Last updated: September 30, 2025

1. Who we are (Data Controller)

This Policy is applied by sole proprietor (FOP) Marina Mykolaivna Gonchar (hereinafter — “We”, “the Company”, “Madina Club”), Tax ID: 2798911689.
Mailing address: Kyiv, Pryrichna St. 19, 04213
E-mail for data inquiries: [email protected]
Website: https://madinaclub.com/


2. Scope of Application
This Policy describes how we process users’ personal data during visits to the Website, subscription/purchases, participation in webinars (Zoom), access to recordings (YouTube — unlisted links), participation in the Telegram community, receiving newsletters, and interaction with services integrated with Tilda.


3. What Data We Collect
Identification & contact: first name, last name (if provided), e-mail, phone number.

Accounts/access: subscription settings, group memberships (Members Area), payment status.

Payment: payment/refund fact, amount, date (via payment providers; we do not store full card details).

Communication: support correspondence, site forms, requests, surveys (if applicable).

Technical: IP address, device/browser type, cookies, other identifiers, web analytics data (Google Analytics/Meta Pixel, etc.).

Event records: evidence of access granted to Zoom/YouTube, view/attendance statistics (within the scope available to us as content owner).

Social/media data: Telegram nickname/ID (for access moderation only), Zoom display name, YouTube account (if required for access to unlisted links).



4. Legal Grounds for Processing
Contract performance (Art. 6(1)(b) GDPR / Ukrainian Data Protection Law): provision of Services, access, billing/subscriptions, support.

Legitimate interest (Art. 6(1)(f) GDPR): service security, fraud prevention/unauthorized access, basic analytics, service improvement.

Consent (Art. 6(1)(a) GDPR): marketing communications, optional cookies/pixels/personalized analytics.

Legal obligation (Art. 6(1)(c) GDPR): accounting, tax reporting, document retention.


5. Purposes of Data Use
Registration and authentication; subscription/access management (Members Area).

Conducting webinars (Zoom), providing access to recordings (YouTube — unlisted links).

Access/moderation of Telegram community.

Processing payments, refunds, invoicing.

Customer support (correspondence, requests).

Sending service notifications (event links, payment confirmations, schedule updates).

Marketing communications (with your consent) and performance analytics.

Compliance with legal obligations and protection of our rights.


6. Cookies and Analytics
We use cookies and similar technologies (e.g., Google Analytics, Meta Pixel) for:
basic technical operation of the Website;

traffic analytics;

(with consent) marketing remarketing.

You may manage cookie consent via the consent banner and browser settings. See Cookies Policy (separate page) for details.


7. Data Recipients (Third Parties)
Payment providers: WayForPay

Website platform: Tilda (forms, Members Area)

Video services: Zoom (webinars), YouTube (unlisted recordings)

Communication/marketing: SendPulse

Analytics/advertising: Google Analytics, Meta (with consent)

Other processors: CRM/automation (Make), hosting providers

Transfers are carried out under Data Processing Agreements (DPAs) and with appropriate security safeguards.


8. International Data Transfers
If data is transferred outside Ukraine/EU (e.g., to the US via Google/Meta/Zoom), we ensure appropriate safeguards (standard contractual clauses or other lawful mechanisms).


9. Data Retention
Contractual/billing: for periods required by law (accounting/reporting).

Accounts/subscriptions: until account deletion or cancellation + reasonable archiving period.

Marketing: until consent is withdrawn (unsubscribe).

Technical logs/analytics: according to provider policies and our purposes.

After expiry, data is deleted or anonymized.


10. Security
We apply technical and organizational security measures: HTTPS/SSL, role-based access control, provider-side encryption (where available), backup of critical data, access policies for accounts. We do not store full payment card details.


11. Your Rights
You have the right to:
access your data;

rectify inaccuracies;

erasure (“right to be forgotten”);

restriction of processing;

data portability;

object to processing based on legitimate interests;

withdraw consent (for marketing/optional cookies).

Requests can be submitted to [email protected]. We respond within 30 days (may extend by 30 more in complex cases).


12. Marketing Communications
We send marketing emails only:
with your consent, or

if you are an existing client and the communication concerns similar services (with opt-out option).

You can unsubscribe at any time via the “Unsubscribe” link in emails or by contacting us.


13. Children’s Data
Our services are intended for adults (18+). We do not knowingly collect children’s data. If you believe a child has provided us with personal data — contact us and we will delete it.


14. Changes to this Policy
We may update this Policy. A new version will be published on this page with the updated date. In case of material changes, we may notify active users by e-mail.


15. Contact Information
For all questions regarding personal data processing:
E-mail: [email protected]
Postal address: Kyiv, Pryrichna St. 19, 04213