarding your GDPR rights, contact [email protected].