Privacy Policy

Last Updated: September 2025

MediaCraft Communications is committed to protecting your privacy and maintaining the confidentiality of your personal information. This policy explains how we collect, use, store, and protect your data when you use our website and training services. We adhere to all applicable data protection laws, including the General Data Protection Regulation (GDPR) and Cyprus privacy legislation.

Information We Collect

We collect personal data that you voluntarily provide to us and certain information automatically when you use our website and services.

Personal Information You Provide

  • Contact Information: Name, email address, phone number, mailing address
  • Professional Information: Job title, company name, industry, professional experience level
  • Course Information: Course preferences, learning objectives, educational background
  • Communication Data: Messages sent through contact forms, email correspondence, course inquiries
  • Payment Information: Billing details for course enrollment (processed securely through third-party providers)

Automatically Collected Information

  • Usage Data: IP address, browser type and version, operating system, pages visited
  • Device Information: Device type, screen resolution, language preferences
  • Website Analytics: Page views, time spent on pages, click patterns, referral sources
  • Cookie Data: Preferences and session information as described in our Cookie Policy

How We Use Your Information

We use your personal data for legitimate business purposes related to providing our communication training services and improving your experience.

Service Delivery

  • Process course enrollments and registrations
  • Deliver training programs and educational content
  • Provide customer support and respond to inquiries
  • Issue certificates and track learning progress

Communication

  • Send course updates and important notifications
  • Respond to your questions and requests
  • Provide information about new programs
  • Send educational newsletters (with consent)

Website Improvement

  • Analyze website usage and performance
  • Improve user experience and navigation
  • Develop new features and services
  • Ensure website security and functionality

Legal Compliance

  • Maintain records for tax and regulatory purposes
  • Comply with educational reporting requirements
  • Respond to legal requests and investigations
  • Protect against fraud and security threats

Legal Basis for Processing

Under GDPR and Cyprus data protection law, we process your personal data based on the following legal grounds:

Consent

For marketing communications, newsletters, and optional website features. You can withdraw consent at any time.

Contract Performance

To provide training services, process course enrollments, and fulfill our contractual obligations to students.

Legitimate Interest

For business operations, website analytics, security measures, and improving our services.

Legal Obligation

To comply with tax laws, educational regulations, and other legal requirements in Cyprus and the EU.

Data Protection and Security

We implement comprehensive security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Technical Safeguards

  • SSL/TLS encryption for data transmission
  • Secure server infrastructure and hosting
  • Regular security updates and patches
  • Firewall protection and intrusion detection
  • Encrypted data storage and backups

Administrative Controls

  • Access controls and user authentication
  • Staff training on data protection practices
  • Regular security audits and assessments
  • Data breach response procedures
  • Privacy impact assessments

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay, as required by GDPR.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law.

Contact Form Submissions 3 years
Student Records and Certificates 5 years
Financial and Tax Records 7 years (legal requirement)
Marketing Communications Until consent withdrawn
Website Analytics Data 26 months (Google Analytics default)

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in delivering our services.

Service Providers

  • Website hosting and cloud storage providers
  • Email service providers for communications
  • Payment processors for course enrollment
  • Analytics providers (Google Analytics)
  • Customer support and communication tools

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of others.

Your Privacy Rights

Under GDPR and Cyprus data protection law, you have several rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data in certain circumstances.

Right to Data Portability

Receive your personal data in a structured, machine-readable format.

Right to Object

Object to processing of your personal data for marketing or legitimate interest purposes.

Right to Withdraw Consent

Withdraw consent for processing at any time where consent is the legal basis.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information below. We will respond to your request within one month.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place:

  • Adequacy decisions by the European Commission for countries with adequate data protection laws
  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules for multinational service providers
  • Certification schemes and codes of conduct recognized under GDPR

Contact Information

If you have questions about this privacy policy or our data practices, please contact us:

Data Controller

MediaCraft Communications

54 Ledra Street, 1011 Nicosia, Cyprus

Phone: +357 22 864291

Email: privacy@domain.com

Supervisory Authority

Cyprus Data Protection Commissioner

1 Iasonos Street, 1082 Nicosia, Cyprus

Phone: +357 22 818 456

Website: dataprotection.gov.cy

Policy Updates

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify users through our website, email communication, or other appropriate means. The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy regularly to stay informed about how we protect your privacy.