1. Who we are
This Privacy Policy explains how GreenRocks.ai collects, uses, shares and protects your personal data when you visit greenrocks.ai, subscribe to Beyond the Checklist, join our talent network, play The Tell, register for our webinars and events, enrol in our training programmes or certifications, or otherwise interact with us.
In this policy, “GreenRocks.ai”, “we”, “us” and “our” refer to the operator of the GreenRocks.ai platform.
We are the controller of the personal data described in this policy. We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where it applies to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
For any question about this policy or your personal data, contact us at privacy@greenrocks.ai.
2. Personal data we collect
We collect only the personal data we need to deliver our webinars, training and services. Most of it comes directly from you.
| Category | Examples | Where it comes from |
|---|---|---|
| Identity and contact data | First and last name, work email, phone number | You, when you register or contact us |
| Professional data | Company, job title, country, areas of interest | You, when you register or enrol |
| Event and learning data | Webinars registered for and attended, courses taken, CPE credits, assessment results, certification status (including the CAFE credential) | You and our learning and webinar platforms |
| Transaction data | Items purchased, invoices, billing details | You and our payment providers (we do not store full card numbers) |
| Consent and preference data | Privacy acceptance, marketing opt-in or opt-out, communication preferences | You |
| Communications | Emails, messages, questions asked during webinars, feedback and survey answers | You |
| Newsletter data | Email address, subscription date, emails opened | You, when you subscribe to Beyond the Checklist |
| Talent network data | Current role, seniority, location, practice area, LinkedIn profile and any CV you choose to send | You, when you join the talent network |
| Game data (The Tell) | Name or nickname, team, scores, streaks and badges | You and your play in The Tell |
| Questions to Ask the Library | The questions you type and the answers you receive (when this feature is available) | You |
| Technical and usage data | IP address, browser and device type, pages visited, referring site, date and time of visits | Automatically, through cookies and similar technologies |
We may also receive professional information you have made public, such as your LinkedIn profile, when you engage with our content or events on those platforms.
We do not ask for sensitive personal data, such as health information, religious beliefs or biometric data. Please do not include it in any form or message you send us.
3. How we use your data and our legal bases
We use your personal data only for the purposes below, and only where we have a lawful basis to do so.
| Purpose | Legal basis |
|---|---|
| Registering you for webinars and events, sending joining details, reminders and recordings | Performance of a contract or steps you request before one |
| Delivering courses and certifications, tracking progress, issuing certificates and CPE records | Performance of a contract; legal obligation (CPE record-keeping) |
| Processing payments, issuing invoices and keeping financial records | Performance of a contract; legal obligation |
| Sending Beyond the Checklist and giving subscribers access to Ask the Library | Your consent, which you can withdraw at any time |
| Contacting you about leadership roles that match your profile, through the talent network | Your consent, which you can withdraw at any time |
| Running The Tell, its leaderboards, team leagues and badges | Performance of a contract (our game terms) |
| Answering your questions and providing support | Legitimate interests in responding to you |
| Sending news, upcoming webinar invitations, training offers and events | Your consent, which you can withdraw at any time |
| Understanding which topics interest our audience and improving our content, website and services | Legitimate interests in developing our services |
| Keeping our website and systems secure and preventing fraud or misuse | Legitimate interests; legal obligation |
| Complying with laws, regulations, accreditation requirements and requests from authorities | Legal obligation |
Where we rely on legitimate interests, we balance them against your rights and freedoms. You can ask us for more detail on that balance at any time.
On The Tell leaderboards we show only your first name and last initial, or your nickname — never your full name. Through the talent network, we never share your details with an employer without your explicit consent for that specific role.
We do not sell your personal data. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
4. Marketing communications
We send marketing emails only if you have opted in, for example by ticking the updates box on a registration form. Registering for a webinar does not by itself sign you up for marketing.
You can withdraw your consent at any time by clicking “unsubscribe” in any email or by writing to privacy@greenrocks.ai. We will still send you service messages about webinars or courses you have signed up for.
5. Cookies and analytics
Our website uses cookies and similar technologies to make the site work, remember your preferences and understand how visitors use it.
- Strictly necessary cookies keep the site and forms working. They do not need your consent.
- Analytics cookies tell us which pages are visited and how people find us, in aggregated form. We use them only with your consent.
- Marketing cookies, if we use them, help measure our campaigns on platforms such as LinkedIn. We use them only with your consent.
You can accept, reject or change your cookie choices at any time through the cookie banner or your browser settings. Blocking some cookies may affect how the site works.
At present, greenrocks.ai itself does not use analytics or marketing cookies. The tools that run on the site are:
| Tool | Purpose | What it involves |
|---|---|---|
| Offline storage (service worker) | Lets the site load quickly and work offline, and lets you install it on your phone | Pages you visit are stored on your own device; nothing is sent to us |
| Google Fonts | Displays the site’s typefaces | Your browser requests the fonts from Google, which receives your IP address |
| YouTube videos (privacy-enhanced mode) | Shows our Case File videos | YouTube stores information on your device only when you play a video |
If we add analytics or marketing tools in future, we will ask for your consent first and update this list.
6. Who we share your data with
We share personal data only when needed for the purposes in section 3, and only with parties bound by confidentiality and data protection obligations.
- Service providers who process data on our behalf, such as email and productivity tools (Microsoft 365), webinar and learning platforms, website hosting, analytics, CRM and payment providers.
- Affiliated companies, where needed to deliver or administer our services — for example, to follow up on a talent network profile you have shared with us.
- Accreditation bodies, such as NASBA or other CPE registries, where you earn CPE credits and reporting is required.
- Co-hosts or speakers of a specific event, only if the registration page clearly tells you so before you register.
- Professional advisers, such as auditors, lawyers and accountants.
- Authorities, regulators or courts, where the law requires it or to protect our rights.
- A buyer or successor, if our business or assets are reorganised, merged or sold.
Our main service providers include our website host (Cloudflare), our newsletter provider (beehiiv), our form provider [form tool, e.g. Tally], Microsoft 365 for email, WhatsApp (Meta) if you choose to message us there, and — when Ask the Library is available — our AI provider (Anthropic), which processes your questions to generate answers. A full list is available on request.
7. International transfers
We are based in the UAE and some of our service providers are located in other countries, including the EU, the UK and the United States. Your data may therefore be transferred outside the country where you live.
When we transfer data, we make sure it is protected as required by the PDPL and, where applicable, the GDPR. This includes transferring to countries with adequate protection or using safeguards such as the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
8. How long we keep your data
We keep personal data only as long as needed for the purpose it was collected for, then delete or anonymise it.
| Data | Retention |
|---|---|
| Webinar registration and attendance | [24 months] after the event |
| Course, CPE and certification records | [5 years] after completion, or longer if accreditation rules require |
| Invoices and financial records | As long as tax and accounting law requires, [typically 5 years] in the UAE |
| Marketing preferences | Until you unsubscribe, then a suppression record so we don’t contact you again |
| Talent network profiles | Until you ask us to remove them, and reviewed at least every [24 months] |
| The Tell scores and leaderboards | [24 months] after your last game |
| Enquiries and support messages | [24 months] after the last contact |
9. How we protect your data
We use technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include access controls, encryption in transit, multi-factor authentication on our business systems, and staff confidentiality obligations. No online system is completely secure, so we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the authorities as the law requires.
10. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct data that is inaccurate or incomplete;
- ask us to delete your data;
- restrict or object to how we process it, including for marketing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing already carried out;
- not be subject to decisions based solely on automated processing.
To use any of these rights, email privacy@greenrocks.ai. We may ask you to confirm your identity. We will reply within the time the law requires, normally within 30 days.
11. Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to a data protection authority. In the UAE, this is the UAE Data Office. In the EU or UK, you can contact the supervisory authority in the country where you live or work.
12. Children
Our webinars, training and certifications are for professionals. We do not knowingly collect personal data from anyone under 18. If you think we have done so, contact us and we will delete it.
13. Links to other websites
Our website and emails may link to other websites, such as LinkedIn or YouTube. We are not responsible for their privacy practices. Please read their privacy policies.
14. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will tell you by email or through a notice on our website.
15. Contact us
Email: privacy@greenrocks.ai
Website: greenrocks.ai
Last updated: [date of publication]