•
Name
and email address (account registration, checkout)
•
Billing address and invoice details
•
Payment
information (processed directly by Mollie, not stored by Gridlign Studio
•
Messages
sent via contact forms or email
2.2 Data Collected
Automatically
When you visit our website, we may collect:
•
IP
address and browser/device information
•
Pages
visited, time spent, and navigation behaviour
•
Referring website
•
Course
progress and completion data (eLearning platform)
•
Purchase history
This data is collected via cookies and similar
technologies. See Section 10 (Cookie Policy) for details.
3. Why We Process Your Data
•
To
manage your account and provide access to purchased content
•
To
process payments and issue invoices
•
To
track course progress and completion
•
To
respond to support requests and inquiries
•
To send transactional emails (purchase confirmation,
access notifications)
•
To
improve our website and services (analytics)
•
To
send newsletters or promotional emails (only with your explicit consent)
•
For
legal and compliance purposes (e.g., tax record-keeping)
We do not sell your data to third parties.
4. Legal Basis for Processing (GDPR Art. 6)
•
Consent
(Art. 6.1(a)) for marketing emails and non-essential cookies
•
Contractual
necessity (Art. 6.1(b)) to deliver purchased products and manage your account
•
Legal
obligation (Art. 6.1(c)) for invoicing
and tax compliance (7-year retention)
•
Legitimate
interest (Art. 6.1(f)) for website security, fraud prevention, and anonymised
usage analytics to improve our services
You may withdraw consent at any time by
contacting us or using the unsubscribe link in emails.
5. Third-Party Data Processors
Your data may be shared with the following
carefully selected processors, who act solely on our instructions:
•
Odoo
S.A. (Belgium/EU) platform hosting,
eLearning, webshop, and CRM
•
Mollie
B.V. (Netherlands) payment processing
•
Google
LLC, YouTube (embedded tutorial videos; Google may collect viewer data per
their own privacy policy: policies.google.com/privacy)
•
Email
hosting provider, transactional and support email delivery
We do not share your data with unrelated third
parties or use it for advertising purposes.
6. International Transfers
Where data is processed outside the European
Economic Area (EEA), this occurs only with appropriate safeguards in place,
such as EU Standard Contractual Clauses, and in compliance with the GDPR.
7. Data Retention
•
Purchase,
billing, and invoice data: 7 years (Belgian legal requirement)
•
Account
and course data: retained for the duration of your account, plus 1 year after
deletion
•
Marketing
data: until you withdraw consent
•
Support
inquiries: up to 2 years after last contact
•
Cookies:
as specified in Section 10
8. Your Rights Under GDPR
You have the right to:
•
Access
the personal data we hold about you
•
Correct inaccurate or incomplete data
•
Request
deletion ('right to be forgotten'), where no legal retention obligation applies
•
Restrict
or object to certain processing activities
•
Data
portability (receive your data in a structured, machine-readable format)
•
Object
to direct marketing at any time
To exercise any of these rights, contact us at
info@gridlign-studio.com. We may request proof of identity before responding.
We will respond within 30 days.
9. Direct Marketing
You will only receive newsletters or
promotional emails if you have explicitly opted in. You may unsubscribe at any
time via the link in any email or by contacting us directly.
10. Cookie Policy
10.1 What Are Cookies
Cookies are small text files stored on your
device when you visit a website. We use cookies to make our website function
correctly and to improve your experience.
10.2 Types of Cookies We Use
•
Essential
cookies, required for the website and webshop to function (login session, cart,
checkout). Cannot be disabled.
•
Analytics
cookies, anonymised data on how visitors use our website (e.g., pages visited,
session duration). Used to improve our content and navigation.
•
Preference
cookies, remember your settings (e.g., language, currency).
•
Marketing
cookies, only placed with your explicit consent, to measure campaign
effectiveness. We do not use third-party advertising cookies.
10.3 Third-Party Cookies
Embedded YouTube videos may place cookies from
Google/YouTube on your device, subject to Google's own cookie policy. These are
loaded only when you interact with a video.
10.4 Managing Cookies
You can manage or withdraw cookie consent at any
time via the cookie banner on our website, or through your browser settings.
Note that disabling essential cookies may affect website functionality
11. Minors
Our website and services are not intended for
individuals under 18 years of age. We do not knowingly collect personal data
from minors. If you believe a minor has provided us with personal data, please
contact us so we can delete it.
12. Security
We implement appropriate technical and
organisational measures to protect your personal data against unauthorised
access, loss, or misuse. In the event of a data breach that poses a risk to
your rights, we will notify you and the Belgian Data Protection Authority (GBA)
as required by law.
13. Changes to This Policy
We may update this Privacy Policy from time to
time. The latest version will always be available on our website with an
updated 'Last updated' date. For material changes, we will notify you by email
where we hold your contact details.
14. Complaints
If you believe your data is being processed
improperly, you may file a complaint with the Belgian Data Protection
Authority: