Privacy Policy
Last updated: July 6, 2026
This Privacy Policy describes how Cedar Works ("we," "us," or "our") collects, uses, stores, and shares information about you when you access or use our website and services available at cedarworks.eu (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this policy.
1. Information We Collect
1.1 Information You Provide Directly
We collect information you provide when you register for an account, enroll in a course, contact us, or otherwise interact with the Service. This may include:
| Category | Examples |
|---|---|
| Identity data | Full name, username, profile picture |
| Contact data | Email address, phone number, mailing address |
| Account credentials | Password (stored in hashed form), security questions |
| Payment data | Billing address, payment method details (processed by third-party providers) |
| Communications | Messages sent to support, feedback submissions, survey responses |
1.2 Information Collected Automatically
When you use the Service, certain technical information is collected automatically, including:
| Category | Examples |
|---|---|
| Device data | IP address, browser type and version, operating system, device identifiers |
| Usage data | Pages visited, content accessed, time spent, click paths, search queries |
| Log data | Access timestamps, error logs, referral URLs |
| Cookie data | Session tokens, preference settings, analytics identifiers |
1.3 Information from Third Parties
We may receive information about you from third-party sources such as authentication providers (if you sign in using a third-party account), payment processors, and analytics partners. This information is combined with data we hold about you only where permitted by applicable law.
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Description |
|---|---|
| Service delivery | Creating and managing your account, providing access to courses and learning materials |
| Personalization | Adapting content recommendations and learning paths based on your activity |
| Communication | Sending transactional emails, service updates, and responses to your inquiries |
| Marketing | Sending promotional content where you have provided consent or where permitted by law |
| Analytics | Understanding how the Service is used to improve functionality and content |
| Security | Detecting, preventing, and responding to fraud, abuse, and technical issues |
| Legal obligations | Complying with applicable laws, regulations, and enforceable requests |
3. Legal Bases for Processing
We process your personal data on one or more of the following legal bases:
| Legal Basis | When It Applies |
|---|---|
| Contract performance | Processing necessary to provide the Service you have requested |
| Legitimate interests | Improving the Service, fraud prevention, and internal analytics, where not overridden by your rights |
| Consent | Marketing communications and non-essential cookies, where you have given explicit consent |
| Legal obligation | Where processing is required to comply with a legal or regulatory requirement |
4. Cookies and Tracking Technologies
4.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for the Service to function (authentication, session management) | Session or up to 1 year |
| Functional | Remembering your preferences and settings | Up to 1 year |
| Analytics | Measuring usage patterns and Service performance | Up to 2 years |
| Marketing | Delivering relevant promotional content (only with consent) | Up to 1 year |
4.2 Managing Cookies
You may control or disable cookies through your browser settings. Disabling essential cookies may impair the functionality of the Service. You can withdraw consent for non-essential cookies at any time through our cookie preference centre.
5. Sharing of Information
We do not sell your personal data. We may share your information with the following categories of recipients:
| Recipient | Reason for Sharing |
|---|---|
| Service providers | Hosting, payment processing, email delivery, analytics, and customer support tools |
| Business partners | Where you have enrolled in jointly offered programmes or content |
| Legal authorities | Where required by law, court order, or to protect the rights and safety of users |
| Successors | In the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections |
All third-party service providers are contractually required to process your data only as instructed by us and to maintain appropriate security measures.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, it is securely deleted or anonymised.
| Data Type | Typical Retention Period |
|---|---|
| Account data | Duration of account plus 2 years after closure |
| Transaction records | 7 years from transaction date |
| Support communications | 3 years from last interaction |
| Analytics data | Up to 26 months in identifiable form |
| Marketing consent records | Until consent is withdrawn plus 1 year |
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
| Measure | Description |
|---|---|
| Encryption in transit | All data transmitted between your browser and our servers is encrypted using TLS |
| Encryption at rest | Sensitive stored data is encrypted using industry-standard algorithms |
| Access controls | Role-based access limits who within our organisation can view personal data |
| Security reviews | Regular internal and third-party assessments of our security posture |
| Incident response | Documented procedures for detecting, reporting, and managing data breaches |
No method of transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
8. International Data Transfers
Your information may be transferred to and processed in countries other than the country in which you reside. Where such transfers occur, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, to protect your personal data to a standard equivalent to that required in your home country.
9. Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your data where it is no longer necessary or lawfully held |
| Restriction | Request that we limit processing of your data in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests or for direct marketing |
| Withdraw consent | Withdraw previously given consent at any time without affecting prior processing |
To exercise any of these rights, contact us at contact@cedarworks.eu. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.
10. Children's Privacy
The Service is not directed to children under the age of 16. We do not knowingly collect personal data from individuals under 16 years of age. If we become aware that we have inadvertently collected such data, we will take prompt steps to delete it. If you believe a child has provided us with personal data without appropriate consent, please contact us immediately.
11. Third-Party Links and Services
The Service may contain links to third-party websites, tools, or services that are not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the privacy practices or content of third-party sites.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice within the Service. Your continued use of the Service after the effective date of any update constitutes your acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:
| Company | Cedar Works |
| contact@cedarworks.eu | |
| Phone | +1 514 587 2531 |
| Address | 12308 Tecumseh Rd E, Windsor, ON N8N 1M4, Canada |
| Website | cedarworks.eu |
This policy is effective as of the date stated above and supersedes all prior versions.