top of page

Privacy Policy

Effective Date: 27/10/2025
Last Updated: 27/10/2025

​

This Privacy Policy explains how NABU ACADEMY (“we”, “us”, or “our”) collects, uses, stores, discloses, and protects personal information that individuals provide when submitting enquiries for consultancy services. NABU ACADEMY is committed to safeguarding personal data and complying with applicable global data protection laws including, where relevant, the EU/EEA General Data Protection Regulation (GDPR), United Kingdom GDPR, California Consumer Privacy Act (CCPA/CPRA), and other international privacy legislation.

1. Personal Data We Collect

We may collect the following categories of personal information when an enquiry is submitted:

  • Name and contact details (email address, phone number, mailing address)

  • Company or organisation details

  • Job title or role

  • Nature of the enquiry and related project information

  • Any additional details voluntarily provided in forms or correspondence

  • Technical data collected automatically (IP address, browser type, device information, and website usage data) via cookies and similar technologies

We do not intentionally collect sensitive personal data unless explicitly provided and necessary for a specific purpose, with consent where required.

2. Purpose of Data Collection

Personal data is processed for the following legitimate business purposes:

  • Responding to enquiries and providing requested consultancy information

  • Administering business relationships and maintaining client records

  • Managing marketing preferences and sending relevant updates where permitted

  • Improving service delivery and user experience

  • Complying with legal and regulatory obligations

  • Ensuring security, fraud prevention, and internal governance processes

3. Legal Basis for Processing (GDPR and International Equivalents)

If relevant under applicable law, NABU ACADEMY may rely on the following legal bases:

  • Performance of a contract or steps taken prior to entering a contract

  • Legitimate interests relating to business operations and service provision

  • Consent for marketing or other purposes where required by law

  • Compliance with legal obligations

Consent may be withdrawn at any time where processing is based on consent.

4. Data Sharing and Disclosure

We may share personal data with:

  • Internal authorised employees on a need-to-know basis

  • Professional service providers such as IT, hosting, and administrative support vendors under confidentiality obligations

  • Regulatory or law enforcement agencies where legally required

Personal data is not sold to any third parties. Any international transfers will include safeguards such as Standard Contractual Clauses or reliance on adequacy decisions.

5. Data Retention

Personal data will be retained only for as long as necessary to achieve the purposes described in this Policy, including fulfilling legal, accounting, or reporting requirements. Data that is no longer needed will be securely deleted or anonymised.

6. Data Security

We apply administrative, technical, and physical controls to protect personal data against loss, unauthorized access, misuse, alteration, or disclosure. Although reasonable safeguards are in place, no system can guarantee absolute security.

7. Individual Rights

Subject to applicable legislation, individuals may have the right to:

  • Request access to personal data held

  • Rectify inaccurate data

  • Request deletion or restriction of processing

  • Withdraw consent

  • Object to certain processing activities

  • Request data portability where applicable

  • Lodge a complaint with a supervisory authority

Residents in certain jurisdictions, including California, may have additional rights and opt-out options.

Such requests can be made using the contact details below.

8. Cookies and Tracking Technologies

​Our website may use cookies and similar tools to improve functionality and analyse usage. Visitors can manage cookie preferences through browser settings or any provided consent banner, subject to essential operational cookies.

9. Children’s Data

Our services are not designed for children. We do not knowingly collect personal data from individuals under 16 years of age (or local age equivalent). Any data inadvertently collected will be deleted upon notification.

10. International Data Transfers

Where data is processed outside the user’s jurisdiction, we ensure that appropriate safeguards are applied to maintain a level of protection equivalent to the relevant local data protection laws.

11. Changes to This Policy

This Policy may be updated periodically to reflect operational or legal changes. The latest version will be published with an updated “Last Updated” date.

12. Contact Information

For any questions regarding this Policy or to exercise rights:
 

NABU ACADEMY
info@nabu.academy
 

bottom of page