LEGAL_REVIEWED=true to hide this notice.Privacy Policy
Last updated 4 October 2026
MCEXPERT SRL, Rue Saint-Joseph 51/1, 1140 Evere, Belgium is the data controller for personal data processed on SKWLD. Reach us at contact@skwld.com.
Our database and file storage are hosted in the European Union (Frankfurt). Some processors we rely on are established outside the EU; those transfers are covered by the EU-US Data Privacy Framework or by Standard Contractual Clauses, as applicable.
1. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email, password/social login | Create and secure your account | Contract |
| Billing address, company name, VAT number | Issue a valid invoice and apply the right VAT | Legal obligation |
| Payment metadata (amount, last 4, status) | Take payment, handle refunds and disputes | Contract |
| Enrolments and attendance records | Give you access, issue certificates | Contract |
| Session recordings where you appear | Provide replays to your cohort | Legitimate interest / consent |
| Feedback and ratings | Improve modules and speaker quality | Legitimate interest |
| Emails we send you | Prove delivery of confirmations and reminders | Contract |
| Information requests | Answer your question about a module | Pre-contractual steps |
| WhatsApp messages, your number or username, profile name, and the ad that opened the chat (section 3) | Answer your question and help you book | Pre-contractual steps / legitimate interest |
We do not sell personal data, and we do not use it to train machine-learning models.
2. Who processes it for us
- Clerk — accounts and authentication
- Supabase (EU) — database and file storage
- Our payment provider — payments. Where a card payment is offered, the provider is a controller in its own right for fraud prevention and we never receive your full card number. Where you pay by bank transfer, your bank and ours see the transfer and we see only that it arrived
- Resend — transactional email
- Microsoft Teams — online sessions, calendar invites, attendance and recordings
- Meta Platforms Ireland — the WhatsApp Business Platform that carries our WhatsApp conversations
- Anthropic, or Microsoft Azure OpenAI— the AI model that drafts our WhatsApp assistant’s replies
3. WhatsApp
This section covers what happens when you message SKWLD on WhatsApp, whether you came from an ad, from the button on a course page, or wrote to us directly.
An automated assistant answers first
Our WhatsApp replies are written by an automated assistant, and its first reply tells you so. It answers from our published catalogue: what a course covers, who teaches it, its dates, its price excluding VAT, and how booking works. It does not take bookings, set prices or make any decision about you; booking happens on our website, where you see the exact total before you order.
Write human (or humain) at any time and a person from SKWLD takes over the conversation. The assistant also hands the conversation to a person on its own whenever it cannot answer properly.
What we receive
- Your WhatsApp phone number. If you use a WhatsApp username and do not share your number, we receive your username and an identifier WhatsApp creates for our business instead
- The profile name you set in WhatsApp
- Your messages, when they were sent, and whether ours were delivered and read
- If the chat started from an ad or a Facebook or Instagram post, which one it was (its identifier, its headline and a click identifier). Meta passes this on with your first message; it tells us nothing else about your profile
- A location, only if you choose to share one in the chat
We do not download or keep voice notes, photos, videos or documents. We only record that one arrived, with a document’s file name and any caption you added. For a voice note we ask you to type your question; for a file, a person from SKWLD follows up with you.
Why, and on what legal basis
To answer the question you asked and, if you wish, help you book: these are steps taken at your request before a contract (GDPR art. 6(1)(b)). Keeping the conversation so that whoever answers next has the context, and counting which ads lead to conversations, rests on our legitimate interest in answering well and spending our advertising budget sensibly (art. 6(1)(f)). You can object to that at any time.
We only send you marketing messages on WhatsApp if you have explicitly agreed to receive them.
Who handles it, and where
- Meta Platforms Ireland Ltdruns the WhatsApp Business Platform (Cloud API) that carries the messages, as our processor. Meta keeps messages on its side for up to 30 days to deliver them. Your use of WhatsApp itself is governed by WhatsApp’s own terms and privacy policy.
- Our AI providerdrafts the assistant’s replies: Anthropic, or Microsoft’s Azure OpenAI Service when we use that instead. It receives the recent messages of your conversation and our catalogue, only to draft the next reply. It acts as our processor, may keep the data for a limited period for abuse monitoring under its terms, and may not use it to train its models. We do not use your conversations to train AI models either.
- Resend delivers the internal email alert we send ourselves when a person needs to step in. The alert carries your WhatsApp name or number and an excerpt of your latest message.
Some of these providers are established in, or process data from, the United States. Where applicable, those transfers rely on the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.
How long
We keep WhatsApp messages, and the internal alerts about them, for 12 months, then delete them automatically. Meta keeps messages for up to 30 days on its side. The contact record itself (your number or username, your profile name, the ad that first brought you, and whether you wrote STOP) is kept until you ask us to delete it, because forgetting it would also forget your STOP. If you go on to book, the booking and its invoice are kept as described in section 4.
Stopping it
Write STOP (or ARRÊT) and we stop writing to you on WhatsApp: you get one confirmation, and we never start a conversation with you after that. If you write to us again later, we answer that message, because you asked; your STOP still holds for anything we would start. Write START to withdraw the STOP. You can also block our number in WhatsApp at any time. To have your conversation and contact record deleted, ask on WhatsApp or email contact@skwld.com; the rights in section 5 apply in full.
4. How long we keep it
- Invoices and accounting records — 10 years, because tax law requires it. These cannot be deleted on request.
- Account, enrolments, certificates — while your account is open, then 3 years so we can re-issue a certificate you ask for.
- Recordings — 12 months after the final session.
- Information requests — 24 months.
- WhatsApp messages — 12 months, then deleted automatically. The contact record (number or username, profile name, the ad that brought you, any STOP) until you ask us to delete it.
5. Your rights
Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. This includes your WhatsApp conversations with us. Email contact@skwld.com and we will respond within one month.
Deletion has one limit worth stating plainly: we must retain invoices and the underlying transaction data for the statutory retention period, so a deletion request removes your profile and contact details but not your accounting record.
You can also complain to your national supervisory authority (in Belgium, the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit)).
6. Cookies
We use strictly necessary cookies only: a session cookie to keep you signed in, and, where a card checkout is offered, the payment provider’s cookies during that checkout for fraud prevention. We do not run advertising or third-party analytics trackers, which is why you are not being asked to accept a consent banner.
7. Security
Traffic is encrypted in transit. Passwords are handled by our authentication provider and never stored by us. Access to production data is limited to people who need it. If a breach affects your data and is likely to be a risk to you, we will notify you and the supervisory authority as required.
8. Children
SKWLD is for working professionals and is not directed at anyone under 16. We do not knowingly process their data.
9. Changes
We will post any update here and change the date above. Material changes will be emailed to account holders.
See also our Terms of Service and Refund Policy.