This Privacy Policy describes how AI Tools Academy ("we", "us", "our") collects, uses, and protects your personal information when you use our website at https://digital.pmai.shop (the "Service").
Compliance Notice: This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other applicable privacy laws.
1. Data Controller
For the purposes of applicable data protection laws, the data controller responsible for your personal data is:
AI Tools Academy
Email: privacy@pmai.shop
Postal Address: AI Automation Services, 251 Little Falls Drive, Wilmington, DE 19808, USA
EU Representative: GDPR-Rep.eu (EU Representative under GDPR Art. 27)
Note: This placeholder must be completed with your actual business address and, if you target EU residents without an EU establishment, an EU representative.
2. Data We Collect
We collect the following categories of personal data:
| Category |
Examples |
Source |
| Contact Data |
Name, email address, company name, phone number |
Directly from you (forms, emails) |
| Technical Data |
IP address, browser type, device info, OS |
Automatically collected |
| Usage Data |
Pages visited, time on site, click patterns |
Automatically collected |
| Marketing Data |
Communication preferences, engagement history |
Directly from you |
3. How We Use Your Data
We use your personal data for the following purposes:
- Service Delivery - To provide and maintain our AI automation services
- Communication - To respond to inquiries and provide customer support
- Contract Performance - To fulfill our contractual obligations
- Marketing - To send promotional materials (with your consent)
- Analytics - To improve our services and user experience
- Legal Compliance - To comply with legal obligations
- Security - To detect fraud and protect our systems
4. Legal Basis (GDPR)
Under GDPR Article 6, we process your personal data on the following legal bases:
| Purpose |
Legal Basis |
| Service delivery & contract performance |
Article 6(1)(b) - Contract |
| Responding to inquiries |
Article 6(1)(b) or (f) - Legitimate interests |
| Marketing communications |
Article 6(1)(a) - Consent |
| Analytics & improvement |
Article 6(1)(f) - Legitimate interests |
| Legal compliance |
Article 6(1)(c) - Legal obligation |
5. Cookies & Tracking
We use cookies and similar technologies. You can manage your preferences through our cookie banner.
5.1 Cookie Categories
| Category |
Purpose |
Duration |
Legal Basis |
| Strictly Necessary |
Security, fraud prevention, load balancing |
Session |
Legitimate interest (ePrivacy Art. 5(3)) |
| Analytics |
Google Analytics 4 (anonymized IP) |
Up to 2 years |
Consent required |
| Marketing |
Currently not used |
N/A |
Consent required |
Google Analytics: We use Google Analytics 4 with IP anonymization enabled. Data is processed in accordance with Google's Data Processing Terms. You can opt out via our cookie banner or the
Google Analytics Opt-out Browser Add-on.
6. Data Sharing
We may share your data with:
- Service Providers: Stripe (payments), Google (analytics), email service providers - all bound by data processing agreements
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In the event of a merger or acquisition
We do not sell your personal data (CCPA/CPRA).
7. Data Retention
We retain your data only as long as necessary:
- Contact form submissions: 24 months
- Customer records: Duration of contract + 7 years (legal requirement)
- Analytics data: 26 months (Google Analytics default)
- Marketing consent records: Duration of consent + 3 years
8. Your Rights (GDPR/CCPA)
Depending on your location, you have the following rights:
GDPR Rights (EU/EEA Residents)
- Right of Access - Request a copy of your data
- Right to Rectification - Correct inaccurate data
- Right to Erasure - Request deletion ("right to be forgotten")
- Right to Restrict Processing - Limit how we use your data
- Right to Data Portability - Receive your data in a portable format
- Right to Object - Object to processing based on legitimate interests
- Right to Withdraw Consent - At any time
- Right to Lodge a Complaint - With your local supervisory authority
CCPA/CPRA Rights (California Residents)
- Right to Know - What personal information we collect and how we use it
- Right to Delete - Request deletion of your personal information
- Right to Correct - Correct inaccurate personal information
- Right to Opt-Out - Of sale/sharing (we do not sell data)
- Right to Limit - Use of sensitive personal information
- Right to Non-Discrimination - For exercising your rights
9. Data Security
We implement appropriate technical and organizational measures:
- TLS 1.2+ encryption in transit
- Encrypted storage at rest
- Access controls and authentication
- Regular security assessments
- Employee confidentiality training
- Incident response procedures (72-hour GDPR notification)
10. International Transfers
Your data may be transferred to and processed in the United States. For EU residents, we rely on:
- Standard Contractual Clauses (SCCs) - EU Commission Decision 2021/914
- Supplementary measures where required
11. Children's Privacy
Our Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us for deletion.
12. Changes to Policy
We may update this policy. Material changes will be notified via email or a prominent website notice. Continued use constitutes acceptance.
Data Protection Inquiries:
Email: privacy@pmai.shop
Postal Address: 251 Little Falls Drive, Wilmington, DE 19808, USA
EU Representative: GDPR-Rep.eu (EU Representative under GDPR Art. 27)
Supervisory Authority (EU): You have the right to lodge a complaint with your local data protection authority. A list is available at EDPB.