GDPR Privacy Policy
Last updated: August 30, 2024
This Privacy Policy describes how Delay Break Lab ("we," "us," or "our") collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable data protection laws. By using our platform at delaybreaklab.com, you acknowledge the practices described in this document.
1. Data Controller
Delay Break Lab operates as the data controller for personal data collected through this platform. Our registered address is 700 12th St NW STE 700, Washington, DC 20005, United States. For all data protection inquiries, you may contact us at support@delaybreaklab.com or by phone at +19892054159.
2. Legal Basis for Processing
We process your personal data only when a valid legal basis exists under Article 6 of the GDPR. The legal bases we rely upon include:
2.1 Contractual Necessity
Processing is necessary to perform a contract to which you are a party, or to take steps at your request prior to entering into a contract. This applies when you register for an account, enroll in a webinar, or purchase access to our services.
2.2 Legitimate Interests
We process certain data based on our legitimate interests, including improving our platform, ensuring security, preventing fraud, and delivering relevant communications. We conduct balancing tests to ensure our interests do not override your fundamental rights.
2.3 Consent
Where required, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
2.4 Legal Obligation
We may process data where necessary to comply with a legal obligation to which we are subject.
3. Personal Data We Collect
3.1 Data You Provide Directly
We collect information you provide when you create an account, register for webinars, or contact our support team. This includes:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, username | Account creation and identification |
| Contact Data | Email address, phone number | Communication and notifications |
| Payment Data | Billing address, transaction records | Processing purchases |
| Profile Data | Preferences, learning history | Personalizing your experience |
| Communications | Support messages, feedback | Customer support and improvement |
3.2 Data Collected Automatically
When you use our platform, we automatically collect technical and usage data, including IP address, browser type and version, device identifiers, operating system, pages visited, session duration, referral URLs, and interaction logs within webinar sessions.
3.3 Data from Third Parties
We may receive data about you from third-party authentication providers if you choose to register using a social login option, as well as from analytics and advertising partners in aggregated or pseudonymized form.
4. How We Use Your Personal Data
We use collected personal data for the following purposes:
Service Delivery: To register your account, process enrollments, deliver live and recorded webinars, and provide interactive features during sessions.
Communication: To send transactional emails such as registration confirmations, session reminders, and account notifications. Where you have consented, we may also send promotional communications about new webinars and educational content.
Platform Improvement: To analyze usage patterns, diagnose technical issues, conduct research, and improve the functionality and user experience of our platform.
Security and Fraud Prevention: To monitor for unauthorized access, detect fraudulent activity, and protect the integrity of our services and users.
Legal Compliance: To fulfill obligations imposed by applicable law, respond to lawful requests from authorities, and enforce our terms of service.
5. Cookies and Tracking Technologies
5.1 Types of Cookies Used
Our platform uses cookies and similar tracking technologies. These fall into the following categories:
| Type | Purpose | Legal Basis |
|---|---|---|
| Strictly Necessary | Session management, authentication, security | Legitimate interest / contractual necessity |
| Functional | Remembering preferences and settings | Consent |
| Analytical | Understanding platform usage and performance | Consent |
| Marketing | Delivering relevant advertisements | Consent |
5.2 Managing Cookies
You may control cookie preferences through our cookie consent banner or through your browser settings. Disabling certain cookies may affect the functionality of the platform. Strictly necessary cookies cannot be disabled as they are essential for the platform to operate.
6. Data Sharing and Disclosure
6.1 Service Providers
We share personal data with trusted third-party service providers who assist us in operating the platform. These include hosting providers, payment processors, email delivery services, video streaming infrastructure providers, and analytics tools. All processors are bound by data processing agreements and are required to handle your data in accordance with GDPR requirements.
6.2 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, personal data may be transferred as part of that transaction. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
6.3 Legal Requirements
We may disclose personal data when required by law, court order, or regulatory authority, or when we believe disclosure is necessary to protect the rights, property, or safety of our users or the public.
6.4 No Sale of Personal Data
We do not sell, rent, or trade your personal data to third parties for their independent marketing purposes.
7. International Data Transfers
Our platform serves users globally. Personal data may be transferred to and processed in countries outside the European Economic Area (EEA) that may not provide the same level of data protection as your home jurisdiction. When we transfer data internationally, we implement appropriate safeguards, which may include:
Standard Contractual Clauses (SCCs) approved by the European Commission, binding corporate rules, adequacy decisions, or other legally recognized transfer mechanisms. You may request information about the specific safeguards applied to your data by contacting us at support@delaybreaklab.com.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. Our general retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account and profile data | Duration of account plus 3 years after closure |
| Transaction and billing records | 7 years from transaction date |
| Webinar participation logs | 2 years from session date |
| Support communications | 3 years from last interaction |
| Marketing consent records | Until consent is withdrawn plus 1 year |
| Technical and server logs | 12 months from collection |
After the applicable retention period expires, data is securely deleted or anonymized so that it can no longer be associated with any individual.
9. Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us at support@delaybreaklab.com. We will respond to verified requests within 30 days, which may be extended by a further two months where requests are complex or numerous.
9.1 Right of Access
You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about how it is used (Article 15 GDPR).
9.2 Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete personal data without undue delay (Article 16 GDPR).
9.3 Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful, subject to applicable legal exceptions (Article 17 GDPR).
9.4 Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing (Article 18 GDPR).
9.5 Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller (Article 20 GDPR).
9.6 Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing for that purpose immediately (Article 21 GDPR).
9.7 Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects concerning you, unless such processing is necessary for a contract, authorized by law, or based on your explicit consent (Article 22 GDPR).
9.8 Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
9.9 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement occurred, if you believe our processing of your personal data violates applicable data protection law.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include encryption of data in transit using TLS protocols, encryption of sensitive data at rest, access controls and authentication requirements for internal systems, regular security assessments and vulnerability testing, employee training on data protection obligations, and incident response procedures.
Despite these measures, no transmission over the internet or electronic storage system is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach and will inform affected individuals without undue delay where required by law.
11. Children's Privacy
Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from individuals under 16 years of age without verifiable parental or guardian consent. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly. If you believe we may have collected data from a child, please contact us at support@delaybreaklab.com.
12. Third-Party Links and Services
Our platform may contain links to third-party websites, services, or embedded content. This Privacy Policy does not apply to those external services. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the privacy practices or content of external sites.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account. We encourage you to review this policy periodically. Your continued use of the platform after changes become effective constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us through any of the following channels:
Email: support@delaybreaklab.com
Phone: +19892054159
WhatsApp: https://wa.me/19892054159
Viber: viber://chat?number=%2B19892054159
Postal Address: 700 12th St NW STE 700, Washington, DC 20005, United States
We are committed to resolving any concerns you may have about our handling of your personal data and will respond to all legitimate requests in a timely and transparent manner.