Privacy Policy

Last Updated: January 15, 2026

1. Introduction

This Privacy Policy describes how MATTHEW HOLYOAK SEMINARS LTD ("we," "us," or "our"), the data controller, collects, uses, stores, and protects your personal data when you visit our website at academyx.info and register for or participate in our educational webinar series "AI for Creativity 2026: Create Texts, Images, and Music in Minutes."

MATTHEW HOLYOAK SEMINARS LTD is a company registered in the United Kingdom with its registered address at 17 Norfolk Road, LYTHAM ST. ANNES, FY8 4JG, United Kingdom. We are committed to protecting your privacy and processing your personal data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation.

By using our website, submitting forms, or interacting with our services, you acknowledge that you have read and understood this Privacy Policy. We encourage you to review this document carefully so you are fully informed about how your data is handled.

2. What Data We Collect

We collect and process the following categories of personal data when you interact with our website and services:

• Identity Data: Your full name, as provided through our registration or contact forms.
• Contact Data: Your email address, as provided through our registration or contact forms.
• Technical Data: Your Internet Protocol (IP) address, browser type and version, operating system, device type, screen resolution, time zone setting, and browser plug-in types and versions.
• Usage Data: Information about how you use our website, including the pages you visit, the time and date of your visit, the time spent on each page, clickstream data, and referral source.
• Cookie Data: Data collected through essential and analytics cookies placed on your device. For comprehensive details about the cookies we use, please refer to our Cookies Policy.
• Communication Data: The content of messages you send through our contact form, including your name, email address, and message text.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation.

3. How We Collect Data

We collect personal data through the following methods:

• Registration Forms: When you register for our webinar series, you voluntarily submit your name and email address through our online registration form.
• Contact Forms: When you reach out through our contact page, you provide your name, email address, and a message.
• Cookies and Similar Technologies: We use essential cookies to ensure the proper functioning of our website and analytics cookies to understand how visitors use the site. Analytics data is collected through Google Analytics, which processes anonymized usage data. We do not use Meta Pixel or any advertising tracking pixels.
• Server Logs: Our hosting provider automatically collects certain technical data (IP address, browser type, request time) through standard server access logs. This information is used to maintain the security and performance of our website.

We do not collect data from third-party sources, social media profiles, or public databases. All personal data is provided directly by you.

4. Why We Collect Data (Legal Basis)

Under Article 6 of the UK GDPR, we process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a)): When you submit the webinar registration form, you consent to us processing your name and email address for the purpose of sending you webinar-related information, including session dates, access links, and follow-up communications. You can withdraw your consent at any time by contacting us at [email protected].
• Legitimate Interest (Article 6(1)(f)): We process technical and usage data to maintain website security, prevent fraud, improve user experience, and analyze aggregate trends on our website. We have conducted a balancing test and determined that these interests do not override your fundamental rights and freedoms.
• Contract Performance (Article 6(1)(b)): When you register for the webinar, processing your data is necessary to deliver the service you have requested, including sending you the webinar link, schedule, and related materials.

You are not required to provide personal data. However, if you choose not to provide your name and email address, we will be unable to register you for the webinar or respond to your contact inquiries.

5. How We Use Data

We use your personal data for the following purposes:

• Webinar Registration and Delivery: To process your registration, send confirmation emails, provide webinar access links, communicate session dates and times (October 10 and October 17, 2026, at 19:00 EET), and deliver post-session follow-up materials.
• Responding to Inquiries: To reply to questions or messages you submit through our contact form.
• Website Analytics: To understand how visitors navigate our website, which pages are most visited, and how we can improve the user experience. All analytics data is aggregated and anonymized wherever possible.
• Security and Fraud Prevention: To monitor website activity for potential security threats, unauthorized access, and technical issues.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from public authorities, and protect our legal rights.

We do not use your personal data for automated decision-making or profiling. We do not send marketing emails unrelated to the webinar. Registration emails are strictly limited to webinar-related communications.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods are as follows:

• Webinar Registration Data (name, email): Retained for 12 months after the final webinar session (October 17, 2026), after which it is securely deleted. This period allows us to send any follow-up educational materials and handle post-event inquiries.
• Contact Form Data (name, email, message): Retained for 2 years from the date of submission, unless an ongoing correspondence requires a longer retention period.
• Cookies: Essential cookies expire at the end of your browser session. Analytics cookies are retained for a maximum of 13 months. Cookie consent preferences are stored in your browser's local storage indefinitely until you clear your browser data.
• Server Logs: Retained for 90 days for security monitoring purposes, after which they are automatically purged.
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely, as it does not constitute personal data.

Once the retention period expires, your personal data is securely deleted or anonymized so that it can no longer be associated with you.

7. Data Sharing

We do not sell, rent, trade, or otherwise commercially share your personal data with third parties. Your data may be shared only with the following categories of recipients, strictly on a need-to-know basis:

• Hosting Provider: Our website is hosted on secure servers provided by our hosting company. They process data on our behalf under a data processing agreement and are contractually obligated to protect your data.
• Analytics Provider: Google Analytics processes anonymized usage data to help us understand website traffic patterns. Google acts as a data processor under its data processing terms. IP anonymization is enabled.
• Email Service Provider: We use a secure email delivery service to send webinar registration confirmations and access links. This provider processes your name and email under a data processing agreement.

We may also disclose your personal data if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We confirm that we do not sell your personal data to any party, and we never will.

8. International Transfers

Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). In cases where data may be transferred to countries outside the UK or EEA (for example, when using Google Analytics, whose servers may be located in the United States), we ensure that appropriate safeguards are in place.

These safeguards include:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) or the European Commission.
• Transfers to countries that have received an adequacy decision from the UK government or the European Commission, confirming that the destination country provides an adequate level of data protection.

If you would like more information about the specific safeguards applied to international transfers of your data, please contact us at [email protected].

9. Your Rights Under UK GDPR

Under the UK GDPR (Articles 15 through 22), you have the following rights regarding your personal data:

• Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed.
• Right to Rectification (Article 16): You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Article 17): You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent.
• Right to Restriction of Processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest its accuracy.
• Right to Data Portability (Article 20): You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object (Article 21): You have the right to object to the processing of your personal data where we rely on legitimate interest as our legal basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us by email at [email protected]. We will respond to your request within 30 days. If your request is complex, we may extend this period by an additional 60 days, and we will inform you of any such extension.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe that your data protection rights have been violated. The ICO can be contacted at ico.org.uk or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

10. Cookies

Our website uses cookies to ensure proper functionality and to analyze website usage. We categorize our cookies as follows:

• Essential Cookies: These cookies are strictly necessary for the website to function correctly. They manage cookie consent preferences and enable core features. They expire at the end of your browser session or are stored in your browser's local storage.
• Analytics Cookies: These cookies (provided by Google Analytics) help us understand how visitors use our website by collecting anonymized data about page views, session duration, and navigation paths. Analytics cookies have a maximum lifespan of 13 months.

We do not use advertising cookies, retargeting cookies, or any cookies that track you across other websites. When you first visit our website, a cookie consent banner appears allowing you to accept or decline non-essential cookies. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site, or by visiting our Cookies Policy page.

You can also manage cookies directly through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking essential cookies may impair the functionality of certain parts of our website.

11. Children's Privacy

Our website and webinar series are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us at [email protected]. Upon verification, we will promptly delete such data from our records.

If we become aware that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete that information and terminate any associated registration.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operational needs. When we make changes, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we process your personal data, we will make reasonable efforts to notify registered users via the email address they provided during webinar registration. We recommend checking this page periodically to stay informed about how we protect your data.

Continued use of our website after changes have been posted constitutes your acceptance of the revised Privacy Policy.

13. Contact Details

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us using the details below:

We aim to resolve all privacy-related inquiries within 30 days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the UK Information Commissioner's Office (ICO).

For inquiries about exercising your data rights (access, rectification, erasure, portability, or objection), please include "Data Rights Request" in the subject line of your email so we can prioritize your request appropriately.