Privacy Policy

Our Commitment to Privacy

Growth Compass respects your privacy and is committed to protecting your personal information. This privacy policy explains how we collect, use, store, and protect data you provide when using our website and enrolling in our educational programs.

We process personal data in accordance with Finnish data protection legislation and the General Data Protection Regulation (GDPR). This policy applies to all information collected through our website, during course enrollment, and throughout program participation.

1. Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when contacting us or enrolling in courses:

• • Contact Details: Name, email address, phone number, mailing address
• • Enrollment Information: Course selections, educational background, professional experience
• • Payment Information: Billing details processed securely through third-party payment providers
• • Communication Data: Messages sent through contact forms, email correspondence, course feedback

Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• • Usage Data: Pages visited, time spent on pages, navigation paths, referral sources
• • Device Information: Browser type, operating system, device identifiers, IP address
• • Cookie Data: Information stored through cookies as described in our Cookie Policy

2. How We Use Your Information

We process your personal data for the following purposes:

Service Delivery

• • Processing course enrollments and managing participant records
• • Providing course materials, resources, and educational content
• • Communicating about schedules, assignments, and program updates
• • Issuing certificates and maintaining educational records

Business Operations

• • Responding to inquiries and providing customer support
• • Processing payments and maintaining financial records
• • Improving our courses, website, and services
• • Conducting internal research and program evaluation

Marketing Communications

• • Sending information about new courses and programs (with your consent)
• • Sharing educational resources and industry insights
• • Inviting alumni to networking events and workshops

3. Legal Basis for Processing

We process your personal data based on:

• Consent: For marketing communications and optional analytics cookies
• Contract Performance: To provide educational services you've enrolled in
• Legitimate Interest: For website improvement, business operations, and fraud prevention
• Legal Obligation: To comply with Finnish tax laws and educational record requirements

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

Service Providers

• • Payment Processors: To handle secure payment transactions
• • Email Services: To send course communications and newsletters
• • Analytics Providers: To understand website usage patterns (Google Analytics)
• • Cloud Hosting: For secure data storage and backup services

Legal Requirements

We may disclose information when required by Finnish law, court orders, or to protect our legal rights and safety.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• • Encryption: Data transmission secured with SSL/TLS encryption
• • Access Controls: Limited employee access to personal data based on job requirements
• • Secure Storage: Data stored on protected servers with regular backups
• • Regular Audits: Periodic security assessments and updates to protection measures
• • Incident Response: Procedures for breach notification within 72 hours as required by GDPR

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• • Contact Form Submissions: 3 years from last contact
• • Course Records: 5 years after program completion for educational documentation
• • Financial Records: 7 years as required by Finnish accounting regulations
• • Marketing Data: Until consent is withdrawn or account is inactive for 2 years
• • Website Analytics: Up to 26 months through Google Analytics

7. Your Rights

Under GDPR and Finnish data protection law, you have the following rights:

Access and Portability

• • Right to Access: Request copies of your personal data we hold
• • Right to Portability: Receive your data in a structured, commonly used format

Correction and Deletion

• • Right to Rectification: Request correction of inaccurate or incomplete data
• • Right to Erasure: Request deletion of your personal data (subject to legal obligations)

Control and Objection

• • Right to Restrict Processing: Limit how we use your data in certain circumstances
• • Right to Object: Object to processing based on legitimate interests or for marketing purposes
• • Right to Withdraw Consent: Withdraw consent for marketing communications at any time

Exercise Your Rights

To exercise any of these rights, contact us at privacy@domain.com. We will respond to your request within 30 days.

8. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). When we use service providers located outside the EEA, we ensure appropriate safeguards are in place through:

• • EU-approved standard contractual clauses
• • Adequacy decisions by the European Commission
• • Privacy Shield certification (where applicable)

9. Children's Privacy

Our services are directed to individuals aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child without parental consent, we will delete that information promptly.

10. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will:

• • Update the "Last Updated" date at the top of this page
• • Notify enrolled students via email about significant changes
• • Post a notice on our website for 30 days