GDPR Privacy Policy
Last updated: 12 December 2025
This Privacy Policy explains how Dealvessa ("we", "us", or "our") collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. By using our platform at dealvessa.info, you acknowledge the practices described in this document.
1. Data Controller
Dealvessa acts as the data controller for personal data collected through this website and its associated services. If you have questions about how your data is handled, you may contact us at:
- Address: 198 Charles St, Launceston, TAS, 7250, Australia
- Email: contact@dealvessa.info
- Phone: +61 421 222 940
2. Personal Data We Collect
We collect personal data that you provide directly and data collected automatically when you use our services.
2.1 Data You Provide
- Full name and email address when registering an account
- Billing information when purchasing a course or subscription
- Messages and enquiries submitted through contact forms
- Profile information and preferences you set within your account
2.2 Data Collected Automatically
- IP address and approximate geographic location
- Browser type, operating system, and device identifiers
- Pages visited, time spent, and navigation paths
- Referral source and search terms used to reach our site
- Cookie identifiers and session tokens
3. Legal Bases for Processing
We process your personal data only when a valid legal basis exists under the GDPR. The legal bases we rely on are:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and service delivery | Performance of a contract (Art. 6(1)(b)) |
| Processing payments | Performance of a contract (Art. 6(1)(b)) |
| Sending promotional communications | Consent (Art. 6(1)(a)) |
| Improving platform functionality | Legitimate interests (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. How We Use Your Data
We use collected personal data for the following purposes:
- Creating and managing your user account
- Providing access to purchased courses and educational content
- Processing transactions and issuing receipts
- Responding to support requests and enquiries
- Sending service-related notifications and updates
- Sending marketing communications where you have given consent
- Analysing usage to improve the platform experience
- Detecting and preventing fraudulent or unauthorised activity
- Meeting legal and regulatory requirements
5. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our services. Cookies are small text files stored on your device.
5.1 Types of Cookies We Use
- Essential cookies: Required for the platform to function. Cannot be disabled.
- Analytical cookies: Help us understand how visitors interact with the site. Used only with your consent.
- Functional cookies: Remember your preferences and settings.
- Marketing cookies: Used to deliver relevant content and track campaign performance. Used only with your consent.
You can manage or withdraw your cookie consent at any time through your browser settings or our cookie preference centre.
6. Data Sharing and Third Parties
We do not sell your personal data. We may share data with trusted third parties only where necessary and under appropriate data protection agreements.
6.1 Categories of Third-Party Recipients
- Payment processors: To complete financial transactions securely
- Cloud hosting providers: To store and serve platform data
- Email service providers: To deliver transactional and marketing messages
- Analytics providers: To analyse platform usage and performance
- Legal and regulatory authorities: When required by law or court order
All third-party processors are contractually bound to process your data only for specified purposes and in compliance with applicable data protection law.
7. International Data Transfers
As a global platform, your data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by relevant data protection authorities
- Transfers to countries recognised as providing adequate data protection
- Binding corporate rules where applicable
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
- Account data: Retained for the duration of your account and up to 3 years after closure
- Transaction records: Retained for up to 7 years for legal and financial compliance
- Marketing consent records: Retained until consent is withdrawn plus 1 year
- Support communications: Retained for up to 2 years after resolution
- Usage and analytics data: Retained in aggregated form for up to 2 years
When data is no longer required, it is securely deleted or anonymised.
9. Your Rights Under GDPR
If you are located in the European Economic Area or a jurisdiction with equivalent data protection legislation, you have the following rights regarding your personal data:
9.1 Right of Access
You may request a copy of the personal data we hold about you and information about how it is processed.
9.2 Right to Rectification
You may request correction of inaccurate or incomplete personal data.
9.3 Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent, or where processing is unlawful.
9.4 Right to Restriction of Processing
You may request that we limit how we use your data in certain circumstances, such as while a dispute is being resolved.
9.5 Right to Data Portability
You may request your personal data in a structured, commonly used, machine-readable format and have it transferred to another controller where technically feasible.
9.6 Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
9.7 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
9.8 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe your data protection rights have been violated.
To exercise any of these rights, contact us at contact@dealvessa.info. We will respond within 30 days of receiving your request.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
- Encryption of data in transit using TLS
- Encryption of sensitive data at rest
- Access controls and role-based permissions for staff
- Regular security assessments and vulnerability testing
- Incident response procedures for potential data breaches
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
11. Children's Privacy
Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without verified parental consent, we will delete that data promptly. If you believe a child has provided us with personal data, please contact us at contact@dealvessa.info.
12. Automated Decision-Making and Profiling
We do not make decisions that produce legal or similarly significant effects on individuals based solely on automated processing, including profiling, without human involvement. Where any form of automated analysis is used to personalise content or recommendations, it does not produce binding decisions affecting your rights.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by displaying a prominent notice on our platform prior to the change taking effect. The date at the top of this page indicates when the policy was last revised. Continued use of our services after changes are posted constitutes acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to us:
- Email: contact@dealvessa.info
- Phone: +61 421 222 940
- Post: 198 Charles St, Launceston, TAS, 7250, Australia
We are committed to resolving any concerns promptly and transparently.