EU / GDPR Compliance

EU / UK GDPR Compliance

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, this statement describes how we comply with the General Data Protection Regulation (GDPR) and equivalent laws.

Controller

[LEGAL ENTITY NAME], [BUSINESS ADDRESS], is the data controller for personal data processed through besframework.com. Contact: info@besframework.com.

Lawful bases for processing

• Contract — to provide the membership and curriculum you purchase.
• Legitimate interests — to secure the platform and prevent unauthorized copying or fraud.
• Legal obligation — to meet tax, accounting, and regulatory duties.
• Consent — for any optional communications, which you may withdraw at any time.

Your GDPR rights

You have the right to access, rectify, erase, restrict, and port your personal data, to object to processing, and to withdraw consent. To exercise any right, email info@besframework.com. You also have the right to lodge a complaint with your local supervisory authority.

International transfers

Where data is transferred outside the EEA/UK (e.g., to US-based processors such as Stripe), we rely on appropriate safeguards such as Standard Contractual Clauses and processors’ own adequacy mechanisms.

Data retention

We retain personal data only as long as necessary for the purposes described in our Data Policy and as required by law.

EU representative

[If required under Art. 27 GDPR, name and contact your EU/UK representative here. Tyra to confirm whether this is required for your user base.]

Last updated: May 29, 2026.