Privacy Policy

1. Information We Collect

We collect different types of information depending on how you use our platform. Here's what we gather and why:

Information You Provide Directly

When you sign up for courses, contact us, or use our services, you might share:

• Name and contact details (email, phone number)
• Billing information for course purchases
• Professional background and learning goals
• Portfolio samples or design work you submit
• Comments, questions, or feedback you send us

Information Collected Automatically

Like most websites, we automatically collect certain technical information:

• IP address and general location data
• Browser type, device information, and operating system
• Pages visited, time spent on site, and navigation patterns
• Referring websites and search terms used to find us
• Course progress, completion rates, and engagement metrics

2. How We Use Your Information

We're not in the business of selling your data. We use what you share to run our educational platform and improve your learning experience.

We occasionally send promotional emails about new courses or features. You can opt out anytime — there's an unsubscribe link in every message.

3. Legal Basis for Processing (GDPR Compliance)

We process your personal data based on these legal grounds:

• Contractual Necessity: Processing needed to deliver the courses and services you've purchased
• Legitimate Interest: Improving our platform, preventing fraud, and maintaining security
• Legal Obligation: Complying with Croatian tax laws, accounting requirements, and other regulations
• Consent: Marketing communications and optional features (you can withdraw consent anytime)

4. Your Privacy Rights

You have significant control over your personal information. Here's what you can do:

To exercise any of these rights, contact us at support@planningex.com. We'll respond within 30 days.

5. Data Sharing and Third Parties

We don't sell your information to third parties. However, we work with trusted service providers who help us run the platform:

Service Providers We Use

• Payment Processors: Handle credit card transactions securely (they never share full payment details with us)
• Email Services: Deliver course materials, updates, and communications
• Hosting Providers: Store course content and maintain platform infrastructure
• Analytics Tools: Help us understand how people use the site (anonymized where possible)
• Customer Support: Manage inquiries and technical issues

All these providers are contractually obligated to protect your data and can only use it for the specific services they provide to us.

When We Must Share Information

We'll disclose your data if required by Croatian or EU law, or to:

• Respond to valid legal requests (court orders, subpoenas)
• Protect our legal rights or defend against claims
• Prevent fraud or security threats
• Comply with tax and financial reporting obligations

6. International Data Transfers

We're based in Croatia (EU), so your data is primarily stored within the European Economic Area. Some service providers may be located outside the EU.

When we transfer data internationally, we ensure adequate protection through:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

7. Data Security

We take reasonable steps to protect your information from unauthorized access, alteration, or destruction. This includes:

• SSL/TLS encryption for data transmission
• Secure password hashing and storage
• Regular security updates and vulnerability testing
• Access controls limiting who can view personal data
• Employee training on data protection practices

That said, no system is completely secure. We do our best, but we can't guarantee absolute security. Use strong passwords and don't share your login credentials.

8. Data Retention

We keep your information only as long as necessary for the purposes outlined in this policy.

Retention Periods

• Active Accounts: Data retained while your account is active
• Course Records: Maintained for up to 5 years after completion (for certificates and transcripts)
• Financial Records: Kept for 7 years to comply with Croatian tax laws
• Marketing Data: Deleted within 90 days of unsubscribing
• Support Inquiries: Typically deleted after 2 years

After these periods, we securely delete or anonymize your data unless legally required to retain it longer.

9. Cookies and Tracking Technologies

We use cookies to make the site work properly and improve your experience. Here's a breakdown:

Essential Cookies

These keep the site functioning — things like remembering your login, maintaining your session, and processing payments. You can't opt out of these without breaking the site.

Analytics Cookies

Help us understand how people use the platform so we can make improvements. These collect anonymized data about page views, navigation patterns, and feature usage.

Marketing Cookies

Track whether you've seen certain announcements or promotions. You can disable these in your browser settings.

Most browsers let you control cookies through their settings. Check your browser's help section for instructions.

10. Children's Privacy

Our platform is designed for adults pursuing professional education in game design. We don't knowingly collect information from anyone under 16 without parental consent.

If you're a parent and believe your child has provided us with personal information, contact us immediately and we'll delete it.

11. Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or with a prominent notice on the site.

The "Last Updated" date at the top shows when we last modified this policy. We encourage you to review it periodically.

12. Supervisory Authority

If you're not satisfied with how we've handled your data or responded to your privacy concerns, you have the right to lodge a complaint with:

We'd prefer to resolve any issues directly, but you have the right to contact the supervisory authority at any time.