Privacy Policy

Last updated: 24 July 2026

1. Who we are

This Notice explains how the Medoyid Club platform (“we”, “us”, the “Platform”) collects, uses, stores, and otherwise processes personal data when you use https://www.medoyid-club.com, create an account, purchase access to courses and materials, or contact us.

Data controller: Sole proprietor [full name to be added after state registration], brand Medoyid Club.
Address: Ukraine, Kyiv (full legal address will be published after state registration).
Personal data contact: Medoyid Club administration.
Contacts: legal@medoyid-club.com, support@medoyid-club.com

2. Scope

This Notice covers the website, account area, orders and payments, participation in online events, newsletters (if you subscribe), and support requests.

3. Data we process

Depending on your actions, we may process:

• account data: name / display name, email, account ID, login data;
• payment and transaction data: order contents, amount, payment status, provider payment IDs (we do not store full card details — the payment provider does);
• service access data: purchased courses, enrolment status, access history;
• communications: emails and messages you send us;
• online event data (if applicable): display name, chat messages, audio/video if you enable them;
• technical data: IP address, device/browser type, security logs, cookies and similar technologies;
• extra contacts you voluntarily provide (phone, messenger).

You do not have to provide every category, but some data is required to create an account, take payment, or grant access.

4. Purposes and legal bases

We process data under Ukraine’s Law on Personal Data Protection, including to:

• enter into and perform a contract (access, support);
• meet legal obligations (accounting, taxes, lawful requests);
• pursue the Platform’s legitimate interests (security, fraud prevention, service improvement) without overriding your rights;
• rely on your consent (marketing emails, non-essential cookies — where required).

If the GDPR or another foreign law applies to you, the corresponding bases are read together with the purposes above.

5. Event recordings

If an event is recorded, it is to provide the recording to participants, support quality control, and evidence that the service was delivered. Your display name, voice, image, and chat may appear if you share them.

Do not share unnecessary sensitive data on stream or in chat. To avoid appearing in a recording, mute camera/mic or email support@medoyid-club.com in advance about possible alternatives.

6. Cookies and analytics

We use necessary cookies for site operation and security. Analytics / marketing technologies are used only as allowed by law; where consent is required, we will ask for it. Browser settings can also limit cookies.

7. Sources of data

• directly from you;
• automatically from your device/browser while using the site;
• from payment providers (payment confirmation, refunds, chargebacks);
• from auth / communication services you choose to use.

8. Recipients

We do not sell personal data. Access may be given only to:

• payment providers (including LiqPay / PrivatBank);
• hosting, infrastructure, CDN, email, and technical contractors;
• video/streaming services used for events;
• analytics/ads providers — only with a lawful basis;
• accountants, lawyers, auditors — as professionally needed;
• public authorities — where required by law;
• other participants in a group event — only what is visible in real time (name, chat, video).

Processors acting on our instructions must keep data confidential and follow our instructions.

9. International transfers

Because some infrastructure and payment services may be outside Ukraine (including the EU / US), data may be transferred abroad. We take reasonable safeguards (contractual commitments with vendors, security settings). Where law requires further guarantees, we apply them to the extent available.

10. Retention

We keep data no longer than needed for the processing purpose and legal requirements, including:

• account data — while the account is active and for a reasonable period after deletion / last activity;
• order and payment data — for accounting and tax retention periods (typically up to 3 years, unless law requires longer);
• support requests — up to 2 years after closure, unless a dispute remains;
• event recordings — for the participant access period plus a reasonable archive period to evidence service delivery.

After that, data is deleted, anonymised, or archived as required by law.

11. Your rights

Subject to law, you may:

• learn about sources, purposes, and categories of recipients;
• access your data;
• request correction of inaccurate data;
• request deletion or restriction where the law allows;
• object to processing within the law (including marketing);
• withdraw consent (where processing is consent-based);
• complain to the Ukrainian Parliament Commissioner for Human Rights or to a court.

We generally respond within 30 calendar days. Email legal@medoyid-club.com. We may ask you to verify your identity.

12. Minors

Platform services are for users 18+. If we learn we hold a minor’s data contrary to these rules, we will restrict processing or delete it.

13. Security

We apply organisational and technical measures: access control, connection protection, backups, vendor oversight, and incident response. No internet transmission is perfectly secure; we work to minimise risk.

14. Artificial intelligence

We do not use your personal data to train third-party AI models without a separate legal basis and notice. We do not knowingly use automated decisions with legal effects for you; if that changes, we will update this Notice.

15. Changes

We may update this Notice. The current version date is shown at the top. Material changes affecting your rights will be accompanied by additional notice where required by law.

16. Contacts and complaints

Privacy questions: legal@medoyid-club.com.
General support: support@medoyid-club.com.

You may also complain to the Ukrainian Parliament Commissioner for Human Rights or a competent court. Where the GDPR applies, you may complain to the relevant EU supervisory authority.