ALLUMINAS PRIVACY POLICY

Last Updated: April 07, 2025

INTRODUCTION

At ALLUMINAS (A WeAreTechGlobal Brand, referred to as “we”, “our”, “us”), we recognize the importance of protecting your personal information and are committed to processing it responsibly and in compliance with applicable data protection laws.

This Privacy Policy explains how we handle personal information collected through our learning and training platform, websites, mobile applications, and related services (collectively referred to as “ALLUMINAS Services”). As a startup focused on corporate learning solutions, we’re committed to maintaining the highest standards of data protection.

Company Details: US Office: 1550 Wilson Boulevard, Suite 700 #216, Arlington, VA 22209 UK Office: 7 Bell Yard, London WC2A 2JR, United Kingdom Email: team@wearetechglobal.com Website: www.alluminas.com

LEGAL FRAMEWORK AND JURISDICTION

This privacy policy complies with: • UK General Data Protection Regulation (UK GDPR) • Data Protection Act 2018 (as amended) • Data (Use and Access) Bill 2025 • California Privacy Rights Act (CPRA) • Federal Data Privacy Act 2024 (US) • International data protection frameworks

SUMMARY OF KEY POINTS

• We collect and process personal information necessary for providing learning and training services • We maintain strict data protection standards across all regions • We process data based on valid legal grounds • We implement robust security measures • We respect and protect your privacy rights

INFORMATION WE COLLECT

1. Essential Information: • Names and contact details • Account credentials • Corporate affiliation • Training history and progress • Certification records • Payment information • Professional qualifications • Security clearance status

2. Technical Information: • IP addresses • Device information • Browser type • Operating system • Usage analytics • Location data (when permitted)

3. Platform Requirements Data: • Browser compatibility (Chrome/Firefox/Safari/Edge) • Operating system requirements (iOS 14+/Android 8+) • Internet connection (minimum 10 Mbps) • Device specifications

LEGAL BASES FOR PROCESSING

We process your information under:

1. Contractual Necessity: • Service delivery • Account management • Payment processing • Training delivery • Certification management

2. Legal Obligation: • Regulatory compliance • Tax requirements • Security verification • Employment law compliance

3. Legitimate Interests: • Platform improvement • Service optimization • Performance monitoring • Security enhancement • Resource allocation

DATA PROTECTION MEASURES

1. Technical Measures: • Advanced encryption (2025 standards) • Multi-factor authentication • Regular security audits • Automated threat detection • 99.5% platform uptime guarantee • Penetration testing

2. Organizational Measures: • Staff training • Access controls • Incident response procedures • Regular compliance reviews • Security certifications

INTERNATIONAL DATA TRANSFERS

We protect international transfers through: • Standard Contractual Clauses (2025 version) • UK-US Data Bridge Agreement • Data Processing Agreements • Binding Corporate Rules

DATA RETENTION

We retain information for: • Active accounts: Duration of service • Closed accounts: 7 years • Training records: 5 years • Performance data: 3 years • Financial records: 7 years • Usage data: 24 months

THIRD-PARTY SHARING

We share data with: • Cloud service providers • Payment processors • Learning content providers • Platform hosting services • Security providers • Professional advisors

YOUR PRIVACY RIGHTS

Regional Rights: • EU/UK: GDPR rights • California: CCPA/CPRA rights • Canada: PIPEDA rights

These include rights to: • Access your data • Correct inaccuracies • Request deletion • Data portability • Restrict processing • Object to processing • Withdraw consent

SECURITY INCIDENT RESPONSE

• 24-hour initial assessment • 72-hour regulatory notification • Affected user notification within 7 days • Remediation tracking • Business continuity measures

COOKIES AND TRACKING

• Essential Cookies: No consent required • Analytics Cookies: Opt-out available • Marketing Cookies: Explicit consent required • Preference Cookies: Browser-level control

POLICY UPDATES

We regularly update this policy to reflect: • Service improvements • Legal requirements • Privacy standards • Platform evolution

CONTACT INFORMATION

Data Protection Officer ALLUMINAS (A WeAreTechGlobal Brand) 7 Bell Yard London WC2A 2JR Email: team@wearetechglobal.com

Regulatory Authority: UK: Information Commissioner’s Office ICO Helpline: 0303 123 1113 Website: www.ico.org.uk

For any questions about this policy or our privacy practices, please contact us at team@wearetechglobal.com.