Privacy Policy

1. Introduction

Crystal Peak ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website crystal-peak.com or use our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website and services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Job title, company name, industry, professional experience
• Educational Information: Course enrollments, progress, certifications, learning preferences
• Payment Information: Billing address, payment method details (processed securely through third-party providers)
• Communication Data: Records of correspondence, support inquiries, feedback

2.2 Technical Information

We automatically collect certain technical information including:

• IP address and location data
• Browser type and version
• Operating system
• Device information
• Website usage patterns and navigation data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Delivering educational courses and content
• Processing enrollments and payments
• Providing customer support and technical assistance
• Issuing certificates and tracking progress

3.2 Communication

• Responding to inquiries and support requests
• Sending course updates and educational content
• Delivering newsletters and promotional materials (with consent)
• Notifying about policy changes or important announcements

3.3 Improvement and Analytics

• Analyzing website and service usage patterns
• Improving our educational content and delivery methods
• Conducting research and development
• Personalizing user experience and recommendations

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary for performing our educational services
• Consent: Where you have provided explicit consent for marketing communications
• Legitimate Interests: For business operations, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business, including:

• Payment processors and financial institutions
• Cloud hosting and data storage providers
• Email marketing and communication platforms
• Analytics and website optimization services

5.2 Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or to protect our rights, property, or safety.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication systems
• Staff training on data protection principles
• Secure backup and disaster recovery procedures

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Course Data: Maintained for the duration of your enrollment plus 7 years for certification purposes
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Financial Records: 7 years as required by UK accounting standards
• Support Communications: 3 years from last contact

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You can request a copy of the personal information we hold about you.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

8.3 Right to Erasure

You can request deletion of your personal information in certain circumstances.

8.4 Right to Restrict Processing

You can request that we limit the processing of your personal information.

8.5 Right to Data Portability

You can request your personal data in a structured, machine-readable format.

8.6 Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

To exercise these rights, please contact us using the information provided in Section 12.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and analyze website usage. For detailed information about our cookie practices, please refer to our Cookie Policy.

10. International Data Transfers

Your personal information may be processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by UK authorities
• Certification schemes and codes of conduct

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Complaints

If you believe we have not handled your personal information in accordance with this policy or applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

ICO Contact Information:
Website: ico.org.uk
Helpline: 0303 123 1113

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of this policy
• Sending email notifications for significant changes

We encourage you to review this policy regularly to stay informed about how we protect your information.