Privacy Policy

Who We Are and What We Do

Pymbron operates as an educational platform helping people in Ireland overcome their investment fears. Our registered address is Letterbrickaun, Leenaun, Co. Galway, H91 C6H9, Ireland. We're the data controller for any information you share with us through our website or learning programs.

When we say "data controller," we mean we're responsible for deciding how and why your personal data gets used. That's a responsibility we take seriously.

Information We Collect

What You Give Us Directly

When you interact with our site or sign up for programs, you might share:

• Your name and email address when you register interest in our learning program
• Contact details including phone numbers if you reach out to us
• Information about your investment experience and goals during enrollment
• Payment information when you register for paid educational content
• Messages and feedback you send through our contact forms

What We Learn From Your Visits

Like most websites, ours collects some technical information automatically. This includes your IP address, browser type, device information, and which pages you visit. We use this to understand how people use our site and where we can make improvements.

We don't use tracking cookies for advertising purposes. The cookies we do use help the website function properly and remember your preferences between visits.

Why We Need Your Information

We're not in the business of collecting data for the sake of it. Here's what we actually do with what you share:

Under the General Data Protection Regulation (GDPR) and Irish Data Protection Act 2018, we need a lawful basis to process your personal data. We've matched each purpose with its legal justification above.

Who Sees Your Information

We don't sell your data. Full stop. But we do work with some trusted partners who help us run our educational platform:

All these partners are carefully selected and contractually required to protect your information. They can only use your data for the specific purposes we've agreed with them.

Your Rights Under Irish and EU Law

The GDPR gives you strong rights over your personal data. Here's what you can do:

1. Access your data: You can ask us for a copy of everything we hold about you. We'll provide this free of charge within one month.
2. Correct mistakes: If we've got something wrong, let us know and we'll fix it promptly.
3. Delete your information: In many cases, you can ask us to erase your personal data. There are some exceptions where we need to keep certain records for legal reasons.
4. Restrict processing: You can ask us to pause using your data while we sort out any issues or disputes.
5. Data portability: You can request your data in a common format to move it elsewhere.
6. Object to processing: If we're using your data based on legitimate interests, you can object and we'll stop unless we have compelling reasons to continue.
7. Withdraw consent: Where we're relying on your consent, you can withdraw it anytime. This won't affect anything we did before you withdrew consent.

To exercise any of these rights, email us at [email protected]. We'll respond within one month, though complex requests might take up to three months with an explanation for the delay.

How Long We Keep Your Data

We only keep your information as long as we need it. The retention period depends on why we collected it:

• Active student data: kept during your enrollment and for two years after program completion
• Inquiry and contact data: typically retained for three years unless you ask us to delete it sooner
• Financial records: kept for seven years to comply with Irish tax and accounting requirements
• Marketing consent records: maintained until you withdraw consent, then archived as proof of compliance
• Website analytics: aggregated and anonymized data kept indefinitely, but individual session data deleted after 14 months

When data reaches the end of its retention period, we securely delete or anonymize it so it can't be traced back to you.

Keeping Your Information Safe

We take security seriously, but we'll be honest about what that means. No system is completely bulletproof, but we implement reasonable measures to protect your data:

• Our website uses SSL encryption for all data transmission
• Access to personal data is restricted to staff who actually need it
• We use secure, password-protected systems with regular security updates
• Payment information never touches our servers - it goes directly to payment processors
• Regular backups are encrypted and stored securely
• Staff receive training on data protection and privacy requirements

If we ever experience a data breach that puts your rights at risk, we'll notify you and the Data Protection Commission within 72 hours as required by law.

International Data Transfers

We primarily work with service providers based in Ireland and the European Economic Area. Occasionally, some technical services involve data being processed outside the EEA.

When this happens, we make sure appropriate safeguards are in place through standard contractual clauses approved by the European Commission. These are legal agreements that require overseas providers to protect your data according to EU standards.

Children's Privacy

Our educational programs are designed for adults. We don't knowingly collect information from anyone under 18 years old. If you're a parent and believe your child has provided us with personal information, contact us immediately and we'll delete it.

Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active students by email and update the "Last Updated" date at the top.

We encourage you to check back occasionally, especially if it's been a while since you last reviewed our privacy practices.

Making Complaints

If you're unhappy with how we've handled your personal data, please contact us first at [email protected]. We'll do our best to resolve any concerns.

You also have the right to lodge a complaint with the Data Protection Commission in Ireland. You can reach them at: