Privacy Policy

1. Introduction

This Privacy Policy explains how Viva Mentor Pro collects, uses, stores, and protects personal data when you visit the website, contact us, create an account, subscribe to updates, or purchase a digital product or course.

2. Data Controller

The data controller is:

Vivabook ltd
BG204204746
Email: [email protected]
Address: Bulgaria, 4001 Plovdiv, 24 Belitsa str.
Contact for privacy requests: [email protected]

3. Personal Data We Collect

Depending on how you use the website, we may collect:

  • name;
  • email address;
  • billing details;
  • account login information;
  • purchase and order information;
  • communications you send to us;
  • technical data such as IP address, browser type, device information, and usage data;
  • newsletter subscription preferences;
  • cookie and analytics data, where applicable.

We do not intentionally collect more personal data than is reasonably necessary for the relevant purpose. This reflects the GDPR principles of data minimisation and purpose limitation.

4. How We Use Personal Data

We may use personal data to:

  • provide access to purchased courses and digital products;
  • process payments and manage orders;
  • create and maintain user accounts;
  • communicate about purchases, access, support, and service messages;
  • respond to inquiries;
  • improve website functionality and user experience;
  • send newsletters or marketing communications where legally permitted;
  • comply with legal, tax, accounting, and regulatory obligations;
  • prevent fraud, abuse, and misuse of the platform.

5. Legal Bases for Processing

Where GDPR or similar rules apply, we process personal data on one or more of the following bases:

  • performance of a contract;
  • compliance with a legal obligation;
  • legitimate interests, where those interests are not overridden by your rights;
  • consent, where consent is required.

GDPR requires organisations to identify and rely on a valid legal basis for each processing activity.

6. Cookies and Similar Technologies

We may use cookies and similar technologies for essential site operation, security, analytics, and, where applicable, marketing.

Where required by law, non-essential cookies will only be used after the user has given valid consent.

You can manage cookies through your browser settings and, where available, through the cookie banner on the website.

7. Payment Processing

Payments are handled by third-party payment providers such as Stripe or other processors used on the website. These providers process payment data under their own privacy notices and security standards.

We do not control the privacy practices of third-party payment providers.

8. Sharing of Personal Data

We may share personal data only where reasonably necessary, including with:

  • payment processors;
  • course hosting or website service providers;
  • email/newsletter providers;
  • analytics providers;
  • IT, hosting, or support providers;
  • accountants, legal advisers, or regulators where required.

We do not sell personal data to third parties.

9. International Transfers

Because some service providers may operate internationally, personal data may be processed outside your country.

Where GDPR applies and personal data is transferred outside the EEA, we will use an appropriate legal transfer mechanism where required.

10. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • account administration;
  • course access;
  • transaction records;
  • legal, tax, and accounting obligations;
  • dispute resolution and enforcement of agreements.

The European Commission states that individuals should be told how long their data will be kept.

11. Your Rights

Depending on the applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to certain processing;
  • withdraw consent where processing is based on consent;
  • request data portability where applicable;
  • lodge a complaint with a competent supervisory authority.

The GDPR gives individuals rights over their personal data, including access, correction, erasure, restriction, objection, and more.

12. Privacy Rights in Other Jurisdictions

If you are located in a jurisdiction with specific privacy laws, including the Philippines or India, you may also have additional rights under applicable local law. The Philippines’ Data Privacy Act and India’s Digital Personal Data Protection Act both regulate personal-data processing and require transparency and protection measures.

13. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children’s Data

Our website and courses are intended for adults, including parents and caregivers. We do not knowingly collect personal data directly from children without an appropriate legal basis or required authorisation.

If you believe that a child has submitted personal data to us inappropriately, please contact us so we can review and, where appropriate, delete it.

15. Third-Party Links

The website may contain links to third-party websites or services. We are not responsible for their privacy practices.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised version will be published on this page with an updated effective date.

17. Contact

If you have questions or wish to exercise your privacy rights, contact:

Email: [email protected]