Last Updated: September 22, 2026
Storm Kudu is committed to protecting the privacy rights of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland in accordance with the General Data Protection Regulation (GDPR). This document outlines our GDPR compliance practices and your rights under this regulation.
Entity Name: Storm Kudu
Address: 789 Education Boulevard, Suite 240, Vancouver, BC V6B 2Z4, Canada
Email: [email protected]
We process your personal data based on one or more of the following legal grounds:
Processing is necessary to perform our contract with you when you enroll in our programs. This includes account management, curriculum delivery, progress tracking, and payment processing.
We process certain data based on our legitimate business interests, such as improving our services, conducting research on educational methodologies, preventing fraud, and ensuring security. We balance these interests against your rights and will not process data in ways that would override your fundamental rights.
We process data when required by law, such as maintaining financial records for tax purposes or responding to lawful requests from authorities.
For certain processing activities such as marketing communications or optional data collection, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You have the right to obtain confirmation as to whether we process your personal data and, if so, to request access to that data. You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
You have the right to request correction of inaccurate personal data and to have incomplete data completed. You can update most information directly through your account settings.
You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing and there are no overriding legitimate grounds.
You have the right to request restriction of processing in certain situations, such as when you contest the accuracy of the data, when processing is unlawful but you oppose erasure, or when we no longer need the data but you require it for legal claims.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. When you object to direct marketing, we will cease such processing immediately.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. While we use automated systems to personalize your curriculum, human instructors and support staff are involved in significant decisions affecting your learning experience.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
You have the right to lodge a complaint with a supervisory authority in the EEA member state of your habitual residence, place of work, or place of alleged infringement if you believe our processing violates GDPR.
To exercise any of the rights described above, please contact us at [email protected] with your request. Please include sufficient information to allow us to verify your identity and understand your request.
We will respond to your request within one month of receipt. In complex cases, we may extend this period by up to two additional months and will inform you of such extension.
You will not be charged a fee for exercising your rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.
Your personal data may be transferred to and processed in Canada and other countries outside the EEA. When we transfer data internationally, we implement appropriate safeguards to ensure adequate protection, including:
You may request copies of the safeguards we have implemented by contacting us at the address provided above.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Retention periods vary based on data type:
After retention periods expire, we securely delete or anonymize personal data.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the likely consequences, and the measures we are taking to address it.
We engage third-party service providers to process personal data on our behalf. All such processors are carefully selected and bound by data processing agreements that require them to:
We use cookies and similar technologies on our website. You can manage cookie preferences through our cookie banner and browser settings. For detailed information, please review our Cookie Policy.
We do not use cookies or tracking technologies for automated decision-making that produces legal or similarly significant effects.
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete such information promptly.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of material changes through email or a prominent notice on our website. The "Last Updated" date at the top of this document indicates when it was last revised.
For questions, concerns, or to exercise your rights under GDPR, please contact us at:
Email: [email protected]
Address: 789 Education Boulevard, Suite 240, Vancouver, BC V6B 2Z4, Canada
If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities is available at the European Data Protection Board website.