GDPR Privacy Policy

Last updated: December 22, 2025

MentalZone ("we", "our", or "us") operates the website luwomau.info and provides online webinar and educational services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

By accessing or using our services, you acknowledge that you have read and understood this policy.

1. Data Controller

MentalZone is the data controller responsible for your personal data.

2. Personal Data We Collect

We collect personal data that you provide directly to us, as well as data collected automatically when you use our services.

2.1 Data You Provide

Category	Examples
Identity data	Full name, username, profile photo
Contact data	Email address, phone number
Account data	Password (hashed), account preferences
Payment data	Billing address, payment method details (processed by third-party providers)
Communication data	Messages sent through our platform, support requests
Participation data	Webinar attendance, questions submitted, poll responses

2.2 Data Collected Automatically

Category	Examples
Technical data	IP address, browser type and version, device type, operating system
Usage data	Pages visited, session duration, clickstream data, feature interactions
Cookie data	Session identifiers, preference cookies, analytics identifiers

3. Legal Basis for Processing

We process your personal data only where we have a valid legal basis under GDPR Article 6. The applicable legal bases are:

Legal Basis	When We Use It
Contract performance	To provide you with access to webinars, manage your account, and deliver purchased services
Legitimate interests	To improve our platform, prevent fraud, maintain security, and conduct internal analytics
Consent	To send marketing communications, set non-essential cookies, or process data for optional features
Legal obligation	To comply with applicable laws, regulations, or lawful requests from authorities

4. How We Use Your Personal Data

We use your personal data for the following purposes:

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

Type	Purpose	Legal Basis
Essential cookies	Session management, authentication, security	Contract / Legitimate interests
Functional cookies	Remembering preferences and settings	Consent
Analytics cookies	Understanding how users interact with our platform	Consent
Marketing cookies	Delivering relevant promotional content	Consent

5.2 Managing Cookies

You can manage your cookie preferences at any time through our cookie consent tool available on the website. You may also configure your browser to block or delete cookies. Please note that disabling essential cookies may affect the functionality of our services.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with the following categories of recipients:

6.1 Service Providers

We engage trusted third-party processors who act on our behalf and under our instructions. These include providers of cloud hosting, payment processing, email delivery, video streaming infrastructure, and customer support tools. All processors are bound by data processing agreements that require them to protect your data.

6.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

6.3 Legal Requirements

We may disclose your personal data where required by law, court order, or regulatory authority, or where necessary to protect the rights, safety, or property of MentalZone, our users, or the public.

7. International Data Transfers

Our services are provided to an international audience. Where we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other mechanisms recognised under GDPR Chapter V.

You may request information about the specific safeguards applied to your data transfers by contacting us at help@luwomau.info.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

Data Type	Retention Period
Account data	Duration of account plus 2 years after closure
Transaction and billing records	7 years from the date of transaction
Support correspondence	3 years from the date of last interaction
Analytics data	26 months from collection
Marketing consent records	Until consent is withdrawn, plus 1 year

When data is no longer required, it is securely deleted or anonymised.

9. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Right	Description
Right of access	Request a copy of the personal data we hold about you
Right to rectification	Request correction of inaccurate or incomplete data
Right to erasure	Request deletion of your data where there is no compelling reason for its continued processing
Right to restriction	Request that we limit how we process your data in certain circumstances
Right to data portability	Receive your data in a structured, machine-readable format and transfer it to another controller
Right to object	Object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent	Withdraw consent at any time where processing is based on consent, without affecting prior processing
Right not to be subject to automated decisions	Request human review of decisions made solely by automated means that significantly affect you

To exercise any of these rights, please contact us at help@luwomau.info. We will respond to verified requests within 30 days. We may ask you to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. In Ireland, the relevant authority is the Data Protection Commission (www.dataprotection.ie).

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and staff training on data protection obligations.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use strong passwords and to notify us immediately if you suspect any unauthorised access to your account.

11. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from individuals under 16 without verifiable parental or guardian consent. If we become aware that we have collected such data without appropriate consent, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at help@luwomau.info.

12. Third-Party Links

Our platform may contain links to third-party websites, tools, or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any external sites you visit, as we have no control over their data practices and accept no responsibility for them.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service features. When we make material changes, we will notify you by email or by displaying a prominent notice on our website prior to the changes taking effect. The date at the top of this policy indicates when it was last revised.

Your continued use of our services after the effective date of any changes constitutes your acknowledgement of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: