Privacy Policy

Last updated: 21 October 2026

1. Who is responsible for your data

Pnyx Hill Ltd, DD 718-8, 7th Floor, Al Maryah Tower, ADGM Square, Al Maryah Island, Abu Dhabi, United Arab Emirates (“we”) is the controller of the personal data described here. Contact: learn@pnyxhill.academy.

2. What we collect

• When you buy: your name, email address, country, and optionally your phone number, organisation, VAT number and purchase-order number. Card payments are handled by Revolut; we never see or store your full card number.
• When you learn: your learning-portal account, your progress through each course, quiz and exam results, and completion dates.
• Your certificates: your name, the course, the CPD hours, the date and the certificate ID.
• Team orders: the names and email addresses of the learners the buyer enrols. The buyer is responsible for telling those learners that their details have been shared with us for this purpose.
• When you contact us: what you write and your contact details.
• On the website: how you reached us (only if you accept marketing cookies — see the Cookie Policy) and anonymous page-view counts.

3. Why we use it, and on what legal basis

Purpose	Legal basis
Taking your order, giving access to the course, running the exam, issuing the certificate	Performing our contract with you (or with the organisation that enrolled you)
Letting anyone check a certificate by its ID	Our legitimate interest, and yours, in certificates that can be proved genuine
Keeping order and invoice records	Legal obligation (tax and accounting law)
Security, fraud prevention, preventing misuse of logins	Our legitimate interest
Newsletters and CPD reminders	Your consent, which you can withdraw at any time
Measuring which marketing brings buyers	Your consent (marketing cookies)

4. Who we share it with

Only with the service providers who run the Academy for us, under contracts that require them to protect it:

• Automattic (WordPress.com hosting, Jetpack, WooCommerce) — the website and shop
• Revolut — card payments
• Epignosis (TalentLMS) — the learning portal
• Supabase, Vercel and Resend — producing, storing and emailing certificates
• Microsoft (Microsoft 365) and the Site Mailer service — our email
• MailPoet — newsletters, only if you subscribe

Some of these providers process data outside the European Economic Area, including in the United States. Where they do, the transfer is protected by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

We do not sell your personal data.

5. How long we keep it

• Order and invoice records: 7 years, as tax law requires.
• Learning records and certificates: 6 years after completion, so that you can evidence your CPD — CySEC asks certified persons to keep CPD records for five years.
• Marketing: until you unsubscribe.
• Enquiries: 2 years after we last hear from you.

6. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format, and you can withdraw consent at any time. Email learn@pnyxhill.academy. We reply within one month.

You can also complain to the ADGM Office of Data Protection (Abu Dhabi Global Market). If you live in the European Union, you can also complain to the data-protection authority in your country.

7. Changes

We will post any changes on this page with a new date.