gralvostin.top

Privacy Policy

Last updated: 15 January 2026

Introduction

gralvostin.top Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, and protect your personal information when you use our online course performance analytics platform and website.

We are the data controller for the purposes of UK data protection law and the General Data Protection Regulation (GDPR). Our registered office is located at 243 High Street, London EC5M 6HU, United Kingdom. Registration Number: 74125896.

Data We Collect

We collect various types of personal data to provide and improve our services. The data we collect includes:

  • Contact Information: Name, email address, phone number, and company details when you contact us or register for our services
  • Account Data: Username, password, and account preferences for platform access
  • Usage Data: Information about how you use our website and platform, including IP address, browser type, pages visited, and interaction patterns
  • Analytics Data: Educational performance data, course metrics, and learning analytics when using our platform
  • Communication Data: Records of correspondence and support interactions
  • Technical Data: Device information, browser settings, and system configuration details

How We Use Your Information

We use your personal data for various purposes based on different legal grounds. How we use your data includes:

  • Service Provision: To provide our analytics platform, process your requests, and deliver the services you have requested
  • Account Management: To create and maintain your account, authenticate access, and manage your platform preferences
  • Communication: To respond to your enquiries, provide customer support, and send important service-related notifications
  • Platform Improvement: To analyse usage patterns, improve our services, and develop new features
  • Legal Compliance: To comply with legal obligations and protect our legitimate business interests
  • Marketing: To send you relevant information about our services (with your consent where required)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to perform our services and fulfil our contractual obligations
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and ensuring security
  • Consent: Where you have given explicit consent for specific processing activities
  • Legal Obligation: Processing required to comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in delivering our services
  • Legal Requirements: When required by law or to protect our legal rights and interests
  • Business Transfers: In connection with mergers, acquisitions, or other business transactions
  • Consent: When you have given explicit consent for specific sharing purposes

International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK and European Economic Area. When we transfer your data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Our data retention periods are based on:

  • The duration of your relationship with us
  • Legal and regulatory requirements
  • The need to resolve disputes or enforce agreements
  • Legitimate business purposes

Generally, we retain account data for the duration of your active account plus three years after account closure, and marketing data until you unsubscribe or withdraw consent.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption, access controls, regular security assessments, and staff training.

Your Rights

Under GDPR and UK data protection law, you have the following rights regarding your personal data:

  • Access: The right to request copies of your personal data
  • Rectification: The right to request correction of inaccurate or incomplete data
  • Erasure: The right to request deletion of your personal data in certain circumstances
  • Restriction: The right to request limitation of processing in certain situations
  • Portability: The right to receive your data in a portable format
  • Objection: The right to object to processing based on legitimate interests
  • Withdraw Consent: The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided below.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16 without appropriate parental consent. If you believe we have collected information from a child under 16, please contact us immediately.

Third-Party Services

Our website and platform may contain links to third-party websites and services. This privacy policy does not apply to third-party services, and we are not responsible for their privacy practices. We recommend reviewing the privacy policies of any third-party services you use.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by posting the updated policy on our website and updating the "last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this privacy policy or wish to exercise your data protection rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, if you believe your data protection rights have been violated. You can contact the ICO at ico.org.uk.