Privacy Policy

CyberMindLab (“we”, “our”, “us”) provides digital education services focused on IT literacy and cybersecurity training. This Privacy Policy describes how we collect, use, disclose, and protect personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada and the General Data Protection Regulation (GDPR) of the European Union. Last updated: 10 Oct 2025.

1. Information We Collect

We collect information that users provide when creating accounts, enrolling in courses, or communicating with our support team. This may include your name, email address, billing details, and device information. Technical data such as IP address, browser type, and login activity may be recorded for security and analytics purposes.

2. How We Use the Information

We use personal information to deliver educational content, manage subscriptions, issue certificates, process payments, and ensure platform security. Aggregated and anonymized data may also be used to enhance course quality and service performance. We never sell personal information to third parties.

3. Legal Basis for Processing

Our processing activities are based on one or more lawful bases: (a) contractual necessity for providing our services, (b) legitimate interest in improving platform functionality, (c) user consent for optional updates or marketing, and (d) compliance with legal obligations.

4. GDPR and Data Protection Rights

Under the GDPR, users located in the European Economic Area (EEA) or the United Kingdom have specific rights:

  • Access: Obtain a copy of your data and learn how it is processed.
  • Correction: Request the update or correction of inaccurate information.
  • Erasure: Request deletion of your data when it’s no longer necessary.
  • Restriction: Limit processing under certain legal conditions.
  • Portability: Receive your data in a machine-readable format.
  • Objection: Object to specific processing based on legitimate interest.

To exercise any of these rights, contact privacy@cybermindlab.com. We will respond within 30 days as required by law.

5. Cookies and Tracking Technologies

We use essential cookies to ensure secure logins and course functionality. Optional cookies for analytics or preferences may be used only with your consent. You can manage cookie settings in your browser or within our cookie control panel.

6. Data Retention

Personal data is retained while your account is active or as long as necessary to fulfill legal and contractual obligations. Once data is no longer required, it will be securely deleted or anonymized within 90 days.

7. Data Sharing and International Transfers

We may share limited data with trusted service providers, such as hosting, analytics, and payment processors, under strict confidentiality agreements. Where data is transferred outside Canada or the EEA, GDPR-compliant safeguards such as Standard Contractual Clauses are applied.

8. Security Measures

CyberMindLab uses encryption, secure servers, and access control policies to protect user data. Regular audits and employee training ensure data security and compliance with privacy standards.

9. Children’s Privacy

Our platform is intended for adults (18+). We do not knowingly collect personal data from minors. If we become aware of such data, it will be promptly removed.

10. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be published on our website, and the “Last updated” date will be revised accordingly. Continued use of the platform after updates constitutes acceptance.

11. Contact Information

For privacy-related inquiries or to exercise your rights, please contact our Data Protection Officer at privacy@cybermindlab.com.