Privacy Policy

1. Controller and contact

Askesis OÜ, registry code 17298377, Narva mnt 5, 10117 Tallinn, Estonia, is the controller for the services described here. Contact: georgii@askesis.academy.

2. Services covered

This policy covers askesis.academy and related enquiries, purchases and delivery for Askesis Academy learning products, Georgii Coaching, and Integral EdTech reviews, diagnostics and pilots. A client agreement may add more specific safeguards; it does not reduce mandatory data-protection rights.

3. Data we process

• identity and contact details, including name, email, organisation, role, country and billing address;
• commercial and payment records, including the product, price, currency, transaction status, invoices, refunds and limited payment identifiers supplied by Stripe; Askesis OÜ does not receive full card numbers;
• enquiry, scheduling, contract and delivery communications;
• Academy account, enrolment, progress, submissions and completion records;
• minimal coaching scheduling, consent and working notes where needed to deliver the service;
• EdTech discovery materials and project records supplied by the client;
• security logs such as IP address, time, requested page and browser information.

4. Purposes and legal bases

• Contract and pre-contract steps: answering a requested enquiry, taking payment, providing access, scheduling and delivering the purchased service.
• Legal obligations: accounting, tax, fraud prevention and handling statutory consumer requests.
• Legitimate interests: securing our systems, maintaining service records, improving operations and defending legal claims, balanced against your rights.
• Consent: where required for optional communications, special-category information, recordings, testimonials or non-essential cookies. Consent can be withdrawn prospectively.

We do not sell personal data and do not use solely automated decisions that produce legal or similarly significant effects.

5. Payments

Checkout is provided by Stripe. Stripe processes payment credentials and may conduct fraud, identity and compliance checks under its own privacy notices. Askesis OÜ receives transaction and customer details needed to fulfil the order, issue receipts and refunds, keep accounts and resolve disputes.

6. Service providers and transfers

We use providers only as needed for delivery: Stripe for payments; Revolut Business for banking; Google Workspace, Meet, Forms and Calendar for communications and scheduling; Moodle for learning delivery; and Hetzner for EU hosting. Providers may process data under their own terms or on our instructions. Where data leaves the EEA, we rely on an applicable adequacy decision, standard contractual clauses or another lawful safeguard.

7. Retention

• server security logs: normally up to 30 days;
• unsuccessful enquiries and lead correspondence: normally up to 12 months after the last substantive contact;
• contracts, invoices, payment and refund records: normally 7 years or longer where law requires;
• Academy learning records: for the access/delivery period and a reasonable support period; financial and certificate evidence may be retained separately;
• minimal coaching working notes: normally deleted within 90 days after closure, unless a longer period is required by law or an unresolved dispute;
• client project records: for the contract period and a reasonable claims/continuity period stated in the agreement.

We may anonymise information so it can no longer identify a person.

8. Sensitive and client-supplied information

Please do not send health or other special-category data unless it is necessary and agreed in advance. Coaching is designed to work with minimal personal detail. EdTech clients must have authority to share any learner or employee information and should anonymise it wherever possible. Identifiable session or client material is not placed into public generative-AI services without an agreed lawful basis and safeguards.

9. Cookies and security

The public static site does not intentionally use advertising trackers or non-essential analytics cookies. External services, Checkout and Moodle may use necessary cookies under their own notices. We apply access controls, encryption in transit, least-data practices and restricted provider access, but no online system can be guaranteed absolutely secure.

10. Your rights

Subject to the GDPR and applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. Email the contact above; we may need to verify identity. You may also complain to the Estonian Data Protection Inspectorate or the supervisory authority where you live or work.

11. Children and changes

Our paid services are not directed to children unless a specific programme and guardian arrangements expressly say otherwise. We may update this policy when services or law change; the effective date and version above identify the current text. Material changes affecting an active contract will be communicated where required.