Privacy Policy

1. Introduction & Controller Identity

This Privacy Policy describes how Mlivazroq Education Ltd operates the mlivazroq website, including our registration and contact forms. It applies to visitors, prospective learners, and anyone who communicates with us through the site. It does not cover third-party websites that may be linked from our pages, such as external privacy resources or platform settings pages.

We aim to be clear about what we collect, why we collect it, and what choices you have. If you do not agree with this policy, you should not use our forms and you should adjust or withdraw cookie consent using the cookie banner and preferences panel.

Effective Date: March 8, 2026.

2. Personal Data We Collect

We collect personal data in a few different ways: when you submit a form, when your browser requests pages and assets from our servers, and when cookies (including optional analytics or marketing cookies) are enabled based on your consent choices.

• Identity and contact details: first name, last name, email address, and other basic details you choose to provide.
• Form content: the content of messages you send through the contact form, and any registration details you submit, including a password. Passwords should be unique and strong; do not reuse passwords from other services.
• Technical data: IP address, browser type and version, device type, operating system, language settings, and approximate location derived from IP (country/region level).
• Usage data: pages viewed, time spent, referrer/landing pages, click paths, and conversion events (for example, whether a form was submitted or a particular page was visited).
• Cookies and identifiers: cookie values and similar identifiers stored in your browser, including consent signals and session continuity.

We do not intentionally collect special-category data (such as health information, religious beliefs, political opinions), financial account details, or government-issued identifiers through this website. Please do not include sensitive information in your message fields.

3. Why We Process Your Data & Legal Basis (GDPR Art. 6)

Under the UK GDPR and EU GDPR, every processing activity needs a lawful basis. Depending on how you use the site, we rely on the legal bases below. If you have questions about a specific processing activity, email us at [email protected].

• Registration and contact requests (responding to you, providing course information, and managing your request): GDPR Art. 6(1)(b) (steps prior to entering a contract) and, where required by local law or our form design, Art. 6(1)(a) (consent).
• Analytics measurement (understanding which pages and content are useful): GDPR Art. 6(1)(a) (consent), activated only if you opt in via cookie preferences.
• Marketing and advertising measurement (remarketing, conversion attribution, and audience building): GDPR Art. 6(1)(a) (consent), activated only if you opt in via cookie preferences.
• Security and fraud prevention (protecting the site from abuse, spam, and attacks): GDPR Art. 6(1)(f) (legitimate interest). We balance this against your rights and use proportionate controls.
• Legal compliance (responding to lawful requests, maintaining records where required): GDPR Art. 6(1)(c) (legal obligation).

Automated Decision-Making (GDPR Art. 22): We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies & Tracking

Cookies are small text files stored on your device. This website also may use similar technologies, such as pixel tags or server-side event forwarding, depending on your cookie consent choices. Our categories match our Cookie Policy and cookie preference controls.

You can review category descriptions and control your preferences at any time using the cookie banner or the “Manage cookie preferences” link in the footer.

5. Consent (EEA/UK)

Users in the EEA and UK receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies activate only after explicit, informed, freely given consent (GDPR Art. 6(1)(a)). Consent is recorded in the cookie_consent browser cookie (retention: 12 months). You may withdraw consent at any time via “Manage cookie preferences” in the footer or by clearing cookies in your browser. Withdrawal does not affect the lawfulness of processing before you withdrew consent.

6. Sharing With Advertising & Service Partners

We use service providers to run the website and, if you consent, to measure and improve our marketing. We share personal data only as needed to provide these services and only for the purposes described in this policy.

• Google LLC (Google Analytics 4, Google Ads, Google Tag Manager, remarketing): may receive cookie IDs, usage data, and conversion events. Reference: https://policies.google.com/privacy
• Meta Platforms (Meta Pixel, Custom/Lookalike Audiences, Conversion API): may receive page views, conversions, audience membership signals, and hashed identifiers depending on configuration. Reference: https://www.facebook.com/privacy/policy
• Cloudflare (CDN and security): may process IP addresses and device characteristics for threat detection and performance. Reference: https://www.cloudflare.com/privacypolicy/

We do not sell personal data. These providers may not use site data for their own independent commercial purposes.

7. International Transfers

Some of our service providers may process data outside the UK/EEA, including in the United States. When transfers occur, we rely on recognized transfer mechanisms such as the EU-US Data Privacy Framework (including the UK Extension where applicable) and, when needed, Standard Contractual Clauses (EU 2021/914) or the UK International Data Transfer Agreement (IDTA) as fallback mechanisms.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy. Retention periods depend on the type of data and the reason for processing.

• Contact submissions: up to 2 years from the last interaction, unless a longer period is needed for dispute handling or legal obligations.
• Analytics data: 14 months in analytics settings (where enabled and available); cookies follow their own lifetimes.
• Marketing cookies: retained according to cookie lifetime (commonly 90 days) when enabled.
• Email correspondence: retained for the duration of the relationship, plus up to 1 year for continuity and audit, unless a longer period is required by law.
• Server logs: typically 90 days for security and diagnostics.
• Cookie consent records: up to 3 years where required for audit purposes.
• Legal and tax records: retained as required by applicable law (often 6 to 10 years, depending on record type).

9. Your Rights (GDPR & UK GDPR)

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal data, as well as other rights under GDPR/UK GDPR:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent at any time (Art. 7(3))
• Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, email [email protected]. We typically respond within 30 days. For complex requests we may extend by up to 60 additional days, as permitted by law. We may ask for information to verify your identity before completing a request.

Supervisory authority resources: https://edpb.europa.eu/ and UK ICO: https://ico.org.uk/.

10. Children

This site is not directed at individuals under 16. We do not knowingly collect personal data from minors. If we learn that we have collected personal data from a child under 16 without appropriate consent, we will delete it promptly.

11. Do Not Track

This website does not respond to Do Not Track (DNT) browser signals. Third-party providers may have their own handling for DNT signals and similar mechanisms.

12. Data Deletion Requests

To request deletion of personal data, email us with the subject line “Data Deletion Request” at [email protected]. We will process the request within 30 days after verifying your identity. In limited cases, we may retain certain records where required by law or where necessary to establish, exercise, or defend legal claims.

13. Business Transfers

If Mlivazroq Education Ltd is involved in a merger, acquisition, asset sale, financing, or insolvency, personal data may be transferred to a successor entity or advisor as part of that transaction. We will provide notice on the website if a transfer materially changes how your personal data is used.

14. California (CCPA / CPRA)

If you are a California resident, you may have rights regarding your personal information under the CCPA/CPRA, including the right to know, delete, correct, and opt out of certain sharing.

Categories of personal information disclosed in the past 12 months may include: identifiers (name, email, IP address, cookie IDs), internet or network activity (page views, interactions), and inferences (preferences or interests inferred for advertising). We disclose these to service providers and, if you opt in to marketing cookies, to advertising partners for cross-context behavioral advertising. We do not sell personal information as defined by the CCPA. We do share for cross-context behavioral advertising when marketing consent is enabled; California residents may opt out via our cookie preferences panel.

To submit a request, email [email protected] with the subject line “California Privacy Request”. We will verify your identity before responding. Authorized agents may submit requests with proof of authorization.

We will not discriminate against you for exercising your rights.

15. Virginia (VCDPA)

If you are a Virginia resident, you may have rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising. We do not sell personal data or engage in profiling producing legal or similarly significant effects.

To submit a request, email [email protected] with the subject line “Virginia Privacy Request”. If we decline to act on your request, you may appeal by emailing with the subject line “Appeal of Refusal — Privacy Request”. We will respond to appeals within 60 days. If your appeal is denied, you may contact the Virginia Attorney General.

16. Nevada

Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will announce them via a notice on the website at least 14 days before the changes take effect. The “Last Updated” date at the top of this page will be updated whenever we make revisions.

18. Contact

For privacy questions, requests, or complaints, contact:

Mlivazroq Education Ltd
119 Salisbury Road
Downend, Bristol BS16 5RP, United Kingdom
Email: [email protected]
Phone: +44 117 970 6148