Data Processing Agreement (Summary)

Last Updated: April 26, 2025

This document provides a summary overview of data processing practices relevant to the services provided by Academy Trade Naga. For full details on how we collect, use, and protect personal data, please refer to our comprehensive Privacy Policy.

Scope and Roles

When you use our website or engage with our services (training courses, consulting), Academy Trade Naga acts as the 'Data Controller' for the personal information you provide directly to us (e.g., name, email, contact details).

In situations where we utilize third-party services for specific functions (e.g., payment processing, website analytics, email marketing), these third parties may act as 'Data Processors' on our behalf. We select processors who provide sufficient guarantees regarding data protection.

Types of Data Processed

We process data necessary to provide and improve our services, including:

  • **Contact and Identification Data:** Name, email address, phone number, address.
  • **Service Usage Data:** Information related to course progress, interaction with website features, communication records.
  • **Technical Data:** IP address, browser type, device information (as detailed in our Cookies Policy).
  • **Payment Information:** Handled securely by third-party payment processors; we typically do not store full payment card details.

Purpose of Processing

Data is processed for legitimate business purposes, including:

  • Delivering purchased training content and consulting services.
  • Communicating with clients regarding services, support, and updates.
  • Managing accounts and billing.
  • Analyzing website usage to improve user experience and service offerings (often using anonymized or aggregated data).
  • Complying with legal obligations.
  • Marketing communications (where consent is obtained).

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes secure data storage, access controls, and protocols for handling data breaches. Refer to our Privacy Policy for more details.

Sub-processors

We may use third-party sub-processors for specific tasks (e.g., cloud hosting, email delivery). We maintain agreements with these sub-processors to ensure they adhere to data protection standards compatible with our own policies and applicable laws.

Data Subject Rights

You have rights regarding your personal data, including access, correction, deletion, and objection to processing, as outlined in our Privacy Policy and subject to applicable laws. Please contact us to exercise these rights.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Contact Us

For questions regarding our data processing practices or this summary, please contact us:

Email: [email protected]