Privacy Notice

This notice explains how Grand Cayman Group Ltd. (“we”, “us”), a company registered in the Cayman Islands, handles personal data collected through Workflow Automation Academy (the “Service”). We act as the data controller for personal data described here.

• Account data — name, email address, login credentials, and profile settings you provide.
• Course activity — lessons viewed, quiz answers and scores, capstone submissions, notes, and certificate records.
• Support messages — content of tickets and messages you send us.
• Usage and device data — IP address, browser type, device identifiers, pages viewed, timestamps, and diagnostic logs.
• Order data — order confirmations and receipts we receive from our payment provider. Card details are collected and processed by Paddle, not by us.

• Create and manage your account and enrollment.
• Deliver the course, track progress, grade quizzes, and issue certificates.
• Provide customer support and respond to your requests.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Improve the Service, curriculum, and content quality.
• Send transactional messages about your account or purchase.
• Comply with legal obligations.

Where data protection law applies, we rely on: performance of our contract with you (providing the Service); our legitimate interests (running, securing, and improving the Service); your consent (where required, e.g. certain cookies); and legal obligations (e.g. tax and accounting records).

• Paddle — our Merchant of Record and payment processor, for checkout, subscription management, payments, tax compliance, refunds, and invoicing.
• Service providers and subprocessors — cloud hosting, database and authentication, email delivery, analytics, and support tooling that operate the Service on our behalf.
• Professional advisers — legal, accounting, and audit professionals when needed.
• Authorities — where required by law, court order, or to protect our rights, users, or the public.
• Successors — in a merger, acquisition, or sale of assets, subject to this notice.

Our service providers may process personal data in countries other than the one in which you live. Where required, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep personal data for as long as you have an account, and afterwards for the period needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When no longer needed, we delete or anonymize it.

Depending on where you live, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent where processing is based on consent. Users in the UK/EEA also have the right to lodge a complaint with a supervisory authority. To exercise your rights, email info@grandcaymangroup.com. We aim to respond within one month.

We use appropriate technical and organizational measures — including encryption in transit, access controls, and audit logging — to protect personal data. No system is perfectly secure; we work to address issues promptly if they arise.

We use cookies and similar technologies that are essential to the Service (authentication, session state) and, where applicable, limited analytics to understand usage. You can manage cookies through your browser settings. Checkout is served by Paddle, which sets its own cookies as described in Paddle’s privacy policy.

The Service is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us and we will delete it.

We may update this notice from time to time. Material changes will be posted here with a new “last updated” date.

Grand Cayman Group Ltd. · info@grandcaymangroup.com