Data Protection Policy

Effective Date: May 20, 2025, Last Updated: May 20, 2025

At Synergy Academy, we are committed to protecting the privacy, rights, and freedoms of our students, parents, and partners. This Data Protection Policy outlines how we collect, store, use, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.


1. Purpose
This policy explains:
What personal data we collect and why
How we protect and manage that data
Your rights under GDPROur responsibilities as a data controller


2. Scope
This policy applies to:
Students and their families
Website users and newsletter subscribers
Staff, tutors, and educational partners
Any individual providing personal data to Synergy Academy


3. What Data We Collect
We may collect the following types of personal data:
Full name, date of birth, nationality, and contact details
Student academic records and enrollment information
Parent or guardian contact informationPayment and billing dataWebsite usage data (IP address, device info, etc.)
We collect this data via forms, email, direct registration, and automated tracking tools (e.g. cookies).


4. Lawful Basis for Processing
We process personal data based on:

Consent (e.g. marketing communications)
Contractual necessity (e.g. course enrollment)
Legal obligation (e.g. safeguarding)
Legitimate interest (e.g. improving educational services)


5. Data Storage and Security
All personal data is stored securely using:
Encrypted servers and secure platforms (e.g. Google Classroom, ClickFunnels, payment gateways)
Access control (only authorized personnel)
Regular security audits
We do not store financial data on our own servers.


6. Data Sharing
We may share data only with:
Educational service providers and tutors under confidentiality
Examination boards or assessment partners (where applicable)
Payment processors and CRM toolsLegal authorities where required
We do not sell or rent your data to third parties.


7. Data Retention
Student and registration data is retained for a maximum of 6 years for legal and academic purposes.
Website and marketing data is stored for up to 24 months, unless renewed by user consent.
You may request deletion at any time, subject to legal obligations.


8. Your Rights Under GDPR
You have the right to:

Access your personal data
Request correction or deletion
Withdraw consent at any time
Object to processing
Request data portability
File a complaint with a supervisory authority

To exercise any of these rights, contact us at info@synergyacademy.online.


9. Data Breach Procedures
In the unlikely event of a data breach:We will notify affected individuals and the appropriate authority within 72 hours
We will document the breach, its impact, and corrective measures


10. Policy Updates
We reserve the right to update this policy. Any changes will be posted here and dated accordingly.


Contact Us
If you have any questions or concerns about this Data Protection Policy or your personal data:

Synergy Academy
📧 Email: info@synergyacademy.online
🌍 Website: www.synergyacademy.online