GDPR Compliance Notice

1. Our Commitment to Data Privacy

Ascend Wealth Up is a Canada-based platform that processes data in full accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) for users in the European Economic Area (EEA).

Even if we are located outside the EU, we process data lawfully, transparently, and with respect to your individual rights.

2. Scope

This notice applies to any EU/EEA user who interacts with:

• Our website or landing pages
• Online courses
• Email newsletters
• Surveys and contact forms

3. Legal Bases for Processing

Under GDPR, we rely on the following legal bases:

• Consent – For email marketing, non-essential cookies, and contact forms
• Contract – To deliver purchased course access
• Legal obligations – To meet tax and business record requirements
• Legitimate interest – To improve user experience and website performance

4. Your Rights Under GDPR

As an EU data subject, you have the right to:

• Access your personal data;
• Correct inaccurate or outdated information;
• Request erasure ("the right to be forgotten");
• Restrict how we process your data;
• Object to specific uses, such as marketing;
• Data portability – request a copy in a usable format

5. Data Transfers Outside the EU

All data is processed on secure servers in Canada. Canada is considered to have an "adequate level of protection" under GDPR as per the European Commission's adequacy decision.

6. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including:

• Fulfilling contracts (e.g., course access)
• Legal reporting
• Analytics and improvements (anonymized data)

Retention periods:

• Billing records: 6 years
• Marketing consent logs: 12 months
• Inactive accounts: deleted after 24 months

7. Data Protection Officer

Our appointed DPO ensures GDPR compliance across all operations.

📩 Contact:
Data Protection Officer
📧 dpo@ascendwealthup.com

8. Supervisory Authority

If you're unsatisfied with our data handling, you have the right to lodge a complaint with your country’s Data Protection Authority (DPA).

‍