Introduction
Northern Frame Academy, operating from Kernstraat 11, 2313 EV Leiden, Netherlands, is committed to protecting the privacy and personal information of all visitors, students, and users of our educational platform. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.
Information We Collect
Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Register for courses or programs
- Submit enrollment requests or contact forms
- Subscribe to newsletters or educational materials
- Communicate with us via email or other channels
- Participate in surveys or feedback requests
The types of personal information we may collect include:
- Full name
- Email address
- Phone number
- Mailing address (if provided)
- Course preferences and educational interests
- Any other information you choose to provide in correspondence or forms
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and browsing behavior, including:
- IP address
- Browser type and version
- Operating system
- Referring website
- Pages visited and time spent on pages
- Date and time of access
- Device identifiers
This information is collected through cookies and similar tracking technologies. For more details, please refer to our Cookie Policy.
How We Use Your Information
We use the personal information we collect for the following purposes:
- Course Administration: To process enrollment requests, deliver educational content, communicate program details, and provide customer support
- Communication: To respond to inquiries, send course updates, provide educational resources, and share important information about our services
- Service Improvement: To analyze user behavior, improve website functionality, enhance educational programs, and develop new courses
- Legal Compliance: To comply with legal obligations, resolve disputes, enforce our terms of service, and protect our rights and property
- Marketing: To send promotional materials, newsletters, and information about new courses (only with your consent, which you may withdraw at any time)
- Security: To protect against fraudulent activity, unauthorized access, and other security threats
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications
- Contract: Processing is necessary for the performance of a contract with you, such as delivering educational services you have enrolled in
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights
- Legal Obligation: Processing is required to comply with legal requirements
How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting business, or providing services to you (e.g., email delivery services, payment processors, hosting providers). These parties are contractually obligated to keep your information confidential and use it only for the purposes we specify
- Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe such action is necessary to comply with legal obligations, protect our rights, or ensure the safety of our users
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections
- With Your Consent: We may share your information with third parties when you have given explicit consent to do so
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention period depends on the nature of the information and the purposes for which it is processed.
Specifically:
- Account and enrollment information is retained for the duration of your relationship with us and for a reasonable period afterward to comply with legal obligations
- Marketing consent records are kept until you withdraw consent
- Website analytics data is typically retained for a limited period to improve service quality
- Communication records are retained as necessary for business and legal purposes
When personal data is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS protocols
- Secure storage of personal data on protected servers
- Access controls limiting who can view and process personal information
- Regular security assessments and updates
- Employee training on data protection and privacy practices
While we take reasonable precautions to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you promptly in the event of any data breach that may affect your rights.
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights regarding your personal information:
- Right of Access: You have the right to request a copy of the personal data we hold about you
- Right to Rectification: You can request that we correct any inaccurate or incomplete personal information
- Right to Erasure: You may request that we delete your personal data in certain circumstances (e.g., when it is no longer necessary for the purposes collected or if you withdraw consent)
- Right to Restrict Processing: You can request that we limit the processing of your personal data under certain conditions
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller
- Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR.
International Data Transfers
Northern Frame Academy operates from the Netherlands. If you are accessing our services from outside the European Economic Area (EEA), please be aware that your information may be transferred to, stored, and processed in the Netherlands and other countries where our service providers operate.
We ensure that any international transfers of personal data are conducted in compliance with applicable data protection laws and that appropriate safeguards are in place to protect your information, such as standard contractual clauses approved by the European Commission.
Third-Party Links
Our website may contain links to third-party websites, services, or resources that are not operated or controlled by Northern Frame Academy. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of external sites.
We encourage you to review the privacy policies of any third-party sites you visit to understand how they collect, use, and protect your personal information.
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately, and we will take steps to delete such information from our systems.
Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make changes, we will update the date at the top of this page.
If we make material changes to how we process your personal data, we will notify you by email (if you have provided an email address) or by posting a prominent notice on our website prior to the changes taking effect.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We are committed to resolving any privacy concerns you may have and will respond to your inquiry as promptly as possible.
Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the Netherlands. Any disputes arising from or relating to this Privacy Policy or our data practices shall be subject to the exclusive jurisdiction of the courts of the Netherlands.
Acknowledgment
By using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use our website or services.