Trust Center

Security, privacy, compliance and transparency are at the heart of everything we do.

Terms & Conditions

Version 1.0. Last changed 01 March 2024

1. Introduction

Scheduled live learning events (virtual summits, online workshops, challenges, solution accelerators), on-demand learning events (on-demand courses, recorded events and other on-demand learning material), any other training offered and the "GRCmana network of sites" (including Cybermana, Digitalmana, Cloudmana and AiMana); herein referred too as Learning Events are owned and operated by GRCmana.

The Learning Events are offered on the condition of your acceptance without modification of the terms, conditions, and notices contained herein.

2. Scheduled live learning events

  • Scheduled Live Learning Events will start at the time and date advertised and can be accessed via the link that will be sent to the email address you registered with.
  • Although every effort will be made for the Learning Events to run at the advertised time and date, GRCmana reserve the right to change the time and date of the Event.
  • In the event, the time and date of a Scheduled Live Learning Event needs to be changed, all registered users will be notified via email.
  • In the eventuality that there's a loss of service or the Scheduled Live Learning Event has to be cancelled (i) GRCmana will attempt to re-establish the Learning Event and continue on the original platform; (ii) If this is not possible, GRCmana will look to switch to other means of broadcast; (iii) If that is not achievable, then GRCmana will look to reschedule the Learning Event to another time.
  • In the event that the Learning Event has be fully cancelled and cannot be rescheduled for a suitable time, then any payments taken for the attendance of the Event will be refunded in full.
  • Live Learning Event content will only be available to view on demand after the Event has finished for the people who have purchased a pass to do so.
  • Every effort will be made to ensure the advertised sessions are broadcasted during the Learning Event. GRCmana reserves the right to modify the advertised sessions. GRCmana will not be held liable should a speaker/presenter not provide the resources to do so and the individual session has to be cancelled.

3. On-demand learning events

  • On-Demand Learning Events can be accessed via the login details that will be sent to the email address you register with.
  • On Demand Learning Events are delivered via the GRCmana Academy. This service must be available in your location to be able to view the content.
  • On-Demand access is provided on licence only to the person that has purchased the access and cannot be shared.
  • Access to On-Demand Learning Events by any other party other than the individual who originally registered will be considered as unauthorised access.
  • GRCmana reserves the right to block unauthorised access to On-Demand Learning Event.
  • Content delivered via On-Demand Learning Events is intended to be consumed by the registered user. The download, repurpose and redistribution of content provided via On-Demand Learning Events is prohibited.

3. Links to Third Party Sites

The Learning Events and associated GRCmana web sites may contain links to other web sites (“linked sites”).

The linked sites are not under the control of GRCmana and GRCmana is not responsible for the contents of any linked site, including without limitation any link contained in a linked site, or any changes or updates to a linked site.

GRCmana is not responsible for webcasting or any other form of transmission received from any linked site. GRCmana is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by GRCmana or the site or any association with its operators.

4. No Unlawful or Prohibited Use

As a condition of your attendance to the Learning Events and related GRCmana web sites, you warrant to GRCmana that you will not use The Learning Events and related GRCmana web sites for any purpose that is unlawful or prohibited by these terms, conditions and notices.

You may not use the Learning Events and related GRCmana web sites in any manner which could damage, disable, overburden or impair the Learning Events and related GRCmana web sites or interfere with any other party’s use and enjoyment of the Learning Events and related GRCmana web sites.

You may not obtain or attempt to obtain any materials or information through any means not intentionally made available or provided for through the Learning Events and related GRCmana web sites.

5. Use of Communication Services

The Learning Events and related GRCmana web sites may contain bulletin board services, chat areas, news groups, forums, communities, personal web pages, calendars, and/or other message or communication facilities designed to enable you to communicate with the public at large or with a group (collectively, “communication services”).

You agree to use the communication services only to post, send and receive messages and material that are proper and related to the particular communication service.

By way of example, and not as a limitation, you agree that when using a communication service, you will not:

  • Defame, abuse, harass, stalk, threaten or otherwise violate the legal rights (such as rights of privacy and publicity) of others.
  • Publish, post, upload, distribute or disseminate any inappropriate, profane, defamatory, infringing, obscene, indecent or unlawful topic, name, material or information.
    Upload files that contain software or other material protected by intellectual property laws (or by rights of privacy of publicity) unless you own or control the rights thereto or have received all necessary consents.
  • Upload files that contain viruses, corrupted files, or any other similar software or programs that may damage the operation of another attendees computer.
  • Advertise or offer to sell or buy any goods or services for any business purpose, unless such communication service specifically allows such messages.
  • Conduct or forward surveys, contests, pyramid schemes or chain letters.
  • Download any file posted by another user of a communication service that you know, or reasonably should know, cannot be legally distributed in such manner.
  • Falsify or delete any author attributions, legal or other proper notices or proprietary designations or labels of the origin or source of software or other material contained in a file that is uploaded.
  • Restrict or inhibit any other user from using and enjoying the communication services.
  • Violate any code of conduct or other guidelines which may be applicable for any particular communication service.
  • Harvest or otherwise collect information about others, including e-mail addresses, without their consent.
  • Violate any applicable laws or regulations.
  • By using the communication services you agree that the name you choose to identify you will be made available to the public at large.
  • By using the communication services you agree that any publicly available picture associated with your email via the Gravatar service can be displayed in messages sent by you and visible to the public at large.

GRCmana has no obligation to monitor the communication services. However, GRCmana reserves the right to review materials posted to a communication service and to remove any materials in its sole discretion.

GRCmana reserves the right to terminate your access to any or all of the communication services at any time without notice for any reason whatsoever.

GRCmana reserves the right at all times to disclose any information as necessary to satisfy any applicable law, regulation, legal process or governmental request, or to edit, refuse to post or to remove any information or materials, in whole or in part, in GRCmana's sole discretion.

Speakers/presenters/hosts are not authorized GRCmana spokespersons, and their views do not necessarily reflect those of GRCmana.

Materials uploaded to a communication service may be subject to posted limitations on usage, reproduction and/or dissemination. You are responsible for adhering to such limitations if you download the materials.

6. Liability Disclaimer

The information, software, products and services included in or available through the Learning Events and related GRCmana web sites may include inaccuracies or typographical errors. Changes are periodically added to the information herein.

GRCmana and/or its suppliers may make improvements and/or changes in the Learning Events and related GRCmana web sites at any time. Advice received via the Learning Events and related GRCmana web sites should not be relied upon for personal, medical, legal or financial decisions and you should consult an appropriate professional for specific advice tailored to your situation.

GRCmana and/or its suppliers make no representations about the suitability, reliability, availability, timeliness and accuracy of the information, software, products, services and related graphics contained on the Learning Events and related GRCmana web sites for any purpose.

To the maximum extent permitted by applicable law, all such information, software, products, services and related graphics are provided “as is” without warranty or condition of any kind.

GRCmana and/or its suppliers hereby disclaim all warranties and conditions with regard to this information, software, products, services and related graphics, including all implied warranties or conditions of merchantability, fitness for a particular purpose, title and non-infringement.

To the maximum extent permitted by applicable law, in no event shall GRCmana and/or its suppliers be liable for any direct, indirect, punitive, incidental, special, consequential damages or any damages whatsoever including, without limitation, damages for loss of use, data or profits, arising out of or in any way connected with the use or performance of the Learning Events and related GRCmana web sites, with the delay or inability to use the Learning Events and related GRCmana web sites or related services, the provision of or failure to provide services, or for any information, software, products, services and related graphics obtained through the Learning Events and related GRCmana  web sites, or otherwise arising out of the use of the Learning Events and related GRCmana web sites, whether based on contract, tort, negligence, strict liability or otherwise, even if GRCmana or any of its suppliers has been advised of the possibility of damages.

Because some states/jurisdictions do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you.

If you are dissatisfied with any portion of the Learning Events and related GRCmana web sites, or with any of these terms of use, your sole and exclusive remedy is to discontinue using the Learning Event and related GRCmana web sites.

Service contact: [email protected]

7. Termination/Access Restriction

GRCmana reserves the right, in its sole discretion, to terminate your access to the Learning Events and related GRCmana web sites and services at any time, without notice where there has been miss use or non-adherence to these terms.

8. General

To the maximum extent permitted by law, this agreement is governed by English Law and any dispute shall be subject to the exclusive jurisdiction of the English Courts in all disputes arising out of or relating to the use of the Learning Events and related GRCmana web sites.

Use of the Learning Events and related GRCmana web sites is unauthorized in any jurisdiction that does not give effect to all provisions of these terms and conditions, including without limitation this paragraph.

You agree that no joint venture, partnership, employment or agency relationship exists between you and GRCmana as a result of this agreement or use of the Learning Events and related GRCmana web sites.

GRCmana 's performance of this agreement is subject to existing laws and legal process, and nothing contained in this agreement is in derogation of GRCmana's right to comply with governmental, court and law enforcement requests or requirements relating to your use of the Learning Events and related GRCmana web sites or information provided to or gathered by GRCmana with respect to such use.

If any part of this agreement is determined to be invalid or unenforceable pursuant to applicable law including, but not limited to, the warranty disclaimers and liability limitations set forth above, then the invalid or unenforceable provision will be deemed superseded by a valid, enforceable provision that most closely matches the intent of the original provision and the remainder of the agreement shall continue in effect.

Unless otherwise specified herein, this agreement constitutes the entire agreement between the user and GRCmana with respect to the Learning Events and related GRCmana web sites and it supersedes all prior or contemporaneous communications and proposals, whether electronic, oral or written, between the user and GRCmana with respect to the Learning Events and related GRCmana web sites.

A printed version of this agreement and of any notice given in electronic form shall be admissible in judicial or administrative proceedings based upon or relating to this agreement to the same extent and subject to the same conditions as other business documents and records originally generated and maintained in printed form. It is the express wish to the parties that this agreement and all related documents be drawn up in English.

9. Modification of these terms

GRCmana reserves the right to change the terms, conditions, and notices under which the  Learning Events are offered.

10. Trademarks

The names of actual companies and products mentioned herein may be the trademarks of their respective owners. The example companies, organizations, products, people and Learning Events depicted herein are fictitious. No association with any real company, organization, product, person, or event is intended or should be inferred. Any rights not expressly granted herein are reserved.

Privacy Policy

Version 1.0. Last changed 01 March 2024

1. Introduction

This privacy notice provides you with details of how we collect and process your personal data through your use of our site(s) cybermana.com, grcmana.io and digitalmana.net.

By providing us with your data, you warrant to us that you are over 13 years of age.

  

GRCmana is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

  It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at [email protected]

2. What data do we collect about you, for what purpose on what grounds do we process it?

Personal data means any information capable of identifying an individual. It does not include anonymised data.  

We may process the following categories of personal data about you:  

  • Communication Data that includes any communication that you send to us whether that be through a contact form on our website, through email, text, chat service on our sites, social media messaging, social media posting or any other communication that you send us. We process this data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defence of legal claims. Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.  
  • Customer Data that includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address email address, phone number, contact details, purchase details and your card details. We process this data to supply the goods and/or services you have purchased and to keep records of such transactions. Our lawful ground for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.  
  • User Data that includes data about how you use our website and any online services together with any data that you post for publication on our website or through other online services. We process this data to operate our website and ensure relevant content is provided to you, to ensure the security of our website, to maintain back- ups of our website and/or databases and to enable publication and administration of our website, other online services and business. Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business.  
  • Technical Data that includes data about your use of our website and online services such as your IP address, your login data, details about your browser, length of visit to pages on our website, page views and navigation paths, details about the number of times you use our website, time zone settings and other technology on the devices you use to access our website. The source of this data is from our analytics tracking system. We process this data to analyse your use of our website and other online services, to administer and protect our business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of our advertising.  Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business and to grow our business and to decide our marketing strategy.  
  • Marketing Data that includes data about your preferences in receiving marketing from us and our third parties and your communication preferences. We process this data to enable you to partake in our promotions such as competitions, prize draws and free give-aways, to deliver relevant website content and advertisements to you and measure or understand the effectiveness of this advertising.  Our lawful ground for this processing is our legitimate interests which in this case are to study how customers use our products/services, to develop them, to grow our business and to decide our marketing strategy.  
  • We may use Customer Data, User Data, Technical Data and Marketing Data to deliver relevant website content and advertisements to you (including Facebook adverts or other display advertisements) and to measure or understand the effectiveness of the advertising we serve you. Our lawful ground for this processing is legitimate interests which is to grow our business. We may also use such data to send other marketing communications to you. Our lawful ground for this processing is either consent or legitimate interests (namely to grow our business).   

We do NOT collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.

We do not collect any information about criminal convictions and offences.  

Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver goods or services to you).

If you don’t provide us with the requested data, we may have to cancel a product or service you have ordered or that we are already providing to you but if we do, we will notify you at the time.  

We will only use your personal data for a purpose it was collected for or a reasonably compatible purpose if necessary.

For more information on this please email us at [email protected]

In case we need to use your details for an unrelated new purpose we will let you know and explain the legal grounds for processing.

We may process your personal data without your knowledge or consent where this is required or permitted by law.  

We do not carry out automated decision making or any type of automated profiling.

3. How we collect your personal data

We may collect data about you by you providing the data directly to us (for example by filling in forms on our site or by sending us emails). We may automatically collect certain data from you as you use our website by using cookies and similar technologies.

Please see our Cookie Policy at for more details about this.

 

We may receive data from third parties such as analytics providers such as Google based outside the EU, advertising networks such as Facebook based outside the EU, such as search information providers such as Google based outside the EU, providers of technical, payment and delivery services, such as data brokers or aggregators.

 

If you login to our site using a social networking site for your credentials (e.g., Facebook, LinkedIn or Twitter), we may receive personal information about you from that site, in accordance with the terms of use and privacy policy of that social networking site. How we use that data is governed by this document.

We use the OAuth (open authorisation) protocol to enable us to access this information without collecting your password.  

We may also receive data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.

4. Marketing communications

Our lawful ground of processing your personal data to send you marketing communications is either your consent or our legitimate interests (namely to grow our business).  

Under the Privacy and Electronic Communications Regulations, we may send you marketing communications from us if (i) you made a purchase or asked for information from us about our goods or services or (ii) you agreed to receive marketing communications and, in each case, you have not opted out of receiving such communications since.

Under these regulations, if you are a limited company, we may send you marketing emails without your consent. However, you can still opt out of receiving marketing emails from us at any time.

Before we share your personal data with any third party for their own marketing purposes, we will get your express consent.

You can ask us or third parties to stop sending you marketing messages at any time by emailing us at: [email protected]

If you opt out of receiving marketing communications this opt-out does not apply to personal data provided as a result of other transactions, such as purchases, support contracts etc.

5. Disclosures of personal data

We may have to share your personal data with the parties set out below:  

  • Service providers who provide IT, support and system administration services.
  • Professional advisers including lawyers, bankers, auditors and insurers  
  • Government bodies that require us to report processing activities.
  • Third parties to whom we sell, transfer, or merge parts of our business or our assets.  

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law.

We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

6. International transfers

Countries outside of the European Economic Area (EEA) do not always offer the same levels of protection to your personal data, so European law has prohibited transfers of personal data outside of the EEA unless the transfer meets certain criteria.

Many of our third parties service providers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.  

Whenever we transfer your personal data out of the EEA, we do our best to ensure a similar degree of security of data by ensuring at least one of the following safeguards is in place:  

  • We will only transfer your personal data to countries that the European Commission have approved as providing an adequate level of protection for personal data by; or
  • Where we use certain service providers, we may use specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe; or
  • If we use US-based providers that are part of EU-US Privacy Shield, we may transfer data to them, as they have equivalent safeguards in place.

If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time. 

7. Data security

We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation.

We only grant access to personal data to authorised individuals employed by or contracted by GRCmana . GRCmana does not sell or provide access to your data by any third party, unless there is a legitimate purpose in the fulfilment of services provided by GRCmana .

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.  

8. Data retention     

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When deciding what the correct time is to keep the data for, we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.  

For tax purposes the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.

In some circumstances we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

9. Your Legal Rights

Under data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.  

You can see more about these rights at:

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

If you wish to exercise any of the rights set out above, please email us at [email protected]. You will not have to pay a fee to access your personal data (or to exercise any of the other rights).

However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you.

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

We would be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.

10. Third Party Links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.

We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

11. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.

If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

Please refer to our Cookie Policy for further information.

Affiliate Disclosure

Version 1.0. Last changed 01 March 2024

GRCmana will occasionally evaluate or mention products and services.

If we believe a product or service is good, and the merchant selling it provides an affiliate programme, GRCmana has no problem referring others to it via an affiliate link.

Certain items and links to products/services are affiliate links, and any purchases you make may result in a commission for GRCmana.

You will not be charged any additional fees as a result of this. The entire commission comes out of the vendor's pocket - not yours.

These items and services are mentioned because we believe in them and wish to assist you in achieving your goals.

It goes without saying that we’ll never recommend a product simply because it pays us a commission because that would be sleazy, right?

GRCmana only endorses or recommends products or services that we believe will benefit you or that have come highly recommended by trusted peers.

Of course, full disclosure: Making Sense of Cents is a for-profit business, which means we do make money from it.

So that you can easily tell when you're using an affiliate links, we'll put (affiliate link) after it.

But to make things a little bit easier - both of us - assume that any links to products or services are affiliate links and that we will be compensated if you buy something.

Affiliate links are disclosed in accordance with the Federal Trade Commission's standards.

If you have any further questions, feel free to mail us on [email protected]