Privacy Policy

CYPIA LIMITED ("Cypia", "we", "us", "our") — cypia.pro

Effective date: 18 August 2026

This Privacy Policy explains how CYPIA LIMITED collects, uses, shares, and protects personal data of visitors and customers of our website https://cypia.pro (the "Site"), where we sell digital training courses. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

CYPIA LIMITED is the data controller responsible for your personal data. Our contact details are:

  • Business name: CYPIA LIMITED
  • Business address: 13 Freeland Park, Wareham Road, Poole, Dorset, UK, BH16 6FA
  • Email: contact@cypia.pro
  • Phone: +44 7418 602336
  • Website: https://cypia.pro

If you have any questions about this Policy or how we handle your personal data, please contact us using the details above.

2. Information we collect

We collect the following categories of personal data:

  • Identity data — name, username/account login.
  • Contact data — email address, billing address, phone number (if provided).
  • Transaction data — details of courses purchased, order history, amounts paid. We do not store your full card details — payments are processed securely by our third-party payment processor(s) (e.g. Stripe and/or PayPal).
  • Account and course-access data — login credentials (encrypted), course progress, materials accessed, certificates issued.
  • Technical data — IP address, browser type and version, device information, operating system, and other technology on the devices you use to access the Site.
  • Usage data — information about how you use our Site and courses.
  • Marketing and communications data — your preferences in receiving marketing from us and your communication preferences.
  • Cookies data — see Section 7 (Cookies) below.

3. How we collect your data

We collect data directly from you when you: create an account, place an order, contact customer support, subscribe to a newsletter, or otherwise interact with the Site. We also collect data automatically as you navigate the Site (technical and usage data via cookies and similar technologies), and from third parties such as payment processors and analytics providers.

4. How we use your data and our legal basis

We only use your personal data where the law allows us to. Most commonly we rely on the following legal bases:

  • Performance of a contract — to process and deliver your order, provide access to purchased courses, and manage your account.
  • Legal obligation — to keep records required for accounting, tax, and consumer-protection law.
  • Legitimate interests — to operate, secure, and improve the Site and our courses, to prevent fraud, and to communicate with you about your orders, provided this does not override your rights.
  • Consent — for marketing emails and non-essential cookies, which you can withdraw at any time.

5. Sharing your information

We do not sell your personal data. We may share your data with the following categories of third parties, who process it on our behalf or as separate controllers:

  • Payment processors (e.g. Stripe, PayPal) — to securely process your payment.
  • Website hosting and e-commerce platform providers (WordPress/WooCommerce and associated plugins/hosting) — to operate the Site and deliver courses.
  • Email and marketing service providers — to send order confirmations, support messages, and (with consent) marketing communications.
  • Analytics providers (e.g. Google Analytics), where used — to help us understand Site usage.
  • Professional advisers and authorities — where required by law, or to protect our legal rights.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. International transfers

Some of our third-party providers (for example, certain payment or analytics providers) may process data outside the UK or the European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, to protect your data to UK GDPR standards.

7. Cookies

Our Site uses cookies and similar technologies to distinguish you from other users, remember your preferences, keep your basket and login session active, and (where you consent) measure Site performance and personalise marketing. You can set your browser to refuse cookies, or to alert you when cookies are being sent; however, some parts of the Site may not function properly without them. Where required, we will ask for your consent to non-essential cookies via a cookie banner before they are set.

8. Data retention

We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. As a general guide:

  • Order and transaction records: retained for at least 6 years to meet UK tax/accounting obligations.
  • Account data: retained while your account is active, and deleted or anonymised within a reasonable period after closure, unless a longer period is required by law.
  • Marketing data: retained until you unsubscribe or withdraw consent.

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your data, in certain circumstances.
  • Object to or restrict our processing of your data.
  • Request data portability (receive your data in a portable format).
  • Withdraw consent at any time, where processing is based on consent (e.g. marketing emails).

To exercise any of these rights, contact us at contact@cypia.pro. If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Children's privacy

Our Site and courses are intended for adults and are not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Data security

We have implemented appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure, including encrypted checkout and restricted access to personal data on a need-to-know basis.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. This Policy was last updated on 18 August 2026.

13. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: