Data Protection & GDPR

Your data is stored in the European Union (Ireland region) with our hosting provider, Supabase. Files you upload, such as a profile photo, are stored privately and served only through time-limited secure links — never public URLs.

Signed-in users can exercise their key GDPR rights directly from account settings:

• Download your data — a complete machine-readable export of everything we hold about you: profile, registrations, form submissions, bookings, support tickets, notification preferences, and emails we’ve sent you.
• Delete your account — permanently anonymises your personal data across all Hub systems in a single, irreversible action.
• Manage communications — adjust notification preferences, or unsubscribe from the newsletter via the link in any issue.

If you don’t have an account, or need help, email hub@eblanalearning.com and we will process your request within 30 days as required by the GDPR.

Every lead-generation form on the Hub includes an explicit consent checkbox before we may contact you, and we record the consent text version and timestamp. You can withdraw consent at any time.

• All traffic is encrypted in transit (HTTPS).
• Passwords are hashed — we can never see them.
• Access to personal data within Eblana Learning is restricted to authorised staff.
• Sessions expire automatically for your protection.

We use a small number of GDPR-compliant processors: Supabase (hosting, EU), Brevo (email), and Google (optional sign-in). Each processes data only on our instructions under data processing agreements.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.