Privacy Policy

Introduction

Welcome to alenleit.com (the “Site”). alenleit.com (“we,” “our,” “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you visit our Site, interact with us, or use our services. It also explains your rights under the General Data Protection Regulation (GDPR).

1. Information We Collect

We collect the following types of information:

1.1 Personal Data

Contact Information: Name, email address, phone number, and postal address.
Account Information: Username, password, and other registration information.
Payment Information: Billing address, credit card details, and transaction history.
Communication Information: Any information you provide in communications with us, including emails and contact forms.

1.2 Usage Data

Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
Interaction Data: Details about your use of our Site, including clickstream to, through, and from our Site, pages viewed, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs).

2. How We Use Your Information

We use your information for the following purposes:

To provide and maintain our services: Including setting up and managing your account, processing transactions, and providing customer support.
To improve our services: Analyzing usage to improve Site functionality, performance, and user experience.
To communicate with you: Sending notifications, updates, and promotional materials (with your consent).
To ensure security and compliance: Preventing fraud, ensuring the security of our Site, and complying with legal obligations.

3. Legal Basis for Processing Your Information

We process your personal data based on the following legal grounds:

Consent: When you have given clear consent for us to process your personal data for a specific purpose.
Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: The processing is necessary for us to comply with the law.
Legitimate Interests: The processing is necessary for our legitimate interests, and your interests and fundamental rights do not override those interests.

4. Sharing Your Information

We may share your personal data with the following parties:

Service Providers: Third-party companies that provide services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. Examples include:
- Stripe: For payment processing.
- Google Analytics: For data analysis.
- Microsoft clarity: For data analysis.
- MailerLite: For email delivery.
- Zone.ee: For hosting services.

Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Legal Requirements: If required by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. International Transfers

Your information may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. We take steps to ensure that appropriate safeguards are in place to protect your personal data. Specifically, website data is stored in Amsterdam, and business data is stored securely in Estonia and with Microsoft and Google Cloud services.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specifically:

Contact Information: Retained for the duration of your account with us and for a reasonable period thereafter in case you decide to reactivate your account.
Payment Information: Retained for as long as necessary to complete the transaction and for financial record-keeping purposes as required by law.
Communication Information: Retained for a period of 24 months unless you request deletion.

8. Your Data Protection Rights

Under GDPR, you have the following rights:

Right to Access: You have the right to request copies of your personal data.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
Right to Erasure: You have the right to request the deletion of your personal data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Data Portability: You have the right to request the transfer of your data to another organization, or directly to you, under certain conditions.
Right to Object: You have the right to object to our processing of your personal data, under certain conditions.

To exercise these rights, please contact us at info@heroacademy.ee.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

By email: info@heroacademy.ee

Alen Leit | Personal Development Coach