Privacy Policy

The data controller is Monaco Business School, operating the Monaco Academy online school at monacoacademy.com. For any privacy matter, you can reach us through our contact page.

We only collect the information we need to run the school and deliver your courses.

Information you provide

• Account details — full name, email address, password (hashed), country of residence and preferred language.
• Profile details — optional professional background, photo, industry of interest and study goals.
• Enrolment & billing — courses and programs reserved, prices, dates, billing address and VAT number where applicable.
• Communications — messages sent to us via the contact form, email, or through mentor sessions.

Information collected automatically

• Learning activity — lessons opened, completion progress, quiz results, diplomas issued.
• Technical data — IP address, browser type, device type, time zone and approximate location (city / country) derived from your IP.
• Essential cookies — small files used to keep you signed in and remember items in your cart.

Information from third parties

• Payment confirmation from our payment processor (transaction ID, last four digits of the card, billing country). We never receive your full card details.
• Social sign-in — if you choose to sign in with Google, we receive your name, email and profile picture.

• Deliver the courses and programs you have reserved.
• Issue invoices and diplomas.
• Provide student support and one-to-one mentoring.
• Send service emails (enrolment confirmations, password resets, course updates).
• Send optional newsletters about new courses, scholarships and luxury industry insights — only with your consent, and unsubscribe is one click.
• Improve the curriculum, the platform and the learning experience.
• Detect fraud, abuse and security incidents.
• Comply with our legal, tax and accounting obligations under Monegasque and EU law.

• Performance of a contract — to deliver courses, issue diplomas and manage your account.
• Legitimate interest — to improve the platform, secure the service and prevent fraud, in a way that is balanced against your rights.
• Consent — for marketing newsletters and non-essential analytics. You can withdraw consent at any time.
• Legal obligation — for tax records, accounting and responses to lawful requests from authorities.

We do not sell personal data. We share data only with the service providers strictly needed to operate the school:

• Cloud hosting & database — to store your account, course progress and content.
• Payment processor — to charge your card securely and produce receipts.
• Email delivery — to send transactional and (opt-in) marketing emails.
• Analytics — privacy-respecting analytics to understand how the school is used, in aggregate.
• Authorities — only when legally required (court order, tax audit, regulatory request).

All processors are bound by data-processing agreements requiring them to protect your data and to use it only on our instructions.

• Account & enrolment data — for as long as your account exists. You can ask us to delete your account at any time.
• Invoices & tax records — kept for the period required by Monegasque and EU accounting law (typically up to 10 years).
• Diplomas — retained indefinitely so we can re-issue them on request.
• Support emails — kept for up to 3 years after the last interaction.
• Marketing data — deleted as soon as you unsubscribe.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (the “right to be forgotten”).
• Restrict or object to certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time for processing based on consent.
• Lodge a complaint with the Monegasque CCIN (Commission de Contrôle des Informations Nominatives) or your national data protection authority in the EU/EEA/UK.

To exercise any of these rights, contact us via the contact page. We respond within 30 days.

We use a minimal set of cookies. Most are strictly necessary to deliver the service:

• Session cookies — to keep you signed in and remember your cart.
• Preference cookies — to remember your language and display settings.
• Analytics cookies — only with your consent, to understand aggregate usage. We do not use advertising or cross-site tracking cookies.

Some of our processors are located outside Monaco and the EEA. When data is transferred internationally, we rely on the European Commission’s Standard Contractual Clauses or an equivalent adequacy mechanism, and we assess the destination country’s legal framework to ensure your data remains protected.

We protect your data with encryption in transit (TLS) and at rest, hashed passwords, role-based access controls, audit logs, and regular security reviews. No system is perfectly secure, but we work hard to keep yours safe and we will notify you and the competent authorities of any breach affecting your personal data within 72 hours, as required by GDPR.

Monaco Academy is intended for professionals aged 18 and over. We do not knowingly collect personal data from children. If you believe a minor has registered, please contact us and we will delete the account.

We may update this Privacy Policy to reflect changes in the law or in our services. Material changes will be communicated by email and announced in your account. The “Last updated” date at the top of this page always reflects the current version.