Privacy Policy
Effective date: 13 August 2025
This Privacy Policy explains how Peak Alliance Hub (“we“, “us“, “our“) collects, uses, shares, and safeguards personal data in connection with our website peakalliancehub.com and our Corporate Director Training Programs (collectively, the “Services“). It also describes the rights and choices available to individuals regarding their personal data.
Quick summary: We collect business contact details and information needed to deliver training (e.g., enrolment data, attendance, learning progress, assessments), plus technical data from cookies/analytics. We never sell personal data. We use service providers (e.g., hosting, learning platforms, conferencing, payments) under contract. You can opt out of marketing and control cookies. See how to contact us in §15.
1) Who we are (Controller)
Peak Alliance Hub — the controller for personal data processed via our public website and commercial operations.
Legal entity & address: [Insert full legal name, registered address]
Email: privacy@peakalliancehub.com
If appointed: Data Protection Officer (DPO): [Insert details]
In some engagements where your employer buys a private training cohort and instructs us to process participant data on their behalf, we may act as a processor and your employer remains the controller. In such cases, our data processing terms with your employer prevail.
2) Scope
This Policy applies to visitors, prospective customers, business contacts, training participants and graduates using our Services. It does not cover third‑party websites or services we link to (see §9), nor employer‑provided systems.
3) What data we collect
a) Data you provide
- Business contact details (name, job title, company, email, phone)
- Account credentials (if you create an account)
- Enrolment information (program selection, cohort, schedule, language)
- Learning records (attendance, assignments, assessments, certifications)
- Communications (emails, chat messages, surveys, feedback forms)
- Billing/contract information (company billing contact, VAT/tax IDs); payment card data is handled by our payment processor and not stored by us.
b) Data from your organization (B2B)
- Participant rosters, corporate role/department, manager/supervisor, sponsorship status
c) Automatically collected
- Device/usage data (IP address, device and browser type, referring/exit pages, pages viewed, timestamps)
- Cookie identifiers, analytics and events (see §10 Cookies)
d) Data from third parties
- Event platforms, conferencing tools (e.g., attendance metadata)
- Learning platforms/LMS (course progress, grades)
- Payment processors (transaction status, last 4 digits, amount, timestamp)
- Marketing/CRM tools (campaign interactions, newsletter subscriptions)
e) Sensitive data
We do not intentionally collect special categories of data. If you provide information about dietary needs, accessibility or health accommodations, we process it only with your consent and limit retention to what’s necessary for the event/program.
4) Purposes and legal bases (EEA/UK/CH)
We use personal data for:
- Service delivery & support (create accounts, enrol participants, run sessions, issue certificates) — performance of a contract or legitimate interests
- Operations & safety (monitoring, troubleshooting, securing our Services) — legitimate interests
- Analytics & improvement (measure effectiveness, develop content and curricula) — legitimate interests or consent where required
- Marketing (newsletters, event invites) — consent or legitimate interests with opt‑out
- Compliance (tax, accounting, legal claims) — legal obligation or legitimate interests
Where we rely on consent, you may withdraw it at any time (see §11).
5) Our legitimate interests
- Delivering and improving professional training programs for corporate directors
- Ensuring security, preventing fraud and abuse
- Understanding program effectiveness and audience preferences
- Marketing to existing business contacts in a B2B context, subject to opt‑out
6) How we share data
We share personal data only as needed:
- Service providers / processors: hosting, cloud infrastructure, email/SMS, LMS/learning tools, video conferencing, analytics, CRM, payment processing, certification/credentialing platforms, event management
- Your organization: progress, attendance, certification outcomes — as agreed in the B2B contract
- Legal & compliance: when required by law or to protect rights, safety, or the integrity of our Services
- Business transfers: in connection with mergers, acquisitions or reorganization, subject to safeguards
We do not sell personal data. We may disclose limited data to advertising/analytics partners; in some jurisdictions this can be considered a “share” — see §12 (California).
7) International transfers
We may transfer personal data outside your country (including to the US). Where required, we use Standard Contractual Clauses (SCCs) and implement supplementary measures. If we rely on the EU‑US Data Privacy Framework or UK/Swiss extensions, details will be provided here: [Insert if applicable].
8) Data retention
We keep personal data only as long as necessary for the purposes described:
- Account & program records: up to 6 years after last interaction (or per contract)
- Learning records & certificates: program duration + 6 years (or per client request)
- Marketing contacts: until you unsubscribe or after 24 months of inactivity
- Logs/analytics: 12–24 months, aggregated thereafter
- Finance/transactions: 10 years or as required by tax/accounting laws
9) Third‑party sites and links
Our website may link to third‑party sites and resources. Their privacy practices are governed by their own policies. We are not responsible for their content or handling of personal data.
10) Cookies and similar technologies
We use cookies, pixels and similar technologies to:
- Enable core features (authentication, preferences, load balancing)
- Measure usage and improve content (analytics)
- (Optional) Reach our audience (ads/retargeting)
Choices: You can manage cookies via our cookie banner/preferences and your browser settings. Blocking some cookies may affect functionality. See our [Cookie Policy] for details. To make an advertising opt‑out effective, you must set it on each device/browser.
11) Your rights
Depending on your location (EEA/UK/Switzerland/other), you may have the right to access, rectify, erase, restrict, object, and data portability, and the right to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority:
- EU/EEA: see the list at https://edpb.europa.eu/about-edpb/about-edpb/members_en
- United Kingdom: Information Commissioner’s Office (ICO)
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
To exercise your rights, contact privacy@peakalliancehub.com. We may need to verify your identity and will respond within the time required by law.
12) Notice to California residents (CCPA/CPRA)
- Categories collected: identifiers, commercial information, internet/usage data, professional information, inferences (limited), and user‑generated content (e.g., feedback)
- Sources: you, your organization, our service providers, and your device/browser
- Purposes: as described in §§4–5
- Disclosure for business purposes: to service providers listed in §6
- Sale/Share: We do not sell personal information for money. We may share limited data with advertising/analytics partners (cross‑context behavioral advertising). You can opt out via our cookie banner or the link “Do Not Sell or Share My Personal Information” on our site.
- Your rights: know/access, correct, delete, portability, opt‑out of sale/sharing, limit sensitive PI (not applicable as we do not use sensitive PI for inferring characteristics), and non‑discrimination. Submit requests at privacy@peakalliancehub.com.
13) Security
We use appropriate technical and organizational measures (encryption, access controls, logging, backups, employee training). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
14) Children’s privacy
Our Services are intended for professionals and are not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us to delete it.
15) How to contact us
Email: privacy@peakalliancehub.com
Postal: [Insert full legal address]
For EU/UK representatives (if applicable): [Insert details]
16) Changes to this Policy
We may update this Policy from time to time. Changes will be posted on this page with a new “Effective date”. If changes are material, we will provide additional notice (e.g., email or banner).
Annex A — Role allocation (B2B programs)
- Public website, self‑service enrolments, marketing → Controller: Peak Alliance Hub
- Private cohorts purchased by employer → Controller: Employer; Processor: Peak Alliance Hub (per Data Processing Addendum)
Annex B — Data Processing Addendum (DPA)
If we act as a processor for your organization, our DPA (including SCCs) applies. Obtain a copy by contacting privacy@peakalliancehub.com.