Privacy Policy of SPX Prestige School
At SPX Prestige School SL (hereinafter “we” or “the Company”), we respect your privacy and are committed to protecting the personal data you may provide through our website spxprestigeschool.org (hereinafter “the Website”). This Privacy Policy explains what data we collect, how we use it, and your rights regarding it.
1. Data Controller
SPX Prestige School SL VAT Number: B22694830 Address: FORA Building 20 Station Road Cambridge, Cambridgeshire CB1 2JD United Kingdom Email: contact@spxprestigeschool.net
2. Data We Collect
- Contact information: name, email address, phone number.
- Professional information: company, position, industry (when registering for services or events).
- Browsing information: IP address, device type, browser, pages visited, and time spent.
- Information you voluntarily provide through contact forms, newsletter subscriptions, or event registrations.
3. Purpose of Data Processing
- Manage your inquiries and requests.
- Send information about our services, events, and updates, if you have given consent.
- Improve the Website and personalize user experience.
- Comply with legal and tax obligations.
4. Legal Basis for Processing
- Explicit consent for receiving marketing communications.
- Performance of a contract or pre-contract (e.g., contracted services or event registration).
- Legitimate interests for Website improvement and system security.
- Compliance with applicable legal obligations.
5. Data Retention
We will retain your personal data only as long as necessary to fulfill the purposes outlined above. Once this period expires, the data will be securely deleted.
6. Sharing Data with Third Parties
We do not sell or rent your data to third parties. We may share information with:
- Service providers who assist in managing the Website, sending emails, or processing payments, always under a confidentiality agreement.
- Legal authorities if required by law.
7. Data Security
We implement appropriate technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.
8. Your Rights
You have the right to:
- Access your personal data.
- Request correction of inaccurate data.
- Request deletion of your data (“right to be forgotten”).
- Restrict or object to data processing.
- Request data portability.
- Withdraw your consent at any time for marketing communications.
To exercise your rights, you can send a request to contact@spxprestigeschool.net.
9. Use of Cookies
Our Website uses cookies to enhance user experience, analyze traffic, and display personalized content. For more information, please see our Cookie Policy.
10. Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy to adapt to legislative changes or updates to our services. Updates will be published on this page with the corresponding effective date.
11. Google Calendar Integration
If you choose to connect your Google Calendar to SPX Calendar, we request access to the following Google user data via OAuth 2.0:
- Scope used: https://www.googleapis.com/auth/calendar.events — allows the app to create, view, and update calendar events on your primary Google Calendar.
- Scope used: email — used only to display your connected account’s email address in the app so you can confirm which account is linked.
What we access: We create and update calendar events corresponding to your assigned Roadmap Actions and Tasks (title, description, and due date). We do not read, browse, or export any other events already on your calendar, and we do not access calendars other than your primary calendar.
What we store: We store the OAuth access token and refresh token needed to keep the connection active, the email address of the connected account, and the identifiers of the calendar events we create (so we can update them later instead of duplicating them). We do not store the content of any other events on your calendar.
How we use the data: Solely to keep your Google Calendar in sync with the Actions/Tasks assigned to you inside SPX Calendar. We do not use this data for advertising, and we do not sell or share it with third parties.
Retention and revocation: You can disconnect Google Calendar sync at any time from the Users & Roles panel — doing so immediately and permanently deletes the stored access token, refresh token, and connected account email from our database. Previously created calendar events are not deleted from your calendar, only the connection itself. You can also revoke access at any time directly from your Google Account permissions page.
Compliance: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.