Privacy Policy

This Privacy Policy explains how Spice Society processes personal data when you visit or use spicesocietyzigzag.living, including course registration, communications, and related site functions.

Effective DateAs stated in policy
ScopeAll users of our services
QuestionsContact
GDPR

GDPR Basis

Where the GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, or our legitimate interests in operating and improving the site, protecting users, and managing our services. When we rely on consent, it may be withdrawn at any time without affecting prior processing.

If you are located in the European Economic Area, the GDPR may apply to our processing of your personal data.

EU compliance references
Supervisory AuthorityEuropean Data Protection Board
This section is intended for users whose data is protected by the GDPR.
Your Data Rights

GDPR Rights

Where the GDPR applies, you may have the right to access, correct, delete, restrict, or object to certain processing, and the right to data portability in appropriate cases. You may also withdraw consent where processing is based on consent. If you believe our processing does not comply with applicable law, you may raise a complaint with the competent supervisory authority.

GDPR rights are available subject to the conditions and limits set by law.
01

Data We Collect

We may collect identifiers and contact details, account and course registration details, payment-related information handled through our service providers, communications sent to us, and technical data such as device type, browser information, log data, and approximate location derived from IP address. Where relevant to course delivery, we may also process information about professional background or stated learning preferences.

The categories collected depend on how the site is used and what information is submitted.
02

Sources of Data

We receive personal data directly from you when you create an account, register for a course, make an inquiry, or otherwise interact with the site. We also obtain data automatically through cookies and similar technologies, and from third parties that support payment processing, analytics, communications, or security functions.

Information comes from users, automated systems, and service providers involved in site operation.
03

Types of Cookies

We use essential cookies to support site security and core functions, preference cookies to remember settings, and analytics cookies to understand how the site is used. Some cookies are session-based and expire when the browser closes, while others remain on the device for a limited period unless removed earlier.

Cookie use is limited to operational, preference, and analytics functions.
04

Cookie Controls

We use browser settings and any cookie controls we provide to manage non-essential cookies. Disabling some cookies may affect site functionality, including login, course access, and preference retention. Essential cookies remain necessary for basic operation.

Cookie preferences can be adjusted through browser settings and, where available, site controls.
User Rights

Your Rights

Depending on your location and the applicable law, you may have rights to access, correct, delete, restrict, or object to our processing of your personal data, and in some cases to receive a copy of it in a portable format. Some requests may be limited where we must keep information for legal, security, or contractual reasons.

Available rights depend on the legal basis and the nature of the processing.
Requests

How to Make a Request

To exercise a privacy right, submit a request using the contact details in this policy and provide enough information for us to verify your identity and locate the relevant records. We may ask for additional details before acting on a request, and we will respond within the time required by applicable law.

Requests are handled through a verification process before any disclosure or change is made.
Data Retention

Data Retention

We keep personal data only for as long as needed for the purposes described in this policy, including course administration, recordkeeping, security, and compliance. When data is no longer required, we delete it, anonymize it, or retain it only where a longer period is required or permitted by law.

Retention periods are based on operational need, legal obligations, and dispute management.
Policy Updates

Policy Changes

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. The revised version will apply from the effective date shown in the policy, and we may provide additional notice where a change is material.

We review this policy from time to time and note significant changes here.

Contact Details

Privacy email
Telephone
+262 692 59 96 63
Mailing address
361 Rue Mélodium, 97440 Saint-André
Privacy inquiries

How We Use Data

We use personal data to provide and manage course access, process registrations and payments, communicate with users, respond to inquiries, maintain security, prevent misuse, improve site performance, and meet legal or accounting obligations. We may also use limited data to understand how our services are used and to support internal administration.

Processing is limited to the purposes described below and compatible related uses.

Service Providers

We may share personal data with vendors and other service providers that support hosting, payment processing, analytics, communications, customer support, and security. These parties may process data on our behalf under contractual obligations and may not use it for their own unrelated purposes.

Service providers receive only the information needed to perform their assigned functions.

Legal Disclosures

We may share personal data with courts, regulators, law enforcement, or other public authorities when disclosure is required by law, necessary to protect our rights, or needed to respond to lawful requests. We may also disclose information to establish, exercise, or defend legal claims.

We disclose information to public authorities only when a valid legal basis requires it.