Privacy Policy
This Privacy Policy explains how we collect, use, store and share your personal data when you interact with Navolon and the GCC Business Resilience Program, including through our website, the GCC Operational Resilience Diagnostic, discovery call bookings, program enrollment and the alumni community.
Who We Are
Navolon LLC ("we", "us", "our") is a limited liability company registered in the State of New York, United States. We operate navolon.com and the GCC Business Resilience Program, and we are the data controller for personal data collected through them.
Contact for data protection matters: [email protected]
Registered address: Navolon LLC, New York, United States
Personal Data We Collect
We collect the following categories of personal data:
- (a) Identity data: full name, job title, company name, LinkedIn profile URL.
- (b) Contact data: email address, phone number (including WhatsApp number), country of residence.
- (c) Program data: enrollment format, module completion progress, assessment scores, deliverable submissions, attendance records.
- (d) Payment data: billing name, billing address, payment confirmation reference. We do not store card numbers; payments are processed by Kajabi Payments and its payment processor, Stripe.
- (e) Communications data: records of emails, messages and other communications with us.
- (f) Diagnostic data: your answers to the GCC Operational Resilience Diagnostic, your score and result, and the details you give with it, such as role, sector, company size and country.
- (g) Booking data: when you book a discovery call, your name, email address, company, what you would like to discuss, and the date and time of the call.
- (h) Usage data: how you use our website and online learning platform, such as pages visited, links clicked, time spent, and device and browser type. Website analytics are collected only with your consent (see Section 8).
How We Use Your Personal Data
We use your personal data for the following purposes:
- (a) Program delivery (contract): to provide the program you have enrolled in, including access to content, assessment and certification.
- (b) Payment processing (contract): to process your enrollment fee and issue receipts and invoices.
- (c) Discovery calls (at your request): to schedule, prepare for and hold a call you have booked, and to send confirmations and reminders.
- (d) Diagnostic results (at your request): to calculate your result and send it to you, and, if you agree, follow-up emails about your result.
- (e) Communications (legitimate interests): to send program-related communications, session reminders and community updates. You may opt out of non-essential communications at any time.
- (f) Marketing (consent): to send marketing communications about new cohorts and program updates. We only do this with your consent, which you may withdraw at any time using the unsubscribe link in any email.
- (g) Website analytics (consent): to understand how visitors use navolon.com and improve it, only if you allow analytics cookies.
- (h) Program improvement (legitimate interests): to analyze how participants engage with the program and improve content and delivery.
- (i) Legal compliance (legal obligation): to comply with applicable United States laws and regulations.
- (j) Alumni communications (legitimate interests): to maintain the alumni community and send updates relevant to program graduates.
Data Sharing
We do not sell your personal data. We share it with the following categories of third parties only where necessary:
- (a) Website and program platform (Kajabi): to host our website and program content, run the diagnostic and booking tools, process checkouts and send program and marketing emails.
- (b) Payment processors (Kajabi Payments and Stripe): to process fees and confirm payments.
- (c) Website analytics (Google Analytics, provided by Google): only if you allow analytics cookies.
- (d) Email providers: services that deliver and receive email sent to and from navolon.com addresses.
- (e) Video meeting platforms (such as Zoom, Google Meet or Kajabi live video): for discovery calls and SHIELD live sessions.
- (f) Assessors and facilitators: who may access deliverable submissions for assessment purposes. Assessors are bound by confidentiality obligations.
- (g) Professional advisors: including lawyers, accountants and auditors, where necessary.
- (h) Regulatory authorities: where required by applicable law.
We require all third-party processors to implement appropriate technical and organizational security measures.
International Data Transfers
Navolon LLC is based in the United States. Your personal data is processed and stored on servers in the United States or those of our service providers (including Kajabi, Stripe, Google and our video meeting providers), which may be located in various jurisdictions.
By enrolling in the program, completing the diagnostic or booking a call, you consent to your data being processed in the United States and by those service providers under their respective privacy policies and our agreements with them.
If you have questions about how your data is handled, contact us at [email protected].
Data Retention
We retain personal data for the following periods:
- (a) Program records (enrollment, assessment, certification): 7 years from the date of enrollment.
- (b) Financial and payment records: 5 years from the transaction date.
- (c) Marketing consent records: until consent is withdrawn, plus 1 year.
- (d) Diagnostic data: 2 years from completion, unless you enroll in the program.
- (e) Discovery call bookings: 2 years from the call, unless you enroll in the program.
- (f) Website analytics data: 14 months in Google Analytics.
- (g) Alumni communications: until you unsubscribe or request deletion.
We will delete or anonymize your data when it is no longer needed for the purposes for which it was collected.
Your Rights
Regardless of your country of residence, you may exercise the following rights:
- (a) Access: to request a copy of the personal data we hold about you.
- (b) Correction: to request correction of inaccurate or incomplete data.
- (c) Deletion: to request deletion of your data, subject to our legal obligations to retain certain records.
- (d) Restriction: to request that we restrict processing of your data in certain circumstances.
- (e) Objection: to object to processing based on legitimate interests.
- (f) Withdrawal of consent: to withdraw consent for marketing communications or analytics cookies at any time.
- (g) Portability: to receive your data in a structured, commonly used format.
To exercise any of these rights, write to [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.
Cookies and Analytics
We use a small number of cookies and similar technologies. We do not use advertising or marketing cookies, and we do not sell data collected through cookies.
| Category | What it does | When it is used |
|---|---|---|
| Necessary | Cookies set by Kajabi that make the website, sign-in and checkout work, and a record of your cookie choice stored in your browser. | Always on. These cannot be switched off. |
| Analytics | Google Analytics shows us which pages visitors use and which links they click (for example, the diagnostic, booking and enrollment links), so we can improve the site. It sets cookies named _ga and _ga_ followed by an ID, which last up to two years. | Only after you choose "Accept all", or switch on Analytics under "Manage preferences". |
Your choices. When you first visit, a banner lets you accept all cookies, keep necessary cookies only, or manage your preferences. You can change your choice at any time using the "Cookie settings" link at the bottom of every page, or . If you switch analytics off, Google Analytics stops running and its cookies are deleted. You can also block or delete cookies in your browser settings.
Other connections. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google. Checkout pages are hosted by Kajabi and use Kajabi's necessary cookies.
Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration. These include TLS encryption for data in transit, access limited to authorized personnel, and contractual data processing obligations with our service providers.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, within the timeframes required by applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on our website. The "last updated" date at the top of this page shows when it was last revised.
Continued use of the program or website following notification of material changes constitutes acceptance of the updated policy.