Privacy Policy
Last Updated: February 2025
Our Commitment to Privacy
At Agile Leaders, we are committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, and safeguard your information when you use our scrum methodology training services in Cyprus.
We comply with the General Data Protection Regulation (GDPR) and Cyprus data protection laws to ensure your personal information is handled with the highest standards of care and security.
Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you:
- Submit contact forms or inquiries about our courses
- Register for scrum methodology training programs
- Subscribe to our newsletter or educational content
- Participate in course evaluations or feedback surveys
- Contact us via email, phone, or other communication methods
Types of Personal Data:
- Name and contact details
- Email address
- Phone number
- Job title and company information
- Course preferences and interests
- Professional experience level
- Payment information (processed securely)
- Communication preferences
Usage Data
We automatically collect certain information when you visit our website:
- IP address and location data
- Browser type and version
- Device information and operating system
- Pages visited and time spent on our website
- Referral source and exit pages
- Date and time of visits
Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience. For detailed information about our cookie usage, please refer to our Cookie Policy.
How We Use Your Information
Course Delivery
- • Process course registrations and payments
- • Provide scrum methodology training services
- • Send course materials and updates
- • Issue completion certificates
- • Facilitate group learning sessions
Communication
- • Respond to inquiries and support requests
- • Send course announcements and updates
- • Provide customer service assistance
- • Share relevant agile methodology resources
- • Send newsletter and educational content
Service Improvement
- • Analyze website usage and performance
- • Improve course content and delivery
- • Develop new training programs
- • Conduct research and analytics
- • Enhance user experience
Legal Compliance
- • Comply with legal obligations
- • Maintain business records
- • Handle disputes and legal claims
- • Prevent fraud and abuse
- • Protect our rights and interests
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
Contract Performance
To provide our scrum training services and fulfill our contractual obligations to you.
Consent
For marketing communications and optional services where you have given explicit consent.
Legitimate Interest
For business operations, service improvement, and direct marketing to existing customers.
Legal Obligation
To comply with tax, accounting, and other legal requirements in Cyprus and the EU.
Data Sharing and Disclosure
Third-Party Service Providers
We may share your data with trusted third-party service providers who assist us in operating our business:
- Payment processors for secure transaction handling
- Email service providers for communication delivery
- Cloud hosting services for data storage and website operations
- Analytics providers for website performance measurement
- Customer support platforms for service delivery
All third-party providers are contractually required to protect your data and use it only for specified purposes.
Legal Requirements
We may disclose your personal information if required by law or in response to:
- Valid legal processes or court orders
- Government or regulatory investigations
- Protection of our rights, property, or safety
- Prevention of fraud or illegal activities
- Emergency situations involving public safety
What We Don't Do
We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data remains under our protection and is only used as described in this policy.
Data Protection and Security
Security Measures
- • SSL encryption for data transmission
- • Secure servers with regular security updates
- • Access controls and authentication systems
- • Regular security audits and monitoring
- • Staff training on data protection practices
- • Incident response procedures
Data Retention
- • Contact form submissions: 3 years
- • Course records and certificates: 5 years
- • Financial records: 7 years (legal requirement)
- • Marketing data: Until consent withdrawn
- • Website analytics: 26 months maximum
- • Account data: Until account deletion requested
Data Breach Notification: In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR.
Your Privacy Rights
Right to Access
Request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data in certain circumstances, such as when it's no longer needed.
Right to Portability
Receive your personal data in a structured, commonly used format for transfer to another service.
Right to Object
Object to processing of your personal data for direct marketing or other legitimate interests.
Right to Withdraw Consent
Withdraw your consent for data processing at any time where consent is the legal basis.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information below. We will respond to your request within one month and may ask for identification to verify your identity.
If you are not satisfied with our response, you have the right to lodge a complaint with the Cyprus Data Protection Commissioner or your local supervisory authority.
International Data Transfers
Our primary data processing occurs within the European Union. When we use third-party services that may transfer data outside the EU, we ensure appropriate safeguards are in place:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs) approved by the EU
- Binding Corporate Rules for multinational companies
- Specific derogations for particular situations
We regularly review and update our data transfer mechanisms to ensure compliance with evolving regulations.
Children's Privacy
Age Restrictions
Our scrum methodology training services are designed for adults and professionals. We do not knowingly collect personal information from children under 18 years of age.
If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal information should contact us immediately.
Data Protection Contact
For questions about this privacy policy or to exercise your data protection rights, please contact us:
2007 Nicosia, Cyprus
Policy Changes
We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Post the updated policy on our website
- Update the "Last Updated" date
- Notify you via email if you have provided your email address
- Display a prominent notice on our website for significant changes
We encourage you to review this policy periodically to stay informed about how we protect your information.