Your information. Clearly explained.

What information we may collect

The personal data we collect depends on how you interact with GPALORA, for example whether you contact us, submit an enquiry, purchase a digital product or engage with our professional services or training.

Depending on the circumstances, we may collect:

• Identity and contact details, such as your name, email address and telephone number.
• Organisation and professional details, such as your organisation, role or other business information relevant to your enquiry or engagement.
• Enquiry and communication information, including information you provide through the contact form, by email or in other communications with us.
• Purchase and transaction information, where you purchase a digital product or resource through the website, including information relating to your order and payment.
• Service and training information, where relevant to providing professional services or training you have requested.
• Website and technical information, where collected through the operation of the website, as explained further in the section on cookies and website data below.

Information you choose to provide

Please avoid providing personal data that is not necessary for your enquiry or request. If you provide personal data about another person, you should ensure that you are entitled to provide that information to us.

AGE & PRIVACY

Children’s data

This website, its products and GPALORA’s professional services and training are intended for adults aged 18 and over.

We do not knowingly collect personal data from children through this website. If we become aware that personal data has been provided by a person under 18, we will review the circumstances and take appropriate steps, including deletion of the data where appropriate.

HOW WE USE PERSONAL DATA

Why we use your information

We use personal data only where necessary for specific and legitimate purposes. The purpose and legal basis will depend on how you interact with GPALORA.

Enquiries and communications

We use your contact details and the information you provide to respond to enquiries, communicate with you and take steps you request before entering into a professional engagement.

Legal basis: taking steps at your request before entering into a contract and, where applicable, our legitimate interests in managing professional communications and enquiries.

Digital product purchases

We use relevant personal data to process and manage purchases, provide access to digital products, communicate about your order and maintain appropriate transaction records.

Legal basis: performance of a contract and compliance with applicable legal obligations, including accounting and tax requirements where relevant.

Professional services and training

Where you engage GPALORA, we use the personal data necessary to manage and provide the agreed professional services or training and to communicate with you in connection with the engagement.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

Business administration and legal obligations

We may process personal data where necessary to manage invoices and business records, meet legal, tax or accounting obligations, and establish, exercise or defend legal claims where necessary.

Legal basis: compliance with legal obligations and, where applicable, our legitimate interests in managing and protecting the business.

COOKIES & WEBSITE DATA

Cookies and Website statistics

This website uses cookies and similar technical functionality provided through the Webador website platform to support the operation and security of the website. Cookies placed on this website by Webador are strictly technical cookies that are necessary for the website to function.

GPALORA uses the website statistics provided through Webador to understand how the website is used. These statistics include aggregated information such as visits and page views, geographical origin, pages viewed, device and operating system categories and traffic sources. GPALORA does not have access through these statistics to individual visitors’ IP addresses or individual visitor profiles.

This information is used to understand website usage and help improve the website and its content.

SHARING PERSONAL DATA

Who we may share personal data with

We do not sell personal data.

Personal data may be shared only where necessary for the operation of the website, the processing of purchases, the provision of professional services or training, or where required by law.

Service providers

We may use trusted third-party service providers that support the operation of GPALORA, such as website hosting platform providers, email and IT service providers, payment service providers and other suppliers where their services involve the processing of personal data.

Where applicable, these providers process personal data on our behalf in accordance with their own legal responsibilities and are subject to appropriate data protection obligations.

Professional advisers and authorities

Personal data may also be disclosed to professional advisers, public authorities, regulators, courts or other bodies where this is necessary to comply with a legal obligation, establish or defend legal rights, or otherwise where disclosure is permitted or required by law.

We only share personal data to the extent reasonably necessary for the relevant purpose.

INTERNATIONAL DATA TRANSFERS

Transfers outside the EEA

GPALORA uses third-party service providers to support its website, communications and payment processing. Some of these providers may process or access personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, appropriate safeguards are used as required by applicable data protection law. Depending on the circumstances, these may include an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

DATA RETENTION 

How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to meet legal, accounting or tax requirements, manage an ongoing professional relationship, or establish, exercise or defend legal claims.

The appropriate retention period will depend on the type of information, why it was collected and whether there is a legal or business need to retain it.

Enquiries and communications

Information relating to enquiries and communications will be kept for as long as reasonably necessary to respond to the enquiry and manage any resulting communication or professional relationship.

Purchases and business records

Information relating to purchases, payments, invoices and other business transactions will be retained for the period required by applicable legal, tax and accounting requirements.

Professional services and training

Information relating to professional services or training will be retained for as long as necessary for the relevant engagement and afterwards where reasonably required for record-keeping, legal or professional purposes.

When personal data is no longer required, it will be securely deleted or anonymised, where appropriate.

YOUR DATA PROTECTION RIGHTS

Your rights

Under the GDPR, you have certain rights in relation to your personal data. The rights available to you may depend on the circumstances and the legal basis on which your personal data is processed.

Depending on the circumstances, you may have the right to:

• access the personal data we hold about you;
• correct personal data that is inaccurate or incomplete;
• request deletion of your personal data;
• request restriction of the way your personal data is processed;
• object to certain processing of your personal data;
• request data portability where the relevant legal requirements apply; and
• withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn.

Exercising your rights

To exercise any of your data protection rights, or if you have a question about how your personal data is handled, please contact:

info@gpalora.com

We may need to verify your identity before responding to a request. We will respond within the time limits required by applicable data protection law.

Exercising your rights is generally free of charge. However, where permitted by law, a reasonable fee may be charged or a request may be refused if it is manifestly unfounded or excessive.

Right to lodge a complaint

If you have concerns about how your personal data is handled, you also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority.

Further information is available from the Office of the Commissioner for Personal Data Protection.

DATA SECURITY

How we protect personal data

We take appropriate organisational and technical measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures are proportionate to the nature of the personal data processed and the risks associated with the processing, and include appropriate controls relating to access, systems, accounts and the service providers used to support GPALORA’s activities.

While reasonable measures are taken to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.

UPDATES 

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our website, products, services, business practices or applicable data protection requirements.

The current version of this Privacy Notice will be published on this page. Where appropriate, we may also provide additional notice of significant changes.

Last updated: September 2026