Empower Academy PVAC - Privacy Policy

1. Who We Are

Empower Academy PVAC (the “Platform”) is operated by Empower Swiss SARL, registered in Switzerland and hosted on EU-based servers. We act as the data controller for all personal data processed through this Platform.

Contact for privacy matters: [email protected]

2. Scope

This Privacy Policy explains how we collect, use, share, store, and protect personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). It applies to all users worldwide, including learners located in Nigeria.

3. Information We Collect

We do not collect biometric or payment-card data directly.

4. Purpose of Data Collection

5. Legal Basis for Processing

6. Data Storage and Security

Your data is stored on secure EU-based servers protected by encryption, firewalls and access controls. Passwords are hashed and never stored in plain text. We conduct regular security audits and backups. In case of a personal data breach likely to pose risk, we will notify the competent supervisory authority within 72 hours and inform affected individuals where required.

7. Data Sharing and Third Parties

We do not sell personal data. We may share limited information with:

Each third-party acts under a Data Processing Agreement (DPA) ensuring GDPR compliance.

8. Cookies

We use essential cookies for authentication and preferences, and optional analytics cookies to improve performance. Non-essential cookies are used only with your consent. You can manage or withdraw consent through our cookie banner or browser settings. See our separate Cookie Notice for details.

9. International Data Transfer

Because our servers and service providers may operate in the EU and other countries, data may be transferred outside your jurisdiction. Where such transfers occur, we use adequate safeguards such as EU Standard Contractual Clauses or binding corporate rules to ensure equivalent protection.

10. User Rights (Under GDPR)

Requests may be sent to [email protected]. We will respond within one month.

11. User Responsibilities

12. Data Retention

After these periods data is anonymised or securely deleted.

13. Children’s Privacy

The Platform is intended for users aged 18 and over. If we learn that a child has provided personal data without parental consent, we will delete it promptly.

14. Changes to Policy

We may update this Policy periodically. Any material changes will be communicated via email or platform notification, with the “Effective Date” updated accordingly.

15. Contact Information

Email: [email protected]