Privacy Policy (GDPR)
Last updated: September 15, 2026
This Privacy Policy describes how Tybugyo ("we", "us", or "our") collects, uses, stores, and protects personal data when you use our website at tybugyo.com and related services. We are committed to protecting your privacy and processing your personal data in accordance with applicable data protection law, including the General Data Protection Regulation (GDPR).
1. Data Controller
Tybugyo is the data controller responsible for your personal data. If you have any questions or concerns about this Privacy Policy or how we handle your data, you may contact us at:
- Email: help@tybugyo.com
- Phone: +35314627021
- Address: Ballyroan Rd, Templeogue, Dublin 16, Ireland
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Data You Provide Directly
- Full name and contact details (email address, phone number)
- Account registration information
- Payment and billing information (processed securely through third-party payment providers)
- Messages, enquiries, and feedback you submit through contact forms or email
- Information you provide when participating in workshops, exercises, or collaborative tools on our platform
2.2 Data Collected Automatically
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring URLs and search terms
- Device identifiers and session data
- Cookie and tracking data (see Section 8)
2.3 Data From Third Parties
- Information received when you authenticate via third-party services (if applicable)
- Analytics data from service providers used to improve platform performance
3. Legal Basis for Processing
We process your personal data only when we have a valid legal basis to do so. The legal bases we rely on include:
| Processing Purpose | Legal Basis |
|---|---|
| Providing and managing your account and access to services | Performance of a contract (Art. 6(1)(b) GDPR) |
| Processing payments and issuing invoices | Performance of a contract (Art. 6(1)(b) GDPR) |
| Responding to your enquiries and support requests | Legitimate interests (Art. 6(1)(f) GDPR) |
| Sending marketing communications | Consent (Art. 6(1)(a) GDPR) |
| Improving platform functionality and user experience | Legitimate interests (Art. 6(1)(f) GDPR) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Analytics and performance monitoring | Legitimate interests (Art. 6(1)(f) GDPR) |
4. How We Use Your Personal Data
We use collected personal data for the following purposes:
- Creating and managing your user account
- Delivering workshop content, assignments, and interactive exercises
- Processing transactions and managing billing
- Communicating with you about your account, orders, and service updates
- Sending promotional materials and newsletters where you have given consent
- Analysing usage patterns to improve content, features, and platform design
- Ensuring the security and integrity of our platform
- Fulfilling legal, regulatory, and compliance obligations
- Resolving disputes and enforcing our terms of service
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with trusted third parties only in the following circumstances:
5.1 Service Providers
We engage third-party companies to assist in operating our platform, including hosting providers, payment processors, email delivery services, and analytics tools. These providers act as data processors and are contractually bound to process your data only on our instructions and in accordance with applicable law.
5.2 Legal Requirements
We may disclose your personal data where required by law, court order, or regulatory authority, or where necessary to protect our legal rights, prevent fraud, or ensure the safety of our users.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant third party as part of that transaction. We will notify you of any such change and the choices available to you.
5.4 With Your Consent
We may share your data with other parties where you have given explicit consent for us to do so.
6. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms. You may request information about the specific safeguards applied to any such transfer by contacting us.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The criteria used to determine retention periods include:
- The duration of your active account or service relationship with us
- Legal, regulatory, and contractual obligations requiring retention
- The period during which disputes may reasonably arise
- Guidance from applicable supervisory authorities
When personal data is no longer required, it is securely deleted or anonymised.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience, analyse traffic, and support our services. Cookies are small text files stored on your device when you visit our site.
8.1 Types of Cookies We Use
- Essential cookies: Required for the website to function correctly. These cannot be disabled.
- Functional cookies: Enable enhanced functionality and personalisation, such as remembering your preferences.
- Analytics cookies: Help us understand how visitors interact with our platform so we can improve it.
- Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.
8.2 Managing Cookies
You may control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform. Where consent is required, we will request it before placing non-essential cookies.
9. Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete data.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent.
- Right to restriction of processing: You may request that we limit how we use your data in certain circumstances.
- Right to data portability: You may request that we provide your data in a structured, commonly used, machine-readable format.
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right not to be subject to automated decision-making: You have the right not to be subject to decisions made solely by automated processing, including profiling, that produce significant legal or similarly significant effects.
To exercise any of these rights, please contact us at help@tybugyo.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your relevant supervisory authority.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using industry-standard protocols
- Access controls limiting data access to authorised personnel only
- Regular security assessments and vulnerability monitoring
- Staff training on data protection responsibilities
Despite these measures, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security but are committed to maintaining robust safeguards and responding promptly to any security incidents.
11. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without appropriate consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at help@tybugyo.com.
12. Third-Party Links
Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you access through our platform, as we have no control over their data practices.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our platform. We encourage you to review this policy periodically.
Continued use of our services after changes are published constitutes your acknowledgement of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us:
- Email: help@tybugyo.com
- Phone: +353 1 462 7021
- Address: Ballyroan Rd, Templeogue, Dublin 16, Ireland
- WhatsApp: https://wa.me/35314627021
- Telegram: https://t.me/+35314627021
We aim to respond to all privacy-related enquiries within 30 calendar days of receipt.