Legal

Privacy policy

Last updated: May 2026

1. Data controller

In accordance with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the data controller is:

  • Titular:[TITULAR]
  • NIF/NIE:[DNI]
  • Dirección:[DOMICILIO]
  • Correo electrónico:[EMAIL]

2. Data we collect

When you use Dragon Taiji Academy, we may collect the following categories of personal data:

  • Registration data: username, first name, last name, email, password (encrypted), language and time zone.
  • Profile data: avatar image, subscription plan, accessed courses.
  • Payment data: billing information and transaction records. Card data is processed directly by the payment provider and is not stored in our systems.
  • Usage data: access logs, viewed content and posted comments.
  • Contact data: subject and content of messages sent via the contact form.

3. Purpose and legal basis

We process your personal data for the following purposes:

  • Account management: creation and administration of user accounts. Legal basis: contract performance.
  • Service provision: access to courses, programs and subscription content. Legal basis: contract performance.
  • Billing and payments: subscription management and invoicing. Legal basis: legal obligation and contract performance.
  • Communications: handling inquiries sent via the contact form. Legal basis: legitimate interest.
  • Security: fraud detection and platform protection. Legal basis: legitimate interest.

4. Data retention

We retain your personal data while your account remains active or as necessary to provide the service. Once account deletion is requested, data is deleted or anonymized within a maximum of 30 days, except where legal obligations require retention — for example billing records, which must be kept for 5 years under Spanish tax law.

5. Data sharing

We do not sell or rent your personal data to third parties. We may share it with providers strictly necessary for platform operation:

  • Hosting and infrastructure providers (servers, databases, video and image CDN).
  • Payment processors for subscription management.
  • Email delivery services for transactional communications (verification, password reset).

All providers are bound by data processing agreements and required to comply with applicable regulations.

6. Your rights

Under GDPR and LOPDGDD, you have the following rights:

  • Access: obtain confirmation and access to your data.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data.
  • Restriction: request limitation of processing.
  • Portability: receive your data in structured format.
  • Objection: object to processing of your data.

You may exercise your rights by contacting [EMAIL]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Cookies policy

This website only uses strictly necessary cookies for platform functionality. These cookies do not require consent under applicable law.

Cookies used include:

  • Session cookies: keep the user session active.
  • Authentication cookies: maintain login sessions.

We do not use advertising or tracking cookies.

8. Changes to this policy

We may update this privacy policy at any time. Relevant changes will be notified by email. The last update date is always shown at the top.