Privacy & Data Protection
Last updated: 10/8/2026
Dr. S. Pujah Academy respects your privacy and handles personal data lawfully, fairly and transparently. This notice explains what we collect, why, how long we keep it, and your rights.
Who we are
Dr. S. Pujah Academy (learn.spujah.com) is the data controller for the information described here. Contact us about any data matter at spujahgrow@gmail.com.
What we collect
- Account data — name, email address, password (stored encrypted), and anything you add to your profile.
- Learning data — lessons completed, quiz attempts and scores, certificates issued.
- Enquiry data — messages, support tickets and waiting-list entries, including phone or WhatsApp number, country and preferred city where you provide them.
- Purchase data — what you bought and when. Card details are never seen or stored by us; payments are handled by our payment provider.
- Health information — only if you voluntarily disclose it before practical sessions so we can keep you safe. This is special-category data and is kept confidential and shared only with the trainer concerned.
- Technical data — device, browser and usage analytics collected through cookies and analytics tools.
Why we use it, and our lawful basis
- To provide the Academy — deliver courses, save progress, issue certificates (contract).
- To support you — answer enquiries and complaints (contract / legitimate interests).
- To keep you safe in practical training (explicit consent for health data).
- To improve the site and understand what learners need (legitimate interests / consent for analytics).
- To meet legal and accreditation obligations — records required by accrediting bodies and tax law (legal obligation).
We do not sell your data, and we do not use it for automated decision-making or profiling.
Who we share it with
Only with service providers necessary to run the Academy — our hosting and database provider, email delivery provider, payment provider, and analytics tools — each under contract to protect your data. We may share records with an accrediting body where required to verify certification, or with authorities where the law requires.
International transfers
Our providers may process data outside your country. Where that happens we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
- Account and learning records: while your account is active, then 3 years.
- Certificates and assessment evidence: 7 years, for verification and accreditation audits.
- Enquiries, support tickets and complaints: 3 years.
- Purchase and tax records: as required by law, normally 5–7 years.
Security
Data is held in access-controlled databases with row-level security, encrypted in transit, with administrative access limited to authorised staff. Course files are stored in private storage served through expiring links.
Cookies
We use functional cookies to keep you signed in, and analytics and marketing tags (Google Analytics, Google Tag Manager, Meta Pixel) to understand traffic. You can block or delete cookies in your browser; functional cookies are required for sign-in to work.
Your rights
You may request access to your data, correction, deletion, restriction of processing, a portable copy, or object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. Email spujahgrow@gmail.com — we respond within 30 days, free of charge.
Children
The Academy is intended for adults. We do not knowingly create accounts for anyone under 18 without written parental consent.
Complaints
If you are unhappy with how we handled your data, use our Complaints Handling Policy, or contact the data protection authority in your country.