General Data Protection Regulation (GDPR) Policy

Last Updated: June 19, 2025

Stillvaluedgifts ("we," "us," or "our") is committed to protecting and respecting your privacy. This GDPR Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

Stillvaluedgifts is the data controller responsible for your personal data. If you have any questions about this policy or our data processing practices, please contact us at:

Email: info@stillvaluedgifts.com
Website: stillvaluedgifts.com

2. Personal Data We Collect

We may collect and process the following categories of personal data about you:

2.1 Information You Provide Directly

Contact information (name, email address, phone number)
Account credentials (username, password)
Profile information (preferences, interests, educational background)
Communication data (messages, inquiries, feedback)
Payment information (billing address, transaction details)
User-generated content (comments, forum posts, course submissions)

2.2 Information Collected Automatically

Device information (IP address, browser type, operating system)
Usage data (pages visited, time spent, navigation patterns)
Cookies and similar tracking technologies
Log data (access times, error logs, system activity)
Location data (general geographic location based on IP address)

2.3 Information from Third Parties

Social media profile information (if you connect social accounts)
Analytics providers
Payment processors
Marketing partners

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

3.1 Consent

Where you have given explicit consent for us to process your personal data for specific purposes, such as marketing communications or optional features.

3.2 Contract Performance

Processing necessary to provide services you have requested, manage your account, process transactions, and fulfill our contractual obligations.

3.3 Legitimate Interests

Processing necessary for our legitimate business interests, including:

Improving and optimizing our services
Analyzing user behavior and preferences
Preventing fraud and ensuring security
Internal administration and business development

3.4 Legal Obligation

Processing necessary to comply with legal requirements, regulatory obligations, court orders, or government requests.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

Providing, maintaining, and improving our educational services
Creating and managing your user account
Processing enrollments, payments, and transactions
Delivering educational content, resources, and materials
Communicating with you about services, updates, and support
Personalizing your learning experience and content recommendations
Sending newsletters, promotional materials, and marketing communications (with consent)
Analyzing usage patterns and improving platform functionality
Detecting, preventing, and addressing technical issues and security threats
Complying with legal obligations and enforcing our terms
Conducting research and developing new features
Generating analytics and statistical information

5. Data Sharing and Disclosure

We may share your personal data with third parties in the following circumstances:

5.1 Service Providers

We engage third-party service providers to perform functions on our behalf, including:

Cloud hosting and data storage providers
Payment processors and financial institutions
Email delivery and communication platforms
Analytics and performance monitoring services
Customer support and help desk providers
Marketing and advertising partners

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of the business transaction.

5.3 Legal Requirements

We may disclose your personal data when required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.

5.4 With Your Consent

We may share your personal data with third parties when you have given explicit consent for such sharing.

6. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

6.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of your personal data we hold.

6.2 Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.

6.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when:

The data is no longer necessary for the purposes collected
You withdraw consent and no other legal basis exists
You object to processing and no overriding legitimate grounds exist
The data has been unlawfully processed
Erasure is required to comply with a legal obligation

6.4 Right to Restriction of Processing

You have the right to request restriction of processing your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

6.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

6.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

6.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection laws.

7. Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at info@stillvaluedgifts.com. We will respond to your request within one month, though this period may be extended by two additional months if necessary, considering the complexity of your request.

We may request specific information from you to verify your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized persons.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Account information: retained while your account is active and for a reasonable period afterward
Transaction records: retained as required by applicable laws and regulations
Communication records: retained for customer service and legal purposes
Marketing data: retained until you withdraw consent or unsubscribe
Analytics data: typically anonymized and retained for statistical purposes

When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable legal requirements.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by the European Commission
Adequacy decisions recognizing equivalent data protection standards
Binding corporate rules for intra-group transfers
Other legally approved transfer mechanisms

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

Encryption of data in transit and at rest
Access controls and authentication mechanisms
Regular security assessments and audits
Employee training on data protection practices
Incident response and breach notification procedures
Physical security measures for data centers

While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.

11. Automated Decision-Making and Profiling

We may use automated decision-making and profiling to personalize your learning experience, recommend content, and improve our services. You have the right to:

Be informed about the logic involved in automated decision-making
Object to automated decision-making and profiling
Request human intervention in automated decisions
Express your point of view regarding automated decisions
Contest decisions made solely by automated means

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children without appropriate parental consent. If you believe we have collected personal data from a child without proper consent, please contact us immediately so we can delete the information.

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our services. You can control cookies through your browser settings and other tools. For detailed information about our use of cookies, please refer to our Cookie Policy.

14. Third-Party Links

Our platform may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

15. Data Protection Officer

If you have questions or concerns about our data protection practices, you may contact our Data Protection Officer at info@stillvaluedgifts.com.

16. Changes to This Policy

We may update this GDPR Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Posting the updated policy on our website with a new "Last Updated" date
Sending email notifications for significant changes
Displaying prominent notices on our platform

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

17. Contact Information

If you have any questions, concerns, or requests regarding this GDPR Policy or our data processing practices, please contact us:

Email: info@stillvaluedgifts.com
Website: stillvaluedgifts.com

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.

This GDPR Policy is designed to comply with the General Data Protection Regulation and related data protection laws. By using our services, you acknowledge that you have read and understood this policy.