Privacy Policy
Last updated: January 2025
At Aaurelix, we believe transparency builds trust. This policy explains how we handle your personal information when you use our educational services. We're based in Belgium and follow European data protection standards, including the General Data Protection Regulation (GDPR) and Belgian privacy laws.
We collect only what we need to deliver quality investment education. And we're upfront about what happens to your data from the moment you share it with us.
Who We Are
Aaurelix operates from Maurice Dupuislaan 17, 9000 Gent, Belgium. We provide online courses and resources to help people understand investing basics. When we say "we," "us," or "our" in this document, we mean Aaurelix.
For privacy-related questions, reach us at [email protected] or call +3250343359 during business hours.
Information We Collect
We gather different types of data depending on how you interact with our platform. Here's what that looks like in practice:
Account Information
When you sign up, we ask for your name, email address, and a password. Sometimes we collect your phone number if you choose to add it for account recovery. We also note your country and preferred language settings.
Learning Activity Data
As you work through courses, we track which lessons you've completed, quiz scores, time spent on materials, and bookmarks you've saved. This helps us show your progress and recommend relevant content.
Technical Information
Like most websites, we automatically collect technical details: your IP address, browser type, device information, operating system, and time zone settings. We see which pages you visit and how long you stay on them.
Communication Records
When you email us or use our contact form, we keep those messages. If you participate in surveys or leave feedback, we store your responses along with any additional comments you provide.
How We Use Your Data
Everything we collect serves a specific purpose. We don't gather information just for the sake of it.
- Delivering course content and tracking your progress through our curriculum
- Sending course updates, assignment reminders, and educational newsletters
- Responding to your questions and providing support when technical issues arise
- Improving our courses based on how students interact with the material
- Preventing fraud and maintaining platform security
- Meeting legal obligations under Belgian and European law
- Analyzing which topics interest our students most to develop relevant new content
Legal Basis for Processing: Under GDPR, we process your data based on contract performance (providing educational services you've enrolled in), legitimate interests (improving our platform), legal obligations (maintaining records), and your consent (for marketing communications you can opt out of anytime).
Data Retention Periods
We don't keep your information forever. Different types of data have different retention schedules:
| Data Type | Retention Period |
|---|---|
| Active account information | Duration of account plus 30 days after closure |
| Course completion records | 7 years for certification purposes |
| Financial transaction records | 10 years as required by Belgian accounting law |
| Marketing consent records | 3 years from last interaction or until withdrawal |
| Technical logs | 90 days unless needed for security investigations |
Sharing Your Information
We don't sell your data to third parties. Period. But we do work with specific service providers who help us operate the platform:
Service Providers
Our hosting provider stores course materials and user data on European servers. We use an email service to send course notifications and updates. Payment processing happens through a third-party provider that handles credit card information—we never see your full card details.
Legal Requirements
Sometimes Belgian or EU authorities request user information as part of legal proceedings. We comply with valid legal requests but always verify their legitimacy first. We'll notify you if legally permitted to do so.
Business Transfers
If Aaurelix merges with another company or gets acquired, your data would transfer as part of that transaction. We'd notify you beforehand and explain any changes to privacy practices.
International Data Transfers
Your data primarily stays within the European Economic Area. When we work with service providers outside the EEA, we ensure they meet GDPR standards through approved transfer mechanisms like Standard Contractual Clauses.
Some of our analytics tools route data through US servers that participate in the EU-US Data Privacy Framework. We verify all international transfers comply with Belgian and European requirements.
Your Privacy Rights
Under GDPR and Belgian law, you have significant control over your personal information. Here's what you can do:
- Access: Request a copy of all personal data we hold about you. We'll provide this in a readable electronic format within 30 days.
- Correction: Update inaccurate information in your account settings or ask us to correct it for you.
- Deletion: Request that we delete your account and associated data. Some information must stay for legal compliance, but we'll erase everything else.
- Restriction: Ask us to temporarily stop processing your data while we resolve a dispute or verify information accuracy.
- Portability: Get your data in a machine-readable format to transfer to another service provider.
- Objection: Opt out of marketing emails or object to processing based on legitimate interests.
- Withdrawal: Cancel consent for any processing you previously agreed to—this won't affect data we already processed.
To exercise these rights, email [email protected] with your request. We'll verify your identity and respond within one month. No charge applies unless requests are excessive or unfounded.
Security Measures
Protecting your data matters to us. We implement several layers of security:
- All connections to our platform use TLS encryption to protect data in transit
- Passwords get hashed using industry-standard algorithms before storage
- Our servers sit in secure European data centers with physical access controls
- We limit employee access to personal data on a need-to-know basis
- Regular security audits help us identify and fix vulnerabilities
- Automatic logout after 30 minutes of inactivity protects your account
- We monitor systems for suspicious activity and respond to incidents quickly
But no system is completely secure. We do our part, and we ask you to protect your password and report suspicious activity immediately.
Cookies and Tracking
We use cookies to make the site work properly and understand how students use our platform. When you first visit, you'll see a notice explaining our cookie use with options to accept or customize settings.
Essential Cookies
These keep you logged in and remember your preferences. The platform can't function without them, so they activate automatically.
Analytics Cookies
We track which pages get visited most and where students spend time. This helps us improve course structure and identify confusing sections. You can disable these in your account settings.
Third-Party Cookies
Embedded videos from educational platforms may set their own cookies. We don't control these—check those providers' privacy policies for details.
Children's Privacy
Our courses focus on adult investment education. We don't knowingly collect data from anyone under 16 without parental consent. If you're under 16 and want to use our platform, have a parent or guardian contact us first.
If we discover we've collected information from a child without proper consent, we'll delete it promptly.
Changes to This Policy
We update this policy occasionally to reflect new practices or legal requirements. When significant changes occur, we'll email active users and post a notice on the platform for 30 days.
The "Last updated" date at the top shows when we made the most recent changes. Continuing to use our services after updates means you accept the revised policy.
Supervisory Authority
You have the right to lodge a complaint with Belgium's Data Protection Authority (Gegevensbeschermingsautoriteit/Autorité de protection des données) if you believe we've mishandled your personal information.
Their contact details: Rue de la Presse 35, 1000 Brussels, Belgium | Phone: +32 2 274 48 00
We'd appreciate a chance to address concerns directly before you contact the authority, but the choice is yours.
Questions or Concerns?
If anything in this policy seems unclear, or if you want to discuss your privacy rights, get in touch. We respond to most inquiries within two business days.
Address: Maurice Dupuislaan 17, 9000 Gent, Belgium
Phone: +3250343359
Email: [email protected]
Hours: Monday through Friday, 9:00 to 17:00 CET