Privacy Policy Overview

Definitions

This section clarifies terms used throughout the policy so readers understand how we refer to people, data, and services.

Personal data means any information that identifies or could reasonably identify an individual, such as name, email, phone number, professional role, and billing details.

Processing refers to any operation performed on personal data, including collection, storage, use, disclosure, and deletion necessary to deliver coaching services and manage client relationships.

User refers to any individual who interacts with becyberix.digital, engages with our training or coaching services, or whose information we process in connection with those services.

Service denotes executive training, business coaching, assessments, workshops, digital resources, scheduling, and related communications provided by becyberix.

Cookies are small files stored on a user's device to enable site functionality, analytics, and to remember preferences across sessions.

Purposes of Processing

We process personal data for specific operational, administrative, and improvement purposes directly related to coaching and training services.

• To provide and manage executive training and coaching programs, including scheduling and session delivery.
• To communicate with clients about service updates, materials, and administrative matters.
• To process payments, invoices, and manage billing relationships.
• To analyze service usage and feedback to improve course content, delivery, and user experience.
• To comply with legal obligations and resolve disputes or inquiries.
• To provide security, detect and prevent abuse or fraud, and protect our systems.
• To maintain records for client reporting and contractual accountability.
• To manage marketing preferences and deliver relevant, consent-based communications.

Legal Bases for Processing

We rely on appropriate legal bases for personal data processing depending on the context and jurisdictional requirements.

• Performance of a contract: processing necessary to deliver coaching services and manage client agreements.
• Legitimate interests: for operational security, service improvement, and preventing abuse, balanced against individual privacy rights.
• Consent: where required for marketing communications, cookies, or other optional features.
• Legal obligation: when processing is necessary to comply with applicable laws and regulatory requests.

Rights Under GDPR and Similar Laws

Where applicable, individuals have rights regarding their personal data. We respond to requests in line with legal requirements and our operational practices.

• Right of access: request a copy of personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of personal data where processing is no longer necessary and no legal basis prevents deletion.
• Right to restriction: request limitation on processing in certain circumstances.
• Right to data portability: request a copy of your data in a structured, commonly used format where applicable.
• Right to object: object to processing based on legitimate interests or direct marketing in some cases.

Cookies and Similar Technologies

We use cookies to support site functionality, remember preferences, and analyze usage. You can control cookie settings through your browser or site controls.

Types include essential cookies for site operation, performance analytics cookies, and optional marketing cookies used only with consent.

Categories: strictly necessary, performance/analytics, functionality, and marketing. Only strictly necessary cookies are set by default; others require consent.

Manage cookies via site banner settings or browser preferences. Disabling some cookies may limit functionality such as session persistence and analytics.

View our full cookie policy and consent options on becyberix.digital

Data Sharing and Disclosure

We share personal data only with partners and providers required to deliver services or comply with legal obligations, and we require them to protect data appropriately.

• Service providers who process payments, host services, or support scheduling and video conferencing.
• Analytics providers to measure and improve site and service performance.
• Legal, regulatory, or tax authorities when required by law or to respond to valid legal processes.
• Professional advisors or auditors under confidentiality terms when needed for business operations.
• Acquirers or counterparties in the event of a business transfer or reorganization, subject to confidentiality and data protection safeguards.
• Any other third parties only with explicit consent from the user.

International Transfers

Personal data may be processed or stored in countries outside your own. Where transfers occur, we implement appropriate safeguards such as standard contractual clauses or rely on permitted transfer mechanisms.

We use contractual protections, carefully selected processors, and security measures to maintain protections consistent with applicable data protection requirements.

Data Retention

We retain personal data only as long as necessary to provide services, meet legal obligations, resolve disputes, and support legitimate business needs.

Account and client records are retained for the duration of the business relationship and for a reasonable period afterward to allow for administrative tasks and legal compliance.

Communications and session notes are retained to maintain service continuity and for a limited period to support quality assurance and client requests.

System logs and backups are kept according to security and operational needs and typically retained for a defined period to detect and respond to incidents.

Upon account closure or valid deletion requests, we remove or anonymize personal data in our systems subject to legal and operational constraints and any necessary retention for compliance.

Security Measures

We maintain technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. Security practices are reviewed regularly and updated in line with operational needs and industry practices.

• Access controls and authentication to restrict data access to authorized personnel.
• Encryption in transit and at rest where appropriate to protect sensitive data.
• Regular security assessments, monitoring, and incident response procedures to detect and address vulnerabilities.

How to Exercise Your Rights

To exercise data subject rights, contact our privacy team. We will verify requests as required and respond within applicable legal timeframes.

• Submit a request to [email protected] with subject line 'Privacy Request' and include your name, contact details, and the specific right you wish to exercise.
• If you are not satisfied with our response, you may contact local data protection authorities or raise concerns with relevant oversight bodies in your jurisdiction.
• Request correction of inaccurate or incomplete personal data maintained by becyberix.
• Request deletion of personal data when it is no longer necessary for the purposes collected or when processing is unlawful.
• Request restriction of processing for specific purposes while a dispute over accuracy is resolved.
• Object to certain types of processing, including profiling, where applicable under local law.
• Receive a copy of personal data provided by you in a portable, commonly used and machine-readable format where technically feasible.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of processing based on consent prior to withdrawal.

How to exercise your privacy rights

To exercise any of the rights listed above, contact our data protection team at the address below. Please provide sufficient detail to identify yourself and clearly describe the specific right you wish to exercise. We will verify your identity before fulfilling requests to protect your information. Where additional documentation is needed to verify identity, we will inform you promptly.

[email protected]

We aim to respond to verified requests within 30 days. If your request is complex or numerous, we may extend the response period and will notify you of any extension and the reasons for delay.