Privacy Policy (EU GDPR Compliant)

1. Data Controller

The Alchemy of Great Work — Magnum Opus ("we," "us," or "our") is the data controller responsible for your personal information in accordance with Regulation (EU) 2016/679 (GDPR).

2. Information Collected

We collect and process the following categories of personal data:

• Contact Data: Name, email address, phone number (when provided)
• Technical Data: IP address, browser type, device information, cookies
• Transaction Records: Purchase history, course enrollments, payment information
• Communication Data: Correspondence with us, support requests, feedback
• Usage Data: Pages visited, time spent on site, interaction patterns

3. Usage of Data

We process your personal data for the following purposes:

• To provide and deliver our educational services and course materials
• To manage course enrollments and pilot cohort participation
• To send updates, newsletters, and course-related communications (with your consent)
• To process payments and maintain transaction records
• To provide customer support and respond to inquiries
• To improve our website, services, and user experience
• To comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide explicit consent for marketing communications
• Contract Performance: To fulfill our obligations under course enrollment agreements
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interest: To improve our services and ensure website security

5. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Transaction records are retained for accounting and warranty purposes. Data is securely deleted when no longer needed.

6. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at: [email protected]

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure servers and regular security audits
• Access controls and authentication protocols
• Data minimization practices — we collect only what is necessary
• Regular staff training on data protection

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

9. Cookies and Analytics

Our website uses cookies to enhance your experience and analyze site usage. For detailed information about the cookies we use and how to manage them, please see our Cookie & Data Notice.

Analytics data is retained for a maximum of 26 months and is used solely for improving our services.

10. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

You also have the right to lodge a complaint with your local Data Protection Authority if you believe your data protection rights have been violated.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a new effective date. We encourage you to review this policy periodically.