Privacy Policy

This Privacy Policy explains how Goat Tray Training processes personal data when you use goattraypaintingimage.biz. It describes the categories of data we collect, the purposes for which we use it, when we share it, and the choices and rights that may apply.

Policy guidance

This section introduces how personal information, user rights, and support pathways are addressed in the document below.

Use of information
Handled under this policy framework
User rights
Requests and access options are described below
Support channel
User Rights

Your Rights

Depending on applicable law, you may have rights to access, correct, delete, object to certain processing, or request restriction of processing. You may also have the right to complain to a competent supervisory authority if you believe your data has been handled unlawfully.

Available rights depend on your location and the legal basis for processing.
Requests

How to Make a Request

Requests should describe the right you wish to exercise and provide enough information for us to locate the relevant data. We may ask for additional details to confirm identity or clarify the request, and we will respond within the period required by applicable law.

We may need to verify identity before acting on a rights request.
Data Retention

Data Retention

We retain personal data for the period necessary to provide the service, maintain records, resolve disputes, enforce agreements, and comply with legal or accounting obligations. When data is no longer needed, we delete it, anonymize it, or securely archive it where deletion is not immediately possible.

We keep data only for as long as needed for the stated purpose or as required by law.
Policy Updates

Policy Changes

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the services we provide. When changes are material, we will take reasonable steps to make the updated policy available and indicate when it was last revised.

We review this policy from time to time and record the effective date of material changes.
Privacy Office

Contact Information

Privacy email
Telephone
+262 692 82 30 89
Mailing address
8 Rue de l'Église, 97450 Saint-Louis
Privacy contact
01

Data We Collect

We may process identifiers and contact details, account or profile information, training-related submissions, payment or billing records where applicable, device and browser data, usage logs, and communications sent through the site. We collect only the information needed to operate the service, manage requests, and meet legal obligations.

The categories collected depend on how the site is used and what information is submitted.
02

Sources of Data

We receive data directly from you when you complete forms, create an account, request information, or communicate with us. We also collect data automatically through the website and may receive limited information from hosting, analytics, payment, or security providers that support the service.

Information comes from users, site activity, and service providers involved in operating the website.
03

Types of Cookies

The site may use strictly necessary cookies to support core functions, functional cookies to remember choices, and analytics cookies to understand site use and improve performance. Cookies may be session-based or persistent, depending on their purpose.

We use only standard cookie categories needed for operation, measurement, and preference handling.
04

Cookie Controls

You may block or delete cookies through your browser settings. If the site provides a cookie banner or preference tool, you may use it to manage non-essential cookies. Some features may not function properly if certain cookies are disabled.

Cookie settings can be adjusted through browser controls and, where offered, on-site preference tools.

How We Use Data

We use personal data to operate and secure the website, provide training-related content and services, respond to inquiries, manage accounts and transactions, analyze site performance, maintain records, prevent fraud or misuse, and comply with legal obligations. Where required, we rely on consent or other lawful bases under applicable data protection law.

Processing is limited to operational, administrative, and compliance needs.

Service Providers

We may share personal data with hosting, analytics, security, payment, communication, and other operational providers that process data on our behalf. These parties are expected to use the data only for the services they provide to us and to apply appropriate confidentiality and security measures.

Service providers receive only the data needed to perform their assigned functions.
GDPR

GDPR Overview

When the GDPR applies, we process personal data on a lawful basis such as consent, contract performance, legal obligation, or legitimate interests, depending on the context. We limit processing to what is necessary for the relevant purpose and apply appropriate safeguards.

Where the GDPR applies, it governs our processing of personal data of individuals in the European Economic Area, including users in Réunion.

EU compliance references
Supervisory Authority European Data Protection Board
This section applies where GDPR protections are available to the user.
Your data rights

GDPR Rights

Where the GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing, and to receive a copy of certain data in a portable format. If processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

GDPR rights are available only to the extent they apply under the circumstances and applicable law.