Privacy Notice

1. Who we are

Global Conference of Bishops and Leaders ("we", "us") operates The 3D Leader course. We are the data controller for the personal information described in this notice. Contact us at hello@dmgacademy.org.

2. What we collect and why

• Account information (email, password hash) — to create and secure your account. Legal basis: performance of a contract.
• Course activity (lesson progress, quiz attempts, certificate completion) — to deliver the course and show you where you left off. Legal basis: performance of a contract.
• Purchase and enrollment records (payment provider transaction ID, environment) — to grant access and handle refunds. Legal basis: performance of a contract; legitimate interests (fraud prevention).
• Support communications (messages you send us) — to help you and improve the Service. Legal basis: legitimate interests.
• Technical & security data (IP address, device/browser info, error logs) — to keep the Service secure and reliable. Legal basis: legitimate interests.

3. Who we share data with

• Paddle — our Merchant of Record. Paddle collects and processes payment information, calculates taxes, issues invoices, and manages refunds and chargebacks. See Paddle's Privacy Notice.
• Hosting & infrastructure providers — for running the site, database, storage, and email delivery.
• Professional advisers (legal, accounting) — where necessary.
• Authorities — where required by law or to protect our rights.

4. Data retention

We keep account and course-activity data for as long as your account is active. If you request deletion, we will remove or anonymize your personal data unless we are required to retain it for legal, tax, or fraud-prevention reasons (for example, purchase records held by Paddle).

5. Security

We use appropriate technical and organizational measures — including encryption in transit, hashed passwords, access controls, and row-level security on our database — to protect your data. No system is perfectly secure, but we take reasonable steps to reduce risk.

6. International transfers

Our providers may process data outside your country of residence, including in the United States and the European Union. Where required by law, we rely on standard contractual clauses or equivalent safeguards.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to processing of your personal data, to withdraw consent where relied upon, and to data portability. You may also lodge a complaint with your local data protection authority. To exercise any of these rights, email us at hello@dmgacademy.org.

8. Cookies

We use only essential cookies and browser storage required to keep you signed in and to remember your progress. We do not use advertising or cross-site tracking cookies.

9. Changes to this notice

We may update this notice from time to time. Material changes will be indicated by updating the date at the top of this page.