Privacy Policy

Last updated: October 13, 2025

CommandBridge School (“we”, “us”, “our”) operates cmdbridgesc.com (the “Site”) and provides director-level learning programmes and guided workshops (the “Services”). We handle personal information in accordance with Canadian law (including PIPEDA) and, where applicable, the EU/UK GDPR.

1. Data Controller & Contact

CommandBridge School is the controller for information processed via the Site and Services.

2. Information We Collect

  • Identity & Contact: name, email address, professional title, preferred language.
  • Programme Data: registrations, attendance, preferences, submitted reflections.
  • Usage & Device: IP address, browser type, device identifiers, pages viewed, session duration, referrer URL.
  • Support & Communications: inquiries and related metadata.
  • Consent Records: cookie choices and preference logs.

3. Purposes of Processing

  • Provide and maintain the Services and user accounts.
  • Share schedules, materials, and essential updates.
  • Improve usability, accessibility, and quality of resources.
  • Maintain security, prevent misuse, and ensure reliability.
  • Comply with legal obligations and respond to lawful requests.

4. Lawful Bases (GDPR, where applicable)

  • Contract: delivering requested Services.
  • Legitimate Interests: operating and improving the Site in a balanced way.
  • Consent: for optional communications and non-essential cookies (withdrawable anytime).
  • Legal Obligation: record-keeping and compliance requirements.

5. Cookies & Similar Technologies

We use cookies to operate core features, understand aggregated usage, and remember preferences.

  • Strictly Necessary: security and basic functionality.
  • Performance/Measurement: aggregated metrics for design improvements.
  • Preferences: language, cookie status, and basic settings.

You can manage cookies via your browser and our on-site banner. Non-essential cookies are used only after consent where required. Disabling certain cookies may limit functionality.

6. Retention

We retain personal information only as long as necessary for the purposes above and legal requirements. Data is securely deleted or de-identified when no longer needed.

7. Sharing & Service Providers

We share data with selected providers for hosting, secure storage, communication, measurement, and support. These processors act under our instructions and confidentiality obligations.

8. International Transfers

Where information is processed outside your jurisdiction, we implement safeguards (e.g., contractual protections) to ensure an adequate level of protection consistent with applicable law.

9. Security

We apply administrative, technical, and physical safeguards to reduce risks of unauthorized access, alteration, disclosure, or loss. While no method is absolute, we continually improve protections.

10. Your Rights

Subject to law, you may request access, correction, deletion, or portability, and object to or restrict processing. Where processing relies on consent, you may withdraw it at any time. Contact privacy@cmdbridgesc.com. We may verify identity before fulfilling requests.

11. Children’s Privacy

Our Services are intended for adults and professionals. If a child’s information was provided inadvertently, contact us to request deletion.

12. Communications & Preferences

You can manage non-essential communications via unsubscribe links or by contacting us. Essential service and policy notices may still be sent where necessary.

13. Changes to This Policy

We may update this Policy periodically. The “Last updated” date indicates recent changes. Significant updates may be communicated via the Site or email.