Privacy Policy

1. Introduction & Controller Identity

This Privacy Policy explains how kadlivirex (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit this website and when you register your interest in our educational programme in women’s handbag manufacturing. The policy is written to be practical: it describes what information we receive, why we use it, how long we keep it, and what choices you have.

Data Controller: Kadlivirex Education Ltd, Zápasnická 881/4, Hostivař, 102 00 Praha, Czechia. If you have questions about this policy or want to exercise your rights, contact us at [email protected].

Effective Date: March 14, 2026. We may update this Privacy Policy as our site evolves, for example if we add new registration workflows, improve security controls, or change how we measure performance. The “Last Updated” date at the top shows when the latest version took effect.

2. Personal Data We Collect

The site is designed to collect only what is needed for education-related communication and for basic site operations. Depending on how you interact with the site, we may collect the following categories of personal data:

• Identity and contact details such as your name and email address when you use our registration form.
• Form content you choose to provide, such as a short note or context you send to us by email after registering. (Our on-site form is limited, but you may email questions.)
• Technical data such as IP address, browser type, device identifiers, operating system, language preferences, and approximate location inferred from IP.
• Usage data such as pages viewed, time on page, scroll or interaction events, referrer URL, and click paths.
• Cookies and identifiers stored in your browser (see Section 4) including your cookie preference choice.
• Conversion events such as whether a registration form was successfully submitted (measured in a privacy-respectful way and subject to your cookie choices).

We do not intentionally collect special-category data (such as health data, religious beliefs, political opinions), financial account details, or government identification numbers through this website. Please do not include sensitive information in emails or other communications unless it is strictly necessary; if it is not necessary for education-related support, it is better left out.

3. Why We Process Personal Data & Legal Basis (GDPR Art. 6)

We process personal data only when there is a lawful basis to do so. If you are in the EEA or the UK, GDPR/UK GDPR requires us to identify the legal basis for processing. In practice, the basis depends on the purpose:

• Registration and communication (responding to your request, sending course information, coordinating next steps): GDPR Art. 6(1)(b) (performance of a contract or pre-contract steps) and, where required by local law, Art. 6(1)(a) (consent).
• Analytics (understanding how the site is used so we can improve clarity, speed, and content): GDPR Art. 6(1)(a) (consent), where analytics cookies are used.
• Marketing and remarketing (measuring advertising performance and showing relevant ads): GDPR Art. 6(1)(a) (consent), where marketing cookies are used.
• Security and fraud prevention (protecting the site, preventing abuse, ensuring availability): GDPR Art. 6(1)(f) (legitimate interests). This includes basic logging and protective measures.
• Legal compliance (responding to lawful requests, maintaining records when required): GDPR Art. 6(1)(c) (legal obligation).

Automated Decision-Making (GDPR Art. 22): We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. If we use marketing audiences, they are used for ad measurement and relevance, not for decisions with legal impact.

4. Cookies & Tracking

Cookies are small text files placed on your device to store preferences and support site functions. This site also may use similar technologies such as pixel tags and server-side event calls for measurement. We group cookies into three categories: Essential, Analytics, and Marketing. Essential cookies are required for the site to work; Analytics and Marketing cookies are optional and require consent in the EEA/UK and in other regions where consent is required by law.

Essential (always active)

Essential cookies support core site operations, such as keeping the site stable, remembering your cookie preferences, and maintaining basic session continuity. Examples include _site_session and cookie_consent. Retention ranges from session-only to up to 12 months depending on the cookie.

Analytics (optional, consent-based)

Analytics cookies help us understand how visitors use the site (for example which pages are read most and where users drop off). When enabled, we may use Google Analytics 4 (GA4) configured to minimize unnecessary data collection and with IP anonymization where supported. Example cookies include _ga and _ga_XXXXXXXXXX. Data retention is typically set to 14 months for analytics data.

Marketing (optional, consent-based)

Marketing cookies are used to measure advertising performance and, where applicable, to show ads that are more relevant. When enabled, examples may include Google Ads cookies such as _gcl_au and Meta Pixel cookies such as _fbp and _fbc. These identifiers can support remarketing, conversion attribution, and audience building (including custom and lookalike audiences) depending on how campaigns are configured.

Beyond cookies, advertising and measurement technologies may include pixel tags (for example scripts like gtag.js or Meta Pixel) and server-side measurement (for example via Meta Conversion API or server-side tag management). If those tools are implemented, they operate according to your consent preferences and applicable law. Where supported, identifiers may be hashed before transmission.

5. Consent (EEA/UK)

Users in the EEA and the UK receive a consent notice under GDPR/UK GDPR. Analytics and Marketing cookies activate only after explicit, informed, freely given consent (GDPR Art. 6(1)(a)). Your consent choice is recorded in the cookie_consent browser cookie, which is typically stored for 12 months.

You can withdraw or change consent at any time by using the “Manage cookie preferences” link in the site footer, or by clearing cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing based on consent before it was withdrawn.

6. Sharing With Advertising & Service Partners

We use a limited set of service providers to help run the website and measure performance. Depending on your cookie choices and the specific configuration used at a given time, we may share certain data with:

• Google LLC (Google Analytics 4, Google Ads, Tag Manager, remarketing): cookie identifiers, usage data, and conversion events. Privacy information: https://policies.google.com/privacy.
• Meta Platforms, Inc. (Meta Pixel, Custom/Lookalike Audiences, Conversion API): page views, conversion events, audience membership signals, and (when configured) hashed identifiers. Privacy information: https://www.facebook.com/privacy/policy.
• Cloudflare (CDN and security): IP-based threat detection and performance optimization. Privacy information: https://www.cloudflare.com/privacypolicy/.

We do not sell personal data. Where advertising partners are used, data is shared for measurement and advertising functions under your consent choices and applicable law. We do not permit these providers to use site data for their own independent commercial purposes beyond providing their services to us, subject to their contractual and platform terms.

7. International Transfers

Some of our service providers may process data outside the EEA/UK, including in the United States. When personal data is transferred internationally, we rely on recognized transfer mechanisms. These can include the EU–US Data Privacy Framework (since July 2023) and the UK Extension to the DPF, where applicable, and Standard Contractual Clauses (EU 2021/914) as a fallback. For UK transfers, the UK International Data Transfer Agreement (IDTA) may be used as a fallback where appropriate.

We aim to minimize the amount of personal data involved in international transfers and to use privacy-respecting configuration settings where available (for example, reduced data collection in analytics tools).

8. Retention

We keep personal data only for as long as needed for the purposes described in this policy:

• Registration submissions: typically up to 2 years from the last interaction, unless you request deletion sooner.
• Analytics data: typically 14 months (tool setting), where analytics cookies are enabled.
• Marketing cookies: according to cookie lifetime (commonly 90 days for certain ad cookies), where marketing cookies are enabled.
• Email correspondence: for the duration of our education-related relationship, plus up to 1 year for continuity, unless a longer period is required by law.
• Server/security logs: typically up to 90 days, unless needed longer for investigation of abuse or security incidents.
• Cookie consent record: up to 3 years for audit and compliance, where required.
• Legal/tax records: retained as required by applicable law (often 6–10 years for invoicing records, if applicable).

9. Your Rights (GDPR & UK GDPR)

If GDPR/UK GDPR applies to you, you may have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and the right to withdraw consent at any time (Art. 7(3)). You also have the right to lodge a complaint with a supervisory authority (Art. 77).

To exercise your rights, email [email protected]. We respond within 30 days. If a request is complex, the response time may be extended by up to 60 additional days as permitted by law. For security, we may ask for reasonable information to verify your identity.

Supervisory authority resources: EU general guidance is available at https://edpb.europa.eu. UK residents can contact the ICO at https://ico.org.uk. Other national authorities include Germany (BfDI) https://www.bfdi.bund.de, France (CNIL) https://www.cnil.fr, Poland (UODO) https://uodo.gov.pl, and Spain (AEPD) https://www.aepd.es.

10. Children

This website is not directed at individuals under 16. We do not knowingly collect personal data from minors. If you believe a child under 16 has provided us personal data without verifiable parental consent, contact [email protected] and we will delete the information promptly.

11. Do Not Track

This website does not respond to “Do Not Track” (DNT) browser signals. Third-party providers may have their own mechanisms for handling DNT or similar signals; those controls are governed by their policies.

12. Data Deletion Requests

To request deletion of your personal data, email [email protected] with the subject line “Data Deletion Request”. We will confirm receipt and complete deletion within 30 days after verifying identity. We may retain limited information if required by law, or if necessary to establish, exercise, or defend legal claims.

13. Business Transfers

If Kadlivirex Education Ltd is involved in a merger, acquisition, asset sale, financing, reorganization, insolvency, or similar event, personal data may be transferred to a successor entity as part of that transaction. If such a transfer materially changes how personal data is used, we will provide notice on the website.

14. California (CCPA / CPRA)

This section applies to California residents to the extent the California Consumer Privacy Act (CCPA) as amended by the CPRA applies. In the past 12 months, we may have collected the following categories of personal information: identifiers (such as name, email, IP address, and device identifiers), internet/network activity (such as browsing interactions on this site), and inferences (such as interests used for advertising relevance when marketing cookies are enabled).

We do not sell personal information as defined by CCPA. We may share personal information for cross-context behavioral advertising when Marketing cookies are enabled. California residents may opt out of sharing for targeted advertising via the cookie preferences panel accessible from “Manage cookie preferences” in the footer.

California rights may include: the right to know, delete, correct, and opt out of sale/sharing, and the right to non-discrimination. To submit a request, email [email protected] with the subject “California Privacy Request”. We may need to verify your identity. Authorized agents may submit requests with proof of authorization.

15. Virginia (VCDPA)

If the Virginia Consumer Data Protection Act (VCDPA) applies to you, you may have rights to access, correct, delete, and obtain a copy of personal data you provided, and to opt out of targeted advertising. We do not sell personal data and we do not engage in profiling that produces legal or similarly significant effects.

To submit a request, email [email protected] with the subject “Virginia Privacy Request”. If we decline a request, you may appeal by emailing with the subject “Appeal of Refusal — Privacy Request”. We will respond to appeals within 60 days. If the appeal is denied, you may contact the Virginia Attorney General.

16. Nevada

Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Policy

If we make material changes to this Privacy Policy, we will post a clear notice on the website at least 14 days before the changes take effect when feasible. The “Last Updated” date will be refreshed whenever the policy is revised.

18. Contact

Kadlivirex Education Ltd
Zápasnická 881/4
Hostivař, 102 00 Praha, Czechia
Email: [email protected]