Privacy Policy

Last updated: September 1, 2025

1. Who We Are & Scope

Regal Recruits Academy ("Regal Recruits", "we", "us", "our") operates regalrecruits.org and the programs, courses, books and mentorship services offered through it. This Privacy Policy explains how we handle personal information when you visit the Site, submit an application, buy a product or take part in a program. It applies alongside our Terms & Conditions.

We are the controller of the personal information described here. The Site may link to third-party services; their handling of your information is governed by their own policies, not this one.

2. Information We Collect

2.1 Information you give us

2.2 Information collected automatically

Our servers log standard technical information when you use the Site: IP address, browser type and version, operating system, referring page, pages requested, timestamps, and error diagnostics. This is used to run and secure the Site and is generated by ordinary web-server operation.

2.3 Information from third parties

Payment processors confirm to us the status of your transaction and return limited details such as the transaction reference, amount, currency, payment method, the email or wallet used, and the billing or shipping name and address you gave them. We do not receive your full card number.

2.4 What we do not collect

We do not ask for and do not want your brokerage credentials, bank logins, account numbers, exchange API keys or wallet private keys. Never send these to us or to anyone claiming to represent us.

3. How We Use Your Information

• To deliver what you bought — process orders, grant course and dashboard access, issue download links, ship physical items, schedule interviews and mentorship sessions, and run the programs themselves.
• To assess applications — review your submission, decide on admission, and follow up about your application.
• To communicate with you — send transactional email such as confirmations, receipts, access and password-reset links, session reminders, schedule changes and program announcements. These are service messages and are not marketing.
• To support you — answer questions, resolve issues, and handle refund requests.
• To market, with your consent — send offers and updates about our programs where you have opted in. Every marketing email carries an unsubscribe link.
• To improve the Services — understand which lessons and features are used and where participants get stuck, so we can improve the curriculum and the platform.
• To keep the Site secure — detect and prevent fraud, payment abuse, unauthorised access and attacks, and enforce our Terms.
• To meet legal obligations — keep tax, accounting and transaction records, and respond to lawful requests.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

4. Our Legal Bases

Where the GDPR, UK GDPR or comparable law applies, we rely on: performance of a contract (delivering the products and programs you purchase); legitimate interests (securing the Site, preventing fraud, improving our Services, and sending service communications); consent (marketing email, which you can withdraw at any time); and legal obligation (tax and accounting records). Under Canadian privacy law (PIPEDA) we rely on your express or implied consent, as applicable.

5. When We Share Information

We share personal information only with service providers who need it to help us run the business, and only for that purpose:

• Payment processors — PayPal and, for cryptocurrency, NOWPayments, to take payment and confirm it.
• Hosting and infrastructure — our cloud hosting provider, whose servers store the Site and its database.
• Email delivery — the mail service that sends our transactional and program email.
• Shipping and fulfilment — carriers and printers who need the delivery address to send physical orders.
• Professional advisers — accountants and lawyers, under confidentiality.

We may also disclose information where required by law, court order or a valid request from a public authority; to protect our rights, safety, property or that of others, including investigating fraud or abuse; and in connection with a merger, acquisition or sale of assets, in which case we will notify you and the acquirer remains bound by this Policy.

Mentors and program staff can see the application and program information relevant to participants they work with. Other participants can see only what you choose to share in group sessions or community spaces.

6. Payments

Card payments are handled by PayPal and cryptocurrency payments by NOWPayments. Your payment details are entered on and processed by those providers under their own terms and privacy policies. We never see or store full card numbers, CVV codes or wallet private keys. We store only what we need to recognise your order: the transaction reference, amount, currency, method and status.

Note that cryptocurrency transactions are recorded on a public blockchain that we neither control nor can erase.

7. Cookies & Tracking

We use a strictly necessary session cookie to keep you signed in and to secure forms and checkout. Without it the Site cannot keep you logged in. We may also store small preferences locally in your browser to remember your progress in a lesson or dashboard.

We do not run third-party advertising networks, cross-site ad trackers, or advertising pixels on this Site. You can block or delete cookies in your browser settings, but doing so will sign you out and may prevent purchases and program access from working. Because we do not track you across other websites, we do not respond to browser "Do Not Track" signals differently.

8. How Long We Keep It

• Account and program records — for as long as your account is active, and afterwards while you retain lifetime access to any program or network you purchased.
• Transaction, invoice and tax records — for at least seven years, as required by Canadian tax and accounting rules.
• Applications that are declined or withdrawn — up to two years, so we can recognise you if you reapply.
• Support and email logs — up to three years.
• Server and security logs — typically up to twelve months, longer where an incident is under investigation.

When information is no longer needed we delete it or irreversibly anonymise it.

9. How We Protect It

We use HTTPS/TLS encryption in transit, store passwords only as salted one-way hashes, encrypt sensitive identifiers used in payment links, restrict database and administrative access to the people who need it, keep server software patched, and monitor for suspicious activity. Access to application and payment records is limited to authorised staff.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the relevant regulator as the law requires. Please report any security concern to support@regalrecruits.org.

10. Your Rights & Choices

Subject to your local law, you may ask us to:

• Access the personal information we hold about you, and receive a copy.
• Correct information that is inaccurate or incomplete.
• Delete your information, where we are not required to keep it for legal, tax or contractual reasons.
• Port your information to another provider in a machine-readable format.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Withdraw consent at any time, without affecting processing already carried out.
• Unsubscribe from marketing email, using the link in any such message. You will still receive service messages about purchases and programs you are enrolled in.

Write to support@regalrecruits.org from the email address on your account and we will respond within 30 days. We may need to verify your identity first. Exercising these rights costs nothing and we will not discriminate against you for it. If you are unsatisfied with our response you may complain to the Office of the Privacy Commissioner of Canada, or to your local data protection authority.

11. International Transfers

Our servers are located in Canada. Some of our service providers, including payment processors and email delivery, operate in the United States and elsewhere, so your information may be transferred to, stored in and processed in countries whose privacy laws differ from your own. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses. Information held in a country may be accessible to that country's courts and law-enforcement authorities under its laws.

12. Children's Privacy

The Services are for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a minor has given us information, contact us and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. The revised version takes effect when posted with an updated "Last updated" date. If the changes are material we will make reasonable efforts to notify you, for example by email or a notice on the Site. Continuing to use the Services after a change means you accept the updated Policy.

14. Contact Us

Questions about this Policy, or to exercise any of the rights in Section 10: