1. Who we are
This privacy policy applies to The Bretthon Financial Trading Institute (BFTI), operating from Athens, Greece, with an Asia hub in Bangalore, India. The data controller is Bretthon Institute. Where the MBA in Tradepreneurship™ is delivered in academic collaboration with LUM School of Management, Italy, that institution acts as a joint controller for academic-records processing.
2. What we collect
We collect only what we need to respond to you and run programmes.
- Enquiry data: name, email address, optional phone number, country of residence, programme of interest, and the message you write into the contact form.
- Programme data: if you enrol in a programme, we collect the additional information required for academic administration (full name, date of birth, country of residence, identification document, payment metadata).
- Technical data: server logs, anonymised analytics (page views, referral source, device type), and cookies as described in section 7.
3. How we use it
- To reply to enquiries.
- To deliver programmes you have enrolled in.
- To send transactional email (registration confirmation, programme schedule, certificate of completion).
- To improve the website and programme materials.
- To meet legal, regulatory, and accreditation obligations.
4. Lawful basis
We process personal data on the lawful bases of consent (for enquiries and marketing), contract (for enrolled students), legitimate interest (for analytics and security), and legal obligation (for tax, regulatory, and accreditation records).
5. Data processors
We share data only with the processors required to run the institute. Each is bound by a data-processing agreement.
- Resend: transactional email delivery.
- Vercel: website hosting.
- Cloudflare: DNS, network security, and asset storage (R2).
- Stripe: international payment processing (where applicable).
- Razorpay: Indian payment processing (where applicable).
6. Retention
Enquiry data is retained for 24 months unless you request deletion. Enrolled-student records are retained for the period required by academic and regulatory obligations, typically seven years after programme completion.
7. Cookies
The Bretthon website uses a small set of essential cookies for session management and security. Where analytics cookies are deployed, they are anonymised and gated behind a consent banner. You may withdraw consent at any time.
8. Your rights
Under the GDPR and equivalent frameworks, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure of your data (“right to be forgotten”).
- Object to processing for direct marketing.
- Request portability of your data.
- Lodge a complaint with the Hellenic Data Protection Authority or your local supervisory authority.
9. International transfers
Some of our processors operate outside the European Economic Area. Where this is the case, transfers are governed by the European Commission’s Standard Contractual Clauses or equivalent safeguards.
10. Contact
For any privacy question or to exercise your rights, write to hello@bretthon.institute. We aim to reply within 30 days, in line with GDPR Article 12.