Privacy Policy

Last updated: June, 2025

1. INTRODUCTION

Mentormatic Solutions Limited (hereinafter the 'Company', 'we', 'us' or 'our'), owner of the Mentormatic mentoring and coaching platform available at https://mentormatic.com/ (the 'Platform'), respects your privacy and is committed to protecting your personal data.

This privacy policy (the 'Privacy Policy' and together with our Terms and Conditions as set out at [INSERT LINK] (the 'Terms') and any additional terms incorporated by reference into the Terms) applies to your use of:

  • the Platform, once you have validly registered thereon and have therefore become a user in one of the following capacities: Mentor, Mentee or Programme Manager (as defined below), and
  • any of the services accessible through the Platform, as such are described in the Terms (the 'Services').

Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

This Privacy Policy:

  • provides an overview of how we collect, process and protect your personal data, including any sensitive data.
  • informs you about your rights under the General Data Protection Regulation 2016/679 (GDPR), as amended from time to time, and any national law supplementing or implementing the GDPR (jointly with the GDPR, the "Privacy Laws").
  • contains important information about what personal data we collect, what we do with such personal data, who we may share it with and your rights in relation to the personal data you have given us.

For the purposes of this Privacy Policy:

  • When we refer to "Mentors/Coaches" we mean individuals with relevant professional experience who provide guidance, support and advice to Mentees, as part of a structured mentorship programme on the Platform.
  • When we refer to "Mentees/Coachees" we mean individuals seeking professional development, guidance or career support, who participate on the mentorship programme available on the Platform to learn from and engage with Mentors.
  • When we refer to "Programme Managers" we mean individuals responsible for the management, coordination and operation of one or several mentoring and/or coaching programs they created and/or manage on the Platform, including facilitating mentorship sessions and ensuring the smooth running of the mentorship programme.
  • When we refer to "personal data" or "personal information" we mean data which identifies or may identify you and which may include, for example, your name, address and telephone number. It does not include data where your identity has been removed (anonymous data).
  • When we refer to "processing" we mean the handling of your personal data by us, including collecting, protecting and storing your personal data.
  • When we refer to "sensitive data" we mean special categories of personal data which identify or may identify you and which may reveal, inter alia, details about your racial or ethnic origin, your political opinions, your religious or philosophical beliefs, your trade union memberships, your health, your sex life or your sexual orientation.
  • When we refer to "Account" we mean the account Mentors or Mentees create on the Platform following successful completion of the sign-up process.

2. WHO WE ARE

Mentormatic Solutions Limited, who owns, operates and manages the Platform, is the controller and is therefore responsible for your personal data.

If you have any questions or concerns regarding the collection and processing of your personal data by us or if you wish to exercise any of your rights (as set out in section 9 of this Privacy Policy), please contact us using the details set out below and we shall provide you with a response as soon as possible.

The Company takes the protection of your personal data very seriously. If you feel that we have not dealt with your concerns adequately, you have the right to submit a complaint to the data protection supervisory authority of the country in which you reside. We would, however, appreciate the chance to deal with your concerns before you approach the relevant data protection supervisory authority; so please contact us in the first instance. The data protection supervisory authority in Cyprus is the Office of the Commissioner for Data Protection and you can visit their website at: http://www.dataprotection.gov.cy.

3. HOW WE COLLECT YOUR PERSONAL DATA

Source of personal data Description Categories of data subjects
Directly from you This is information you submit to us directly by using the Platform or by corresponding with us (for example, by email or through the contact form). It includes information you provide when you:
  • create an Account and add information about yourself in your profile
  • use the Services on the Platform
  • request that we send you marketing
  • give us feedback or contact us for any other reason. If you contact us, we will keep a record of that correspondence.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Automated technologies or interactions Each time you access the Platform and interact with it, we will automatically collect data in connection to your equipment, browsing actions and patterns. We store this data by using cookies and other similar technologies. We may also collect data about you if you visit other websites employing our cookies. Please see our cookie policy available at https://mentormatic.com/mentormatic-ssr/cookie-policy for further details.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Third Parties We will receive personal data about you from various third parties as set out below:
  • Analytics providers (such as Google)
  • Advertising networks
  • Companies who send us your sign-up details directly to facilitate the registration process on the Platform (such as LinkedIn)
  • Companies conducting assessments (such as personality, competency and other assessments) on our behalf
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers

4. THE DATA WE COLLECT ABOUT YOU

4.1 Personal data we may collect and process about you

Category Description Data subject categories
Registration and Profile Data This is information provided during account creation or profile set up and includes your name and username, general location, education, work experience, skills, job title and seniority, professional history and any other information you have provided on your LinkedIn account and agree to share with us or have provided to use through manual registration.
  • Mentors/Coaches
  • Mentees/Coachees
Contact Data This is information that we may need in order to contact you and includes your e-mail address, telephone number and billing address.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Assessment Data This is information we collected through various assessments we may conduct as part of the Services, including the input and results of such assessments, for tailoring the membership experience. Examples include:
  • Personality Assessments: responses and results from tools like Myers-Briggs and DISC
  • Competency/Knowledge Tests: answers, final scores, identified strengths and gaps
  • Self-assessments: Results and analysis of self-evaluation of skills and expertise levels
  • AI-generated analysis: Compatibility scores, psychological profiles, recommended mentor-mentee matches and suggested development pathways
  • Personality Assessments: Mentors/Coaches Mentees/Coachees
  • Competency/Knowledge Tests: Mentees/Coachees
  • Self-assessments: Mentors/Coaches
  • AI-generated analysis: Mentors/Coaches Mentees/Coachees
Mentorship Interaction Data This is data generated during mentorship sessions, including, communications, uploaded content and AI insights drawn from session materials. Examples include:
  • Messaging content: Records of messages exchanged within the Platform's internal communication system
  • Session recordings and transcripts: Audio/video recordings (when used) and auto-generated transcripts
  • Notes: Notes made by mentors during or after the session
  • Mentor self-reflection journals (SRJs): Mentor-submitted journals describing their session observations and progress
  • [Google integration data: Assignments, feedback and session-related notes from integrated tools such as Google Classroom]
  • AI-based insights: Analysis of above session content to support mentor and mentee development, adjust learning paths, identify learning goals and recommend improvements
  • Mentors/Coaches
  • Mentees/Coachees
Transaction and Payment Data This includes payment-related data, which may be collected where subscription or paid features are activated and may include payment card or account number, transaction details (including possible failed payments) and history and invoice data.
  • Mentors/Coaches
  • Mentees/Coachees
Purchase Data This includes information in connection to your purchases on the Platform such as for example, the number and type of subscription packages you have purchased in the past and/or additional features you have selected.
  • Mentors/Coaches
  • Mentees/Coachees
Technical Data This includes your internet protocol (IP) address, your login data, your browser type and version, details of your device, your time zone setting and location, and your operating system and platform.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Usage Data This includes information about how you interact with and use the Platform, information collected through cookies, such as the links you have clicked on (including date and time), services you viewed or searched for, page response times, download errors, what time you accessed the Platform, length of visits to the Platform, page interaction information (such as scrolling and clicks), and methods used to browse away from our Platform.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Marketing and Communications Data This includes your preferences in receiving marketing from us and third parties with which we partner from time to time, as well as your communication preferences (i.e. whether you wish to receive such marketing through email, SMS, push notifications, system messages, or otherwise).
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Records Data This includes any correspondence and/or communications we have with you, such as when you contact us to report an issue with your use of the Platform and/or the Services.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers

And any other data and information provided voluntarily by you through the Platform.

We may also collect, share, and use Aggregated Data such as statistical data for any purpose including for academic research, that is to monitor the effectiveness of the mentorship programs, refine the mentor-mentee matching algorithms and obtain insights into learning and development. Aggregated Data could be derived from personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users using a specific Platform feature. If we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

4.2 Signup via LinkedIn

If you choose to sign-up using your LinkedIn account, we will collect the Registration and Profile Data described in section 4.1 above directly from your LinkedIn account profile to help you create your account quickly and easily.

We will only access this information, if you give your explicit permission when connecting your LinkedIn Account to the Platform. If you don't wish to sign up in this way, you can always choose to register manually instead, by entering your details yourself.

4.3 MBTI testing through Elevate

Where we direct you to undertake Myers-Briggs Type Indicator (MBTI) testing through the Elevate platform for the purposes of psychosocial-based matching, you will be asked to register on the Elevate platform, through which you will undertake the relevant assessments.

Elevate will then provide us with one or more reports based on the assessment you took and the responses you provided to that assessment. Elevate's privacy policy applies in the first instance as well as any additional agreements you have consented to as a customer of Elevate. In this regard, please refer to the respective privacy policies of Elevate and check the agreements you have consented to in conjunction with these contracts or separately.

We will access the results of your MBTI test provided you give us explicit permission to do so.

5. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when we have a lawful basis to do so. We rely on one or more of the following legal bases when using your personal data:

  • Performance of a contract: where we need to provide our Services to you through the Platform. Where we need to collect personal data under the terms of the contract we have with you, and you fail to provide that data when requested, we may not be able to provide you with the Services (either partly or fully). For example, if you fail to provide us and/or the payment service providers we work with the correct payment details, we will be unable to process your payments and you will therefore be unable to purchase a subscription package and use the Services offered through the Platform.
  • Legitimate interest: where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
  • Consent: where you have provided your explicit consent before the processing. Consent means processing your personal data where you have signified your agreement by a statement or clear opt-in to processing for a specific purpose, such as, where you subscribe to an email newsletter. Consent will only be valid if it is a freely given, specific, informed, and unambiguous indication of what you want. You can withdraw your consent at any time by contacting us using the contact details set out in section 2 of this Privacy Policy or through the opt-out options available on your Account or in email communications we send you.
  • Legal obligation: where we need to use your personal data to comply with a legal or regulatory obligation that we are subject to, such as, a tax obligation. Where we rely on legal obligation and you do not provide the necessary information, we may be unable to fulfil a right you have or comply with our obligations to you, or we may need to take additional steps, such as informing law enforcement or a public authority or applying for a court order.

We provide further details in connection to each legal basis on which we rely, in the table below:

Purpose Legal basis Data subject categories
To register you on the Platform and enable access to the Services. Performance of a Contract
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To facilitate your mentoring journey, including by:
  • Matching mentors and mentees based on psychosocial compatibility and skill gaps
  • Personalising mentoring experiences and tailoring learning resources
  • Supporting communication and interpersonal engagement within the Platform
  • Performance of a Contract
  • Consent (for processing of sensitive data, where applicable)
  • Mentors/Coaches
  • Mentees/Coachees
To manage our relationship with you in accordance with the Terms, including notifying you of changes to the Platform or the Services (including changes to this Privacy Policy and/or the Terms) and liaising with you to resolve any issues or concerns you may have. You may select to receive notifications relevant to the Services via email, push notifications, or through the Platform and can amend the way in which you receive them at any time through the settings on your Account. Performance of a Contract
  • Mentees/Coachees
  • Mentors/Coaches
  • Programme Managers
To administer and protect our business, including the Platform, and develop our Services. To this end, we may keep track of any communication we have with you, including through email, chat, or through other forms of communication. Records of such communications will assist us in checking your instructions to us (or vice versa) and assessing, analysing, and improving the Services and training our people. Legitimate Interests
  • Mentees/Coachees
  • Mentors/Coaches
  • Programme Managers
To manage the security of our network and information systems (including troubleshooting, testing, system maintenance, support, and hosting of data). Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To study how our customers use our Services and perform data analytics (such as market research, trend analysis, financial analysis, and customer segmentation) to improve our Services customer relationships, and experiences, and grow our business. Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To identify, prevent, investigate and address any ongoing or alleged breaches of the Terms including fraud by collaborating with service providers, developing countermeasures against such incidents or fraudulent activities and retaining data of past fraudulent behaviours to prevent recurrences. Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To maintain our accounts and records. Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To receive professional advice (e.g. tax or legal advice). Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To defend, investigate, or prosecute legal claims. Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To enable a sale, reorganization, transfer, or other transaction relating to our business. Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To provide you with information about other services, events, and offers that may be available on the Platform from time to time Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To contact you to deliver mandatory communications required by any new law that comes into force. Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To manage any legal claims connected to users' use of the Platform and/or the Services. Legitimate Interests
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To investigate certain fraudulent activities and/or any business disrupting incidents for which we are required to prepare relevant reports for the relevant supervisory authorities. Legal Obligation
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To comply with our tax or other legal obligations. Legal Obligation
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To notify you about changes to our Terms. Legal Obligation
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To respond to your requests to exercise your rights under this Privacy Policy. Legal Obligation
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
To process special categories of your personal data including details of your race or ethnicity through the identification document you may provide to us or results we receive through any personality assessment and competency/knowledge tests and self-assessment questionnaires carried out through the Platform. We will not use such information in any way other than as described in this Privacy Policy. We will request your prior consent before or upon your provision of these types of personal data to us. Consent
  • Mentors/Coaches
  • Mentees/Coachees
For third party marketing purposes. You can ask us to stop sending you marketing messages at any time by logging into the Platform and adjusting the relevant marketing preferences on your Account or by following the opt-out links on any marketing message sent to you or by contacting us using the contact details in section 2 above. Consent
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers

6. WITH WHOM WE MAY SHARE YOUR PERSONAL DATA

We may share your personal data with third parties as listed below for the purposes set out in section 5 above. When we do so, we request from such third parties to have appropriate technical and organisational measures in place to protect your personal data. We will not share any of your personal data for any purpose other than the purposes described in this Privacy Policy:

Categories of recipients Reason for sharing Data subject categories
Google Cloud Run (Hosting Provider) To host and operate the Platform, store user data and ensure Platform availability.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Third-party Platform developers To support Platform development, maintenance, bug fixes and technical improvements.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Payment service providers To process payment transactions.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Communication service Providers (e.g. email/SMS platforms) To send notifications, alerts, or other communications via email or SMS.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Third-party analytics providers To analyse Platform usage, identify technical issues and enhance user experience.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Third-party marketing platforms To execute and manage marketing campaigns, track leads and measure campaign effectiveness.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Providers of artificial intelligence tools or functionalities (including Google Gemini) To provide users with AI-assisted support or content.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Professional advisers including lawyers, bankers, auditors, accountants, tax consultants, and insurers Seeking professional advice to protect ourselves, our customers or others.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Tax authorities, law enforcement regulators, and other governmental bodies or agencies To comply with a legal obligation or a request which may include reporting of our processing activities in certain circumstances or for our own or a third party's justifiable interest.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers
Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets If we were to sell, transfer, or merge parts of our business or assets to someone or negotiate to do so. In this case, we may transfer your personal data to such party as part of that transaction. If a change happens to our business, then the new owners will use your personal data in the same way as set out in this Privacy Policy.
  • Mentors/Coaches
  • Mentees/Coachees
  • Programme Managers

Other third parties for which we will seek your consent prior to any disclosure. This may include, for example, third parties who may wish to advertise their products to you.

INTERNATIONAL TRANSFERS

Whenever we transfer your personal data out of the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Where we use specific service providers or share your personal information with third parties, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

7. SAFEGUARDING YOUR DATA

All information you provide to us is stored on our secure servers.

We are committed to protecting our users' personal data. We have put in place appropriate technical and organisational security measures that ensure the security of your personal data and prevent them from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. However, you should be aware that no system is ever secure in its entirety.

We and our business partners do our utmost to protect your personal data in line with the Privacy Laws by means of physical, electronic, and process-oriented security precautions. However, we cannot guarantee 100% protection against unauthorised access from third parties. When we do become aware of such unauthorised access, we immediately take all steps necessary to block such third party from retrieving, accessing, or otherwise compromising any personal data and ensure that any risks to our users are mitigated.

There are things you can do to protect the security of your data as well. Where we have given you (or where you have chosen) a password for your Account, you are responsible for keeping this password confidential. Please do not share it with anyone. If at any time you suspect or become aware of a breach of your Account or if you believe that your information is no longer secure, please contact us immediately using the contact details in section 2 of this Privacy Policy, so that we can take any necessary action.

8. HOW LONG WE KEEP YOUR PERSONAL DATA

We shall process and retain your personal data only for the period necessary to fulfil the purpose for which the data was collected.

To determine the appropriate retention period for your personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

If you have tried to register as a user on the Platform but have been unsuccessful (due to the fact that you have not provided us with all the information we have requested or you are not eligible to become a user or for any other reason), we will delete any personal data you have provided to us during the registration procedure immediately following your unsuccessful attempt to register.

In some circumstances you can ask us to delete your data. See section 9 below for further information.

9. YOUR LEGAL RIGHTS

You have the following rights in terms of the personal data and information we hold about you:

Receive access to your personal data

This enables you to receive a copy of the personal data we hold about you and to be informed on how we are lawfully processing it.

Request correction of the personal data we hold about you

This enables you to have any incomplete, inaccurate, or out-of-date information we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data

This enables you to ask us to delete or remove personal data where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below) or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request for erasure for specific legal or contractual reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data

You can object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request the restriction of processing of your personal data

This enables you to ask us to suspend the processing of your personal data in the following scenarios:

  • if you want us to establish the data's accuracy;
  • where you consider that our use of the data is unlawful but you do not want us to erase it;
  • where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims;
  • or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Data portability

When you request a transfer of your personal data, we will provide you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw your consent

In cases where you have given your consent to us, you will be able to withdraw that consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.

10. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your rights as set out in section 9, you can use the contact details set out in section 2 above.

For security reasons, we may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). We may also contact you to ask you for further information in relation to your request to speed up our response.

In some cases, such as when you wish to change or update your personal data, you may be able to do so by accessing your Account and making changes to the relevant fields that need to be corrected or updated.

12. AUTOMATED PROCESSING

We sometimes use automated measures including artificial intelligence (AI) tools, to assist us in offering you the best possible service. This includes the use of AI tools to analyse user profiles and suggest optimal mentor-mentee pairings based on psychological compatibility scores and complementary skill/knowledge level.

Our automated methods of processing are often supported by manual methods. For example, we may use AI tools to analyse your data to identify patterns and trends, which are usually manually reviewed and interpreted by humans.

13. CHANGES TO OUR PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES

We keep our Privacy Policy under regular review.

If we update our Privacy Policy in the future, the changes will be posted on this page and, where appropriate, notified to you either by email or when you next access the Platform. The new policy may be displayed on-screen, and you may be required to read and accept the changes to continue your use of the Platform or the Services.

We do, however, encourage you to review this policy periodically to stay informed about how we are processing and protecting your personal information.

It is important that the personal data we hold about you is accurate and current. Please keep us informed of your personal data changes during our relationship with you.