Skip to main content

Privacy Policy

Last Updated: March 12, 2026

This Privacy Policy explains how Construction Sales Academy (“we,” “us,” or “our”) collects, uses, and protects personal data when you visit this website and when you submit information through our registration form.

1. Introduction & Controller Identity

Construction Sales Academy is an educational website focused on sales skills for construction supplies retail and trade counters. This Privacy Policy describes what personal data we collect, why we collect it, and the choices you have.

Data Controller: Mejrvilon LLC, Roháčova 145/14, Žižkov (Praha 3), 130 00 Praha, Czechia.

Contact email: [email protected]. Phone: +420 222 520 418.

Website domain: construction-sales.academy.

We do not appoint a Data Protection Officer for this website. If you have privacy questions, please contact us using the email above and include “Privacy” in the subject line.

2. Personal Data We Collect

The personal data we collect depends on how you use the website. We aim to keep collection limited and relevant to an educational training context.

  • Identity and contact data: first name, last name, email address.
  • Form content: learning goals or other details you provide in the message field.
  • Technical data: IP address, browser type/version, device and operating system, language settings, and approximate location derived from IP.
  • Usage data: pages visited, time spent, referrer URLs, and click paths.
  • Cookies and identifiers: cookies used for essential site functions and (if you consent) analytics and marketing identifiers described in Section 4.
  • Conversion events: events indicating actions such as a form submission or a visit to a confirmation page.

We do not intentionally collect special-category data (such as health information, religious beliefs, or political opinions). We also do not request financial account details or government identification numbers on this website.

Please avoid entering sensitive information in the learning goals field. If such information is provided, it will be handled as part of the message content and retained only as necessary to respond.

3. Why We Process Personal Data & Legal Basis (GDPR Art. 6)

We process personal data for specific purposes and rely on the legal bases listed below (GDPR Article 6). If you are located outside the EEA/UK, we apply these principles as good practice, and local laws may provide additional rights.

  • Registration form and inquiries: to respond with cohort timing, curriculum details, and next steps. Legal basis: Art. 6(1)(b) (steps prior to entering a contract) and Art. 6(1)(a) (consent) where applicable, including the consent checkbox on the form.
  • Analytics (optional): to understand how visitors use the site and to improve content and usability. Legal basis: Art. 6(1)(a) consent.
  • Marketing and remarketing (optional): to measure advertising effectiveness and show relevant messages to people who have visited the site. Legal basis: Art. 6(1)(a) consent.
  • Security and fraud prevention: to protect the website, detect abuse, and maintain service availability. Legal basis: Art. 6(1)(f) legitimate interests.
  • Legal compliance: to meet applicable legal obligations, respond to lawful requests, and keep records where required. Legal basis: Art. 6(1)(c) legal obligation.

Automated Decision-Making (Art. 22): We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies & Tracking

Cookies are small text files stored on your device. We use cookies and similar technologies to operate the website, remember your privacy choices, and (if you consent) measure traffic and advertising performance. Some tracking may also occur through pixel tags and server-side event delivery, depending on your consent choices and our configuration.

Essential cookies (always active)

Essential cookies are required for core site functionality and privacy preference storage. They are set regardless of analytics/marketing choices. Examples include: _site_session (session continuity) and cookie_consent (your cookie choices). Typical retention ranges from session-only to 12 months.

Analytics cookies (optional, consent required)

If you enable analytics cookies, we may use Google Analytics 4 (GA4) to understand traffic patterns, such as which pages are most visited and how users navigate the site. We configure analytics to reduce data collection where possible, including IP anonymization where supported. Example cookies include _ga and _ga_XXXXXXXXXX (GA4). Analytics data retention is typically 14 months.

Marketing cookies (optional, consent required)

If you enable marketing cookies, we may use technologies from advertising partners (such as Google Ads and Meta) to measure conversions, support remarketing, and build audiences for ads. Example cookies include _gcl_au (Google Ads) and _fbp/_fbc (Meta). Retention varies by cookie, commonly around 90 days.

Beyond cookies, advertising and analytics providers may process device identifiers derived from your browser configuration, IP address, and user agent. Where server-side tracking is used, event data may be transmitted from our servers to partners; we apply consent settings so that analytics/marketing events are sent only when you choose those categories.

For more detail on cookie categories and examples, see our Cookie Policy.

5. Consent (EEA/UK)

Users in the EEA and UK receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies activate only after explicit, informed, freely given consent (Art. 6(1)(a)).

Consent is recorded in the cookie_consent browser cookie (12 months). You may withdraw consent at any time by using “Manage cookie preferences” in the footer or by clearing cookies in your browser settings. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing With Advertising & Service Partners

We share limited information with service providers to operate this website and, if you consent, to measure analytics and advertising performance. We do not sell personal data.

We do not permit these providers to use site data for their own independent commercial purposes. They process data as service providers and, in some cases, as independent controllers depending on the product and configuration.

7. International Transfers

Some providers we use are located outside the EEA/UK, including in the United States. When personal data is transferred internationally, we rely on legal mechanisms such as the EU-US Data Privacy Framework (and the UK Extension, where applicable) and, where needed, Standard Contractual Clauses (EU 2021/914) or the UK International Data Transfer Agreement (IDTA) as fallback safeguards.

8. Data Retention

We retain personal data only for as long as needed for the purposes described in this policy, unless a longer retention period is required by law.

  • Registration form submissions and correspondence: up to 2 years from the last interaction.
  • Analytics data: typically 14 months (provider setting).
  • Marketing cookies: per cookie lifetime (commonly around 90 days).
  • Server/security logs: typically up to 90 days, unless needed to investigate abuse or incidents.
  • Cookie consent records: up to 3 years for audit purposes.
  • Legal and compliance records: as required by applicable law (for some records this can be 6–10 years).

9. Your Rights (GDPR & UK GDPR)

If GDPR or UK GDPR applies to you, you may have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate personal data (Art. 16)
  • Request erasure (Art. 17)
  • Request restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent at any time (Art. 7(3))
  • Lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, email [email protected]. We normally respond within 30 days. For complex requests, the response time may be extended by up to 60 additional days as permitted by law.

Supervisory authority guidance: EU: https://edpb.europa.eu. UK (ICO): https://ico.org.uk. Czech Republic (UOOU): https://uoou.gov.cz.

10. Children

This site is not directed at individuals under 16. We do not knowingly collect personal data from minors. If we learn that we have received personal data from a child under 16 without verifiable parental consent, we will delete it promptly.

11. Do Not Track

This website does not respond to “Do Not Track” (DNT) browser signals. Third-party providers may have their own DNT handling and opt-out mechanisms.

12. Account & Data Deletion Requests

We do not offer user accounts on this website. If you want us to delete personal data you submitted through the registration form, email us with the subject line “Data Deletion Request” at [email protected].

For security, we may ask you to confirm your identity and your email address before deleting data. We aim to complete deletion within 30 days, unless retention is required by law or necessary to resolve a dispute.

13. Business Transfers

If we are involved in a merger, acquisition, asset sale, financing, or insolvency, personal data may be transferred to a successor entity. If such a transfer materially changes how personal data is used, we will provide notice on the website.

14. California (CCPA / CPRA)

If you are a California resident, you may have rights regarding personal information under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of personal information we may collect or disclose in the last 12 months include:

  • Identifiers: name, email, IP address, cookie identifiers.
  • Internet or network activity: browsing interactions and site usage data.
  • Inferences: interests or preferences inferred from site interactions for advertising personalization (only if you consent to marketing cookies).

We do not sell personal information as defined by CCPA. We may share personal information for cross-context behavioral advertising when marketing cookies are enabled. California residents may opt out via our cookie preferences panel (footer link “Manage cookie preferences”).

You may request to know, delete, or correct personal information, and you may opt out of sale/sharing. To submit a request, email [email protected] with the subject line “California Privacy Request.” We will verify your identity as required.

Authorized agents may submit requests on your behalf if they provide proof of authorization.

15. Virginia (VCDPA)

If you are a Virginia resident, you may have rights under the Virginia Consumer Data Protection Act (VCDPA), including access, correction, deletion, portability, and the ability to opt out of targeted advertising.

To submit a request, email [email protected] with the subject line “Virginia Privacy Request.” We do not sell personal data or engage in profiling that produces legal or similarly significant effects.

If we refuse your request, you may appeal by emailing the same address with the subject line “Appeal of Refusal — Privacy Request.” We will respond within 60 days. If the appeal is denied, you may contact the Virginia Attorney General.

16. Nevada

Nevada residents may submit a verified request to opt out of the sale of certain personal information by emailing [email protected] with the subject line “Nevada Do Not Sell Request.” We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in legal requirements, our services, or our data practices. Material changes will be announced via a notice on the website at least 14 days before they take effect. The “Last Updated” date at the top of this page will be revised whenever we publish an update.

18. Contact

If you have questions about this Privacy Policy or our data practices, contact:

Mejrvilon LLC
Roháčova 145/14
Žižkov (Praha 3), 130 00 Praha, Czechia
Email: [email protected]
Phone: +420 222 520 418