Privacy Policy
Last updated: June, 2025
1. INTRODUCTION
Mentormatic Solutions Limited (hereinafter the 'Company', 'we', 'us' or 'our'), owner of the Mentormatic mentoring and coaching platform available at https://mentormatic.com/ (the 'Platform'), respects your privacy and is committed to protecting your personal data.
This privacy policy (the 'Privacy Policy' and together with our Terms and Conditions as set out at [INSERT LINK] (the 'Terms') and any additional terms incorporated by reference into the Terms) applies to your use of:
- the Platform, once you have validly registered thereon and have therefore become a user in one of the following capacities: Mentor, Mentee or Programme Manager (as defined below), and
- any of the services accessible through the Platform, as such are described in the Terms (the 'Services').
Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
This Privacy Policy:
- provides an overview of how we collect, process and protect your personal data, including any sensitive data.
- informs you about your rights under the General Data Protection Regulation 2016/679 (GDPR), as amended from time to time, and any national law supplementing or implementing the GDPR (jointly with the GDPR, the "Privacy Laws").
- contains important information about what personal data we collect, what we do with such personal data, who we may share it with and your rights in relation to the personal data you have given us.
For the purposes of this Privacy Policy:
- When we refer to "Mentors/Coaches" we mean individuals with relevant professional experience who provide guidance, support and advice to Mentees, as part of a structured mentorship programme on the Platform.
- When we refer to "Mentees/Coachees" we mean individuals seeking professional development, guidance or career support, who participate on the mentorship programme available on the Platform to learn from and engage with Mentors.
- When we refer to "Programme Managers" we mean individuals responsible for the management, coordination and operation of one or several mentoring and/or coaching programs they created and/or manage on the Platform, including facilitating mentorship sessions and ensuring the smooth running of the mentorship programme.
- When we refer to "personal data" or "personal information" we mean data which identifies or may identify you and which may include, for example, your name, address and telephone number. It does not include data where your identity has been removed (anonymous data).
- When we refer to "processing" we mean the handling of your personal data by us, including collecting, protecting and storing your personal data.
- When we refer to "sensitive data" we mean special categories of personal data which identify or may identify you and which may reveal, inter alia, details about your racial or ethnic origin, your political opinions, your religious or philosophical beliefs, your trade union memberships, your health, your sex life or your sexual orientation.
- When we refer to "Account" we mean the account Mentors or Mentees create on the Platform following successful completion of the sign-up process.
2. WHO WE ARE
Mentormatic Solutions Limited, who owns, operates and manages the Platform, is the controller and is therefore responsible for your personal data.
If you have any questions or concerns regarding the collection and processing of your personal data by us or if you wish to exercise any of your rights (as set out in section 9 of this Privacy Policy), please contact us using the details set out below and we shall provide you with a response as soon as possible.
- Email address: contact@mentormatic.com
- Postal address: Office 201, 4 Diagoras Str., Nicosia, 1097, Cyprus
The Company takes the protection of your personal data very seriously. If you feel that we have not dealt with your concerns adequately, you have the right to submit a complaint to the data protection supervisory authority of the country in which you reside. We would, however, appreciate the chance to deal with your concerns before you approach the relevant data protection supervisory authority; so please contact us in the first instance. The data protection supervisory authority in Cyprus is the Office of the Commissioner for Data Protection and you can visit their website at: http://www.dataprotection.gov.cy.
3. HOW WE COLLECT YOUR PERSONAL DATA
Source of personal data | Description | Categories of data subjects |
---|---|---|
Directly from you | This is information you submit to us directly by using the Platform or by corresponding with us (for example, by email or through the contact form). It includes information you provide when you:
|
|
Automated technologies or interactions | Each time you access the Platform and interact with it, we will automatically collect data in connection to your equipment, browsing actions and patterns. We store this data by using cookies and other similar technologies. We may also collect data about you if you visit other websites employing our cookies. Please see our cookie policy available at https://mentormatic.com/mentormatic-ssr/cookie-policy for further details. |
|
Third Parties | We will receive personal data about you from various third parties as set out below:
|
|
4. THE DATA WE COLLECT ABOUT YOU
4.1 Personal data we may collect and process about you
Category | Description | Data subject categories |
---|---|---|
Registration and Profile Data | This is information provided during account creation or profile set up and includes your name and username, general location, education, work experience, skills, job title and seniority, professional history and any other information you have provided on your LinkedIn account and agree to share with us or have provided to use through manual registration. |
|
Contact Data | This is information that we may need in order to contact you and includes your e-mail address, telephone number and billing address. |
|
Assessment Data | This is information we collected through various assessments we may conduct as part of the Services, including the input and results of such assessments, for tailoring the membership experience. Examples include:
|
|
Mentorship Interaction Data | This is data generated during mentorship sessions, including, communications, uploaded content and AI insights drawn from session materials. Examples include:
|
|
Transaction and Payment Data | This includes payment-related data, which may be collected where subscription or paid features are activated and may include payment card or account number, transaction details (including possible failed payments) and history and invoice data. |
|
Purchase Data | This includes information in connection to your purchases on the Platform such as for example, the number and type of subscription packages you have purchased in the past and/or additional features you have selected. |
|
Technical Data | This includes your internet protocol (IP) address, your login data, your browser type and version, details of your device, your time zone setting and location, and your operating system and platform. |
|
Usage Data | This includes information about how you interact with and use the Platform, information collected through cookies, such as the links you have clicked on (including date and time), services you viewed or searched for, page response times, download errors, what time you accessed the Platform, length of visits to the Platform, page interaction information (such as scrolling and clicks), and methods used to browse away from our Platform. |
|
Marketing and Communications Data | This includes your preferences in receiving marketing from us and third parties with which we partner from time to time, as well as your communication preferences (i.e. whether you wish to receive such marketing through email, SMS, push notifications, system messages, or otherwise). |
|
Records Data | This includes any correspondence and/or communications we have with you, such as when you contact us to report an issue with your use of the Platform and/or the Services. |
|
And any other data and information provided voluntarily by you through the Platform.
4.2 Signup via LinkedIn
If you choose to sign-up using your LinkedIn account, we will collect the Registration and Profile Data described in section 4.1 above directly from your LinkedIn account profile to help you create your account quickly and easily.
We will only access this information, if you give your explicit permission when connecting your LinkedIn Account to the Platform. If you don't wish to sign up in this way, you can always choose to register manually instead, by entering your details yourself.
4.3 MBTI testing through Elevate
Where we direct you to undertake Myers-Briggs Type Indicator (MBTI) testing through the Elevate platform for the purposes of psychosocial-based matching, you will be asked to register on the Elevate platform, through which you will undertake the relevant assessments.
Elevate will then provide us with one or more reports based on the assessment you took and the responses you provided to that assessment. Elevate's privacy policy applies in the first instance as well as any additional agreements you have consented to as a customer of Elevate. In this regard, please refer to the respective privacy policies of Elevate and check the agreements you have consented to in conjunction with these contracts or separately.
We will access the results of your MBTI test provided you give us explicit permission to do so.
5. HOW WE USE YOUR PERSONAL DATA
We will only use your personal data when we have a lawful basis to do so. We rely on one or more of the following legal bases when using your personal data:
- Performance of a contract: where we need to provide our Services to you through the Platform. Where we need to collect personal data under the terms of the contract we have with you, and you fail to provide that data when requested, we may not be able to provide you with the Services (either partly or fully). For example, if you fail to provide us and/or the payment service providers we work with the correct payment details, we will be unable to process your payments and you will therefore be unable to purchase a subscription package and use the Services offered through the Platform.
- Legitimate interest: where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
- Consent: where you have provided your explicit consent before the processing. Consent means processing your personal data where you have signified your agreement by a statement or clear opt-in to processing for a specific purpose, such as, where you subscribe to an email newsletter. Consent will only be valid if it is a freely given, specific, informed, and unambiguous indication of what you want. You can withdraw your consent at any time by contacting us using the contact details set out in section 2 of this Privacy Policy or through the opt-out options available on your Account or in email communications we send you.
- Legal obligation: where we need to use your personal data to comply with a legal or regulatory obligation that we are subject to, such as, a tax obligation. Where we rely on legal obligation and you do not provide the necessary information, we may be unable to fulfil a right you have or comply with our obligations to you, or we may need to take additional steps, such as informing law enforcement or a public authority or applying for a court order.
We provide further details in connection to each legal basis on which we rely, in the table below:
Purpose | Legal basis | Data subject categories |
---|---|---|
To register you on the Platform and enable access to the Services. | Performance of a Contract |
|
To facilitate your mentoring journey, including by:
|
|
|
To manage our relationship with you in accordance with the Terms, including notifying you of changes to the Platform or the Services (including changes to this Privacy Policy and/or the Terms) and liaising with you to resolve any issues or concerns you may have. You may select to receive notifications relevant to the Services via email, push notifications, or through the Platform and can amend the way in which you receive them at any time through the settings on your Account. | Performance of a Contract |
|
To administer and protect our business, including the Platform, and develop our Services. To this end, we may keep track of any communication we have with you, including through email, chat, or through other forms of communication. Records of such communications will assist us in checking your instructions to us (or vice versa) and assessing, analysing, and improving the Services and training our people. | Legitimate Interests |
|
To manage the security of our network and information systems (including troubleshooting, testing, system maintenance, support, and hosting of data). | Legitimate Interests |
|
To study how our customers use our Services and perform data analytics (such as market research, trend analysis, financial analysis, and customer segmentation) to improve our Services customer relationships, and experiences, and grow our business. | Legitimate Interests |
|
To identify, prevent, investigate and address any ongoing or alleged breaches of the Terms including fraud by collaborating with service providers, developing countermeasures against such incidents or fraudulent activities and retaining data of past fraudulent behaviours to prevent recurrences. | Legitimate Interests |
|
To maintain our accounts and records. | Legitimate Interests |
|
To receive professional advice (e.g. tax or legal advice). | Legitimate Interests |
|
To defend, investigate, or prosecute legal claims. | Legitimate Interests |
|
To enable a sale, reorganization, transfer, or other transaction relating to our business. | Legitimate Interests |
|
To provide you with information about other services, events, and offers that may be available on the Platform from time to time | Legitimate Interests |
|
To contact you to deliver mandatory communications required by any new law that comes into force. | Legitimate Interests |
|
To manage any legal claims connected to users' use of the Platform and/or the Services. | Legitimate Interests |
|
To investigate certain fraudulent activities and/or any business disrupting incidents for which we are required to prepare relevant reports for the relevant supervisory authorities. | Legal Obligation |
|
To comply with our tax or other legal obligations. | Legal Obligation |
|
To notify you about changes to our Terms. | Legal Obligation |
|
To respond to your requests to exercise your rights under this Privacy Policy. | Legal Obligation |
|
To process special categories of your personal data including details of your race or ethnicity through the identification document you may provide to us or results we receive through any personality assessment and competency/knowledge tests and self-assessment questionnaires carried out through the Platform. We will not use such information in any way other than as described in this Privacy Policy. We will request your prior consent before or upon your provision of these types of personal data to us. | Consent |
|
For third party marketing purposes. You can ask us to stop sending you marketing messages at any time by logging into the Platform and adjusting the relevant marketing preferences on your Account or by following the opt-out links on any marketing message sent to you or by contacting us using the contact details in section 2 above. | Consent |
|
6. WITH WHOM WE MAY SHARE YOUR PERSONAL DATA
We may share your personal data with third parties as listed below for the purposes set out in section 5 above. When we do so, we request from such third parties to have appropriate technical and organisational measures in place to protect your personal data. We will not share any of your personal data for any purpose other than the purposes described in this Privacy Policy:
Categories of recipients | Reason for sharing | Data subject categories |
---|---|---|
Google Cloud Run (Hosting Provider) | To host and operate the Platform, store user data and ensure Platform availability. |
|
Third-party Platform developers | To support Platform development, maintenance, bug fixes and technical improvements. |
|
Payment service providers | To process payment transactions. |
|
Communication service Providers (e.g. email/SMS platforms) | To send notifications, alerts, or other communications via email or SMS. |
|
Third-party analytics providers | To analyse Platform usage, identify technical issues and enhance user experience. |
|
Third-party marketing platforms | To execute and manage marketing campaigns, track leads and measure campaign effectiveness. |
|
Providers of artificial intelligence tools or functionalities (including Google Gemini) | To provide users with AI-assisted support or content. |
|
Professional advisers including lawyers, bankers, auditors, accountants, tax consultants, and insurers | Seeking professional advice to protect ourselves, our customers or others. |
|
Tax authorities, law enforcement regulators, and other governmental bodies or agencies | To comply with a legal obligation or a request which may include reporting of our processing activities in certain circumstances or for our own or a third party's justifiable interest. |
|
Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets | If we were to sell, transfer, or merge parts of our business or assets to someone or negotiate to do so. In this case, we may transfer your personal data to such party as part of that transaction. If a change happens to our business, then the new owners will use your personal data in the same way as set out in this Privacy Policy. |
|
Other third parties for which we will seek your consent prior to any disclosure. This may include, for example, third parties who may wish to advertise their products to you.
INTERNATIONAL TRANSFERS
Whenever we transfer your personal data out of the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- Where we use specific service providers or share your personal information with third parties, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
7. SAFEGUARDING YOUR DATA
All information you provide to us is stored on our secure servers.
We are committed to protecting our users' personal data. We have put in place appropriate technical and organisational security measures that ensure the security of your personal data and prevent them from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. However, you should be aware that no system is ever secure in its entirety.
We and our business partners do our utmost to protect your personal data in line with the Privacy Laws by means of physical, electronic, and process-oriented security precautions. However, we cannot guarantee 100% protection against unauthorised access from third parties. When we do become aware of such unauthorised access, we immediately take all steps necessary to block such third party from retrieving, accessing, or otherwise compromising any personal data and ensure that any risks to our users are mitigated.
There are things you can do to protect the security of your data as well. Where we have given you (or where you have chosen) a password for your Account, you are responsible for keeping this password confidential. Please do not share it with anyone. If at any time you suspect or become aware of a breach of your Account or if you believe that your information is no longer secure, please contact us immediately using the contact details in section 2 of this Privacy Policy, so that we can take any necessary action.
8. HOW LONG WE KEEP YOUR PERSONAL DATA
We shall process and retain your personal data only for the period necessary to fulfil the purpose for which the data was collected.
To determine the appropriate retention period for your personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
If you have tried to register as a user on the Platform but have been unsuccessful (due to the fact that you have not provided us with all the information we have requested or you are not eligible to become a user or for any other reason), we will delete any personal data you have provided to us during the registration procedure immediately following your unsuccessful attempt to register.
In some circumstances you can ask us to delete your data. See section 9 below for further information.
9. YOUR LEGAL RIGHTS
You have the following rights in terms of the personal data and information we hold about you:
Receive access to your personal data
This enables you to receive a copy of the personal data we hold about you and to be informed on how we are lawfully processing it.
Request correction of the personal data we hold about you
This enables you to have any incomplete, inaccurate, or out-of-date information we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data
This enables you to ask us to delete or remove personal data where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below) or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request for erasure for specific legal or contractual reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data
You can object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request the restriction of processing of your personal data
This enables you to ask us to suspend the processing of your personal data in the following scenarios:
- if you want us to establish the data's accuracy;
- where you consider that our use of the data is unlawful but you do not want us to erase it;
- where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims;
- or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Data portability
When you request a transfer of your personal data, we will provide you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw your consent
In cases where you have given your consent to us, you will be able to withdraw that consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
10. HOW TO EXERCISE YOUR RIGHTS
To exercise any of your rights as set out in section 9, you can use the contact details set out in section 2 above.
For security reasons, we may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). We may also contact you to ask you for further information in relation to your request to speed up our response.
In some cases, such as when you wish to change or update your personal data, you may be able to do so by accessing your Account and making changes to the relevant fields that need to be corrected or updated.
11. THIRD PARTY LINKS
Our Platform may, from time to time, contain links to and from the websites of our partner networks and/or advertisers.
Please note that these websites and any services that may be accessible through them have their own privacy policies. We do not accept any responsibility or liability for these third-party privacy policies or for any personal data that may be collected through these websites or services.
Please check these policies before you submit any personal data to these websites or use these services.
12. AUTOMATED PROCESSING
We sometimes use automated measures including artificial intelligence (AI) tools, to assist us in offering you the best possible service. This includes the use of AI tools to analyse user profiles and suggest optimal mentor-mentee pairings based on psychological compatibility scores and complementary skill/knowledge level.
Our automated methods of processing are often supported by manual methods. For example, we may use AI tools to analyse your data to identify patterns and trends, which are usually manually reviewed and interpreted by humans.
13. CHANGES TO OUR PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES
We keep our Privacy Policy under regular review.
If we update our Privacy Policy in the future, the changes will be posted on this page and, where appropriate, notified to you either by email or when you next access the Platform. The new policy may be displayed on-screen, and you may be required to read and accept the changes to continue your use of the Platform or the Services.
We do, however, encourage you to review this policy periodically to stay informed about how we are processing and protecting your personal information.
It is important that the personal data we hold about you is accurate and current. Please keep us informed of your personal data changes during our relationship with you.