Privacy Policy
Last Updated: 18 February 2025
1. Introduction and Scope
1.1 This Privacy Policy (“Policy”) applies as between you, the User of our website(s) and online services owned, operated, or provided by Thrive-in Collaboration SRL and its learning management system provider, LearnWorlds, including but not limited to academy.sociocracy30.org, lms.sociocracy30.org, and their subdomains.
LearnWorlds acts as a data processor on our behalf and may collect, store, and process personal data related to your account and course activities.
1.2 This Policy outlines how we collect, use, disclose, transfer, and protect your personal data, as well as your choices and rights regarding your personal data. It applies to all personal data processing activities carried out by us, including when you use our Website(s), mobile applications, and external online presences (e.g., social media profiles).
1.3 By accessing or using our online services, you confirm that you have read and understood this Policy. Where required, we will request your explicit consent before processing personal data for specific purposes (e.g., cookies, marketing, or third-party integrations). If you do not agree, you may adjust your settings or discontinue use.
2. Controller
2.1 Controller Details:
2.2 LearnWorlds as a Data Processor
- Controller: Thrive-in Collaboration SRL
- Data Processor: LearnWorlds Ltd. (our learning management system provider)
- Address: Mühlenstr. 26a, 85567 Grafing, Germany
- Contact Email: bernhard@thriveincollaboration.com
- For legal notices, please see: https://sociocracy30.org/legal-notice/
2.2 LearnWorlds as a Data Processor
LearnWorlds provides our learning management system (LMS) and processes personal data on our behalf, including user registrations, course progress, and analytics. LearnWorlds is contractually bound to comply with GDPR and relevant data protection laws when processing personal data.
For more details on LearnWorlds' data processing practices, visit their Privacy Policy: https://www.learnworlds.com/privacy-policy/.
3. Definitions
In this Policy, the following terms shall have the meanings set out below. Where a term from one source (PP1 or PP2) overlaps with the other, we have combined definitions to avoid repetition.
- Account: Collectively, the personal information, payment information, and credentials used by Users to access materials and/or communications systems on the Website.
- Affiliate Tracking: Log links used to refer Users to third-party websites (e.g., for products or services). Third parties may track whether Users who clicked affiliate links subsequently purchase products or take other actions.
- Content: Any text, graphics, images, audio, video, software, data compilations, or other information capable of being stored on a computer and appearing on or forming part of the Website or other online services.
- Cookie: A small text file placed on your computer or device by a website or service. Cookies store information about your usage, preferences, or login status. The term also includes similar technologies fulfilling the same functions (e.g., user IDs, pixel tags).
- Controller: The natural or legal person or entity which alone or jointly with others determines the purposes and means of processing personal data—in this case, Thrive-in Collaboration.
- Data / Personal Data: All information submitted by you via the Website or collected automatically (such as IP address, and cookie identifiers). Personal data means any information relating to an identified or identifiable natural person.
- Data Subject / User / Users: Any individual accessing the Website who is not employed by Thrive-in Collaboration in the course of their employment. “Data Subject” further references you as the individual whose personal data is processed.
- GDPR: General Data Protection Regulation (EU) 2016/679, the primary data protection law applicable to the European Economic Area (EEA). Note: We may also operate under national data protection laws (e.g., the Data Protection Act 1998 in the UK) where applicable.
- Processing: Any operation performed on personal data (e.g., collection, organization, storage, adaptation, retrieval, use, disclosure by transmission, erasure).
- Service: Collectively, any online facilities, tools, services, or information that Thrive-in Collaboration makes available through the Website or other online services, now or in the future.
- System: Any online communications infrastructure Thrive-in Collaboration makes available through the Website or other online services. This may include web-based email, message boards, live chat facilities, or email links.
- Third Countries: Countries outside the European Union (EU) or European Economic Area (EEA) without an adequacy decision from the European Commission.
4. Categories of Data Collected
We may collect and process personal data directly from you or automatically when you use our Website, enroll in Courses, or engage with our learning management system (LMS) provided by LearnWorlds. The categories of data we collect include:
4.2 Account and Course-Related Data
4.7 Withholding of Information
4.1 Personal Identification and Contact Information
- Inventory Data: Name, date of birth, address, job title/profession, demographic details (e.g., postcode, preferences, interests).
- Contact Data: Email addresses, telephone numbers, fax numbers, or other communication channels used for customer support or service notifications.
4.2 Account and Course-Related Data
- Account Data: Username, password (encrypted), and account creation date.
- Contract Data: Course registration details, duration of enrollment, purchase history, and customer category (e.g., free user, paid subscriber, or participant in a live workshop).
- Payment Data: Financial information related to transactions (e.g., credit/debit card numbers, billing address, invoices, payment confirmations), processed securely through third-party payment providers (e.g., Stripe).
4.3 Learning Activity and Engagement Data (Processed by LearnWorlds)
LearnWorlds, as our LMS provider, collects the following data on our behalf to deliver and enhance our online courses:
- Learning Activity Data: Course progress, module completions, quiz performance, assignment submissions, participation in discussions, and time spent on lessons.
- Platform Interaction Data: Logins, session duration, clicks on course materials, and engagement with interactive content.
- Support & Communication Data: Messages exchanged via LearnWorlds’ discussion forums, Q&A sections, or support tools integrated into the LMS.
4.4 Technical and Behavioral Data
- Meta/Communication Data: IP addresses, device type, browser type and version, operating system, referring/exit pages, date/time stamps, and cookie identifiers.
- Usage Data: Pages visited, navigation behavior, preferences for course content, affiliate tracking data, and interest in specific topics or modules.
4.5 Cookies and Tracking Technologies
- First-Party and Third-Party Cookies: We use cookies and similar tracking technologies to enhance your experience, analyze engagement, and optimize our services.
- Analytics Data (Including LearnWorlds Analytics): We use LearnWorlds' built-in analytics to monitor course effectiveness, user engagement, and technical performance.
4.6 Optional Data Submission
You may voluntarily provide additional information, such as feedback, testimonials, surveys, or other personal details when engaging with Thrive-in Collaboration or LearnWorlds’ platform.
4.7 Withholding of Information
You may choose to withhold certain types of data, such as cookies, analytics tracking, or optional user-generated content. However, doing so may restrict access to certain features, limit course functionality, or prevent personalized recommendations.
5. Legal Bases for Processing
In accordance with the General Data Protection Regulation (GDPR) (EU 2016/679) and other applicable data protection laws, we rely on the following legal bases when processing your personal data. Where LearnWorlds acts as a data processor on our behalf, it processes data under the same legal bases as described below.
5.1 Consent (Article 6(1)(a) GDPR)
You have provided explicit consent for the processing of your personal data for specific purposes, including:
- Accepting non-essential cookies (e.g., analytics, marketing).
- Subscribing to newsletters and marketing communications (with the option to withdraw at any time).
- Participating in optional surveys, feedback requests, or voluntary content submissions.
5.2 Performance of a Contract or Steps Prior to Entering into a Contract (Article 6(1)(b) GDPR)
Processing is necessary for us and LearnWorlds (as our LMS provider) to deliver services, provide access to courses, and track user engagement. This includes:
- User registration and account creation within the LMS.
- Providing access to purchased or enrolled courses.
- Tracking course progress, completions, and quiz results.
- Delivering personalized learning recommendations based on engagement levels.
- Handling user authentication and login security.
5.3 Compliance with a Legal Obligation (Article 6(1)(c) GDPR)
We may be required to process personal data to comply with regulatory, tax, or legal requirements. This includes:
- Maintaining accurate financial and transaction records (e.g., purchase history, invoices, refunds).
- Responding to legal inquiries, government authorities, or court orders.
- Ensuring compliance with applicable data protection laws and audit requirements.
5.4 Protection of Vital Interests (Article 6(1)(d) GDPR)
In rare circumstances, we may process personal data to protect the life or well-being of an individual. Examples include:
- Identifying and mitigating security threats on the LMS platform.
- Detecting potential safety concerns related to course interactions.
5.5 Legitimate Interests (Article 6(1)(f) GDPR)
We process personal data where our legitimate interests do not override your fundamental rights. You have the right to object to such processing at any time. Examples include:
- Ensuring the security and integrity of the Website, LMS, and user accounts.
- Preventing fraud, cyberattacks, and unauthorized access.
- Improving course content and user experience based on anonymized analytics.
- Conducting direct marketing to existing customers (subject to opt-out rights).
- Analyzing engagement data for service optimization (e.g., course completion rates, lesson effectiveness).
5.6 LearnWorlds' Processing of Personal Data
LearnWorlds processes your personal data under the legal bases described above in its role as our learning management system provider. This includes:
- Authenticating users and maintaining LMS account security.
- Tracking course progress, engagement levels, and completion status.
- Providing technical support and platform troubleshooting.
- Monitoring system performance, user activity logs, and access times.
- Ensuring compliance with its own security policies and GDPR requirements.
For more details, refer to the LearnWorlds Privacy Policy: https://www.learnworlds.com/privacy-policy/.
6. Purposes of Processing
We process personal data for the following purposes:
In addition to the purposes outlined above, LearnWorlds processes personal data to:
- Provision of Our Online Services and Usability: To operate, maintain, and optimize the Website(s), mobile applications, and related features.
- Contractual Services and Support: To fulfill sales or service contracts, manage customer accounts, and provide support or training.
- Office and Organizational Procedures: Internal record keeping, improvement of products/services, and organizational administration.
- Direct Marketing and Newsletters: Sending promotional materials (by email or postal mail) and newsletters regarding updates, events, or resources, subject to consent or legitimate interests.
- Contact Requests and Communication: Managing incoming inquiries via email, phone, or contact forms and responding to your questions.
- Web Analytics and Monitoring: Understanding how users interact with our services, including measuring website visits, analyzing user behavior, and improving user experience.
- Security Measures: Safeguarding data, preventing fraud, detecting illegal activities, and ensuring the technical functionality of our systems.
- Targeting and Profiling: Using cookies, usage data, or other means to tailor marketing or website content to user interests (subject to consent where required).
- Affiliate Tracking and Conversion Tracking: Monitoring clicks on affiliate links or ad campaigns to evaluate and settle commissions and measure effectiveness.
- Feedback and Surveys: Collecting and analyzing user feedback to refine our services.
- Content Delivery Network (CDN): Delivering large media files (e.g., videos, scripts) efficiently and securely from regionally distributed servers.
- Compliance with Law: Meeting legal obligations, responding to legal requests, and defending legal claims.
In addition to the purposes outlined above, LearnWorlds processes personal data to:
- Provide access to course content and track progress (course completions, quiz scores, and engagement levels).
- Authenticate users and maintain account security within the LMS.
- Deliver platform support and respond to technical issues related to the LMS.
7. Security Measures
7.1 Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
Controlling physical and electronic access to personal data.
Encryption (e.g., SSL encryption for our Website to protect data in transit).
Procedures ensuring prompt responses to data breaches or threats.
Privacy by design and default, taking data protection into account in the development or selection of our services.
7.2 Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Generally, data is kept until:(i) it is no longer needed,
(ii) you request deletion, or
(iii) applicable legal obligations require further retention.
For example, tax legislation commonly requires retaining certain data for up to 10 years. In addition, data submitted through any communications system (such as messages sent via a forum, chat facility, or email link) may be retained for up to one year after you discontinue using the Services unless a longer retention period is required by law or to fulfill contractual or legal obligations.
7.3 Data Breach Notification
In case of a data breach that may pose a risk to your rights and freedoms, we will notify the relevant data protection authority within 72 hours and, where applicable, affected individuals as required by Articles 33 & 34 GDPR.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
Controlling physical and electronic access to personal data.
Encryption (e.g., SSL encryption for our Website to protect data in transit).
Procedures ensuring prompt responses to data breaches or threats.
Privacy by design and default, taking data protection into account in the development or selection of our services.
7.2 Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Generally, data is kept until:(i) it is no longer needed,
(ii) you request deletion, or
(iii) applicable legal obligations require further retention.
For example, tax legislation commonly requires retaining certain data for up to 10 years. In addition, data submitted through any communications system (such as messages sent via a forum, chat facility, or email link) may be retained for up to one year after you discontinue using the Services unless a longer retention period is required by law or to fulfill contractual or legal obligations.
7.3 Data Breach Notification
In case of a data breach that may pose a risk to your rights and freedoms, we will notify the relevant data protection authority within 72 hours and, where applicable, affected individuals as required by Articles 33 & 34 GDPR.
8. Transmission and Disclosure of Personal Data
We may disclose or transfer personal data to third parties only when necessary for service delivery, compliance with legal obligations, or in connection with business operations. We do not sell or share personal data for unrelated third-party marketing purposes.
Stripe (Payment Processing) – Handles transactions securely and stores limited financial data for billing purposes.
Vimeo (Video Hosting) – Streams course-related video content. Viewing Vimeo-hosted content may result in user metadata being processed by Vimeo.
Cloudflare (Security & Performance) – Protects against cyber threats, optimizes website speed, and ensures platform reliability.
8.2 Contractual Safeguards
8.3 Business Transfers and Change of Ownership
8.1 Third-Party Service Providers
The following third-party providers process personal data on our behalf:
- LearnWorlds Ltd. (Learning Management System Provider) – Processes user account data, course activity, platform interactions, and analytics. LearnWorlds also integrates with third-party services that may process personal data, including:
Stripe (Payment Processing) – Handles transactions securely and stores limited financial data for billing purposes.
Vimeo (Video Hosting) – Streams course-related video content. Viewing Vimeo-hosted content may result in user metadata being processed by Vimeo.
Cloudflare (Security & Performance) – Protects against cyber threats, optimizes website speed, and ensures platform reliability.
- Other Payment Institutions – Handles financial transactions where alternative payment methods are required.
- Other IT Service Providers (e.g., web hosting, data storage, email services) – Supports infrastructure, platform maintenance, and email communications.
- Other Marketing and Advertising Partners – Assists with promotional campaigns, analytics, and affiliate tracking, subject to consent.
- Other Authorized Affiliates or Subcontractors – Provides additional services related to course delivery or customer support.
8.2 Contractual Safeguards
We ensure that all third-party service providers who process personal data on our behalf are bound by strict confidentiality and data protection obligations, including:
- Data Processing Agreements (DPAs) that enforce GDPR compliance.
- Standard Contractual Clauses (SCCs) where data is transferred outside the EU/EEA.
- Regular security and privacy audits to verify compliance.
- Third parties only receive the minimum necessary personal data required to perform their functions, and they are prohibited from using it for any other purpose.
8.3 Business Transfers and Change of Ownership
If Thrive-in Collaboration undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction. In such cases:
- We will notify you in advance via email or a notice on our Website.
- You will have the option to request data deletion or object to the transfer if permitted by law.
- The new owner will be contractually required to honor this Privacy Policy unless otherwise stated.
9. Data Processing in Third Countries
9.1 Cross-Border Data Transfers
9.2 LearnWorlds' Compliance Measures
9.3 US-Based Service Providers: Some of our services may use US-based providers for embedding content (e.g., YouTube videos, Google Drive content). As a result, some of your personal data may be subject to US laws and government requests without the same rights you hold under the GDPR. Specifically:
This list of companies may change at any time. We will endeavor to keep you informed, but you should also check provider policies directly.
LearnWorlds and other third-party service providers may store and process personal data outside the EU/EEA, including in the United States.
We ensure compliance with GDPR through:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data Processing Agreements (DPAs) with LearnWorlds and other vendors.
9.2 LearnWorlds' Compliance Measures
LearnWorlds maintains GDPR-compliant security controls and legal safeguards for any international data transfers. You can review their policy here: https://www.learnworlds.com/privacy-policy/.
9.3 US-Based Service Providers: Some of our services may use US-based providers for embedding content (e.g., YouTube videos, Google Drive content). As a result, some of your personal data may be subject to US laws and government requests without the same rights you hold under the GDPR. Specifically:
- Google LLC for embedding YouTube videos or Google Drive content (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Your IP address is transmitted to Google LLC whenever embedded Google content is accessed. You can find more information in Google’s Privacy Policy, and you may opt out by using Google’s Opt-Out Plugin or adjusting Ad Settings.
This list of companies may change at any time. We will endeavor to keep you informed, but you should also check provider policies directly.
10. Cookies and Similar Technologies
10.1 What Are Cookies?
10.2 Types of Cookies We Use
10.3 Legal Basis
10.4 Opt-Out
You may disable cookies in your browser settings or use third-party opt-out tools (e.g., http://www.aboutads.info/choices/, http://www.youronlinechoices.com). Note that blocking cookies may affect website functionality.
Cookies are text files stored on your device to track usage, remember preferences, and generally improve user experience. They can be:
- Session Cookies (temporary, deleted after you close your browser).
- Permanent Cookies (stored until you delete them or they expire).
- First-party Cookies (set by us).
- Third-party cookies (set by external providers, e.g., advertisers).
10.2 Types of Cookies We Use
- Necessary Cookies: Essential for website operation (e.g., login security).
- Statistics/Analytics Cookies: Measure traffic and usage (subject to consent or legitimate interest).
- Marketing and Personalization Cookies: Track user interests and behavior across multiple sites to display relevant ads or content (subject to consent).
10.3 Legal Basis
- Consent (Article 6(1)(a) GDPR): For non-essential cookies or tracking technologies, we obtain your prior consent (e.g., via cookie banner).
- Legitimate Interests (Article 6(1)(f) GDPR): We may use certain cookies necessary for technical functionality or to improve our services.
10.4 Opt-Out
You may disable cookies in your browser settings or use third-party opt-out tools (e.g., http://www.aboutads.info/choices/, http://www.youronlinechoices.com). Note that blocking cookies may affect website functionality.
11. Provision of Online Services and Web Hosting
11.1 We use one or more web hosting providers to deliver our online services securely and efficiently, which may involve:
Infrastructure and platform services (servers, storage, database).
Email sending and hosting (addresses of recipients and senders, email content, and logs may be processed for transmission and spam detection).
11.2 Log Files
We or our hosting provider collect server log files (e.g., accessed pages, IP addresses, timestamps, transferred data amounts) to ensure security (e.g., defense against DDoS attacks) and optimize our services.
11.3 Content Delivery Network (CDN)
We may use a CDN to quickly deliver large media files. Such providers receive your IP address to deliver content to your browser.
Infrastructure and platform services (servers, storage, database).
Email sending and hosting (addresses of recipients and senders, email content, and logs may be processed for transmission and spam detection).
11.2 Log Files
We or our hosting provider collect server log files (e.g., accessed pages, IP addresses, timestamps, transferred data amounts) to ensure security (e.g., defense against DDoS attacks) and optimize our services.
11.3 Content Delivery Network (CDN)
We may use a CDN to quickly deliver large media files. Such providers receive your IP address to deliver content to your browser.
12. Commercial Services and E-Commerce
12.1 Online Shop / Payment Handling
We process customers’ personal data to facilitate product or service selection, purchase or ordering, payment, and delivery or performance of services. Required details are clearly marked during checkout.
12.2 Data Retention
We store contractual data for the statutory warranty period (usually 4 years) or as required by tax or other laws (commonly 10 years). We delete or anonymize data when it is no longer needed for these obligations.
13. Blogs, Forums, and Publication Media
13.1 If our online services include blogs, forums, or similar platforms, user data (e.g., IP addresses, content of posts, comments) may be processed:
- Legitimate Interests: We may store IP addresses to protect against liability for unlawful content (e.g., hate speech).
- Spam Detection: We may use certain tools or cookies to detect spam.
- User Contributions: Content posted (e.g., comments, images) is typically stored until the user objects or requests erasure.
14. Contacting Us
14.1 If you contact us (e.g., via email, contact form, telephone, or social media), we process your data (e.g., name, email address, phone number) to respond to your inquiry.
14.2 Legal Basis:
- Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR) if related to a contractual relationship.
- Legitimate interests (Article 6(1)(f) GDPR) in responding to general inquiries or requests.
15. Newsletters and Electronic Communications
15.1 Subscription and Double Opt-In
If you sign up for newsletters or other direct communications, you may be asked to confirm your subscription via email (double opt-in). This prevents misuse of your email address.
15.2 Content
Newsletters may contain updates about our services, new resources, events, or promotional materials.
15.3 Performance Measurement
Newsletters may include tracking pixels or links to measure open rates and click rates. This helps us refine content for user interests.
15.4 Opt-Out
You can unsubscribe at any time using the link provided in each newsletter or by contacting us. Unsubscribed emails may be retained for up to three years based on our legitimate interest in demonstrating prior consent unless you request earlier deletion.
15.5 Service Provider
We may use MailerLite or similar providers to manage email marketing. MailerLite’s addresses are 548 Market St, San Francisco, United States, and Ground Floor 71, 2 Baggot Street Lower, Dublin, Ireland. Please refer to their privacy policy for additional details: https://www.mailerlite.com/legal/privacy-policy
16. Embedded Content and Third-Party Services
16.1 Embedded Content and Plugins
We may integrate functional and content elements from third-party providers (e.g., videos, social media buttons, interactive features). These providers may process your IP address and other technical data necessary to deliver content to your browser.
16.2 Third-Party Data Processing
Some third-party providers may use tracking technologies (e.g., pixel tags, web beacons) for statistical, marketing, or personalization purposes. While we aim to use only providers that process data solely for content delivery or enhancement, we do not control their data practices.
16.3 Legal Basis
- Consent: Where required, we seek your consent before loading third-party content that involves data processing.
- Legitimate Interests: In cases where embedded content is necessary for functionality or a seamless user experience, we rely on our legitimate interest in providing an accessible website.
17. Affiliate Programs and Links
17.1 We may include affiliate links or references (e.g., search forms, widgets, discount codes) to third-party offers. If you follow such links or make purchases, we may receive a commission.
17.2 Tracking
To attribute affiliate referrals, third parties may store cookies or similar identifiers. Such data collection is governed by their own privacy policies; we endeavor to use only reputable partners.
18. Users’ Rights
Under the GDPR (Articles 15 to 21) and other applicable laws, you have the following rights regarding your personal data:
If you wish to access, modify, or delete data stored on LearnWorlds, you can request this by contacting us or LearnWorlds directly:
- Right to Object: Object at any time, for reasons arising from your particular situation, to processing based on Article 6(1)(e) or (f) GDPR. You also have the right to object to automated decision-making, including profiling, where it significantly affects you (Article 22 GDPR). If such processing occurs, we will provide meaningful information about the logic involved, its significance, and potential consequences.
- Right to Object to Direct Marketing: You can always object to direct marketing or revoke consent to further communications.
- Right of Withdrawal of Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Right of Access: Request confirmation on whether your data is processed and obtain a copy.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data under certain circumstances.
- Right to Restriction of Processing: Request limiting the processing of your data (e.g., pending dispute resolution).
- Right to Data Portability: Obtain and reuse your personal data for your own purposes across different services, where technically feasible.
- Right to Lodge a Complaint: File a complaint with a supervisory authority if you believe your rights under GDPR have been violated.
If you wish to access, modify, or delete data stored on LearnWorlds, you can request this by contacting us or LearnWorlds directly:
- Thrive-in Collaboration (Data Controller): academy@sociocracy30.org
- LearnWorlds Privacy Contact (Data Processor): https://www.learnworlds.com/privacy-policy/
19. Controlling Access to Your Data
19.1 Accessing and Managing Your Data
If you require assistance accessing or updating your data, you may contact us at academy@sociocracy30.org.
19.2 Requesting a Copy of Your Data (Data Portability)
We will process your request within 30 days in compliance with GDPR regulations.
⚠ Important: Deleting your account is permanent and irreversible. This will remove all course progress, quiz results, and certificates.
Even if you opt out of marketing, you will continue to receive service-related emails (e.g., account updates, security notifications).
For more details, refer to our Cookie Policy.
You may access, update, or correct your account data at any time by logging into your account: https://lms.sociocracy30.org/profile → "Edit" → "Privacy Settings". From this section, you can:
- View and amend your stored data (e.g., name, email, and preferences).
- Manage cookie preferences, including enabling or disabling functional, analytics, and marketing cookies.
- Adjust marketing preferences to opt in or out of promotional communications.
If you require assistance accessing or updating your data, you may contact us at academy@sociocracy30.org.
19.2 Requesting a Copy of Your Data (Data Portability)
Under GDPR Article 20, you have the right to request a copy of your personal data in a structured, machine-readable format.
To request a data export, you may:
- Use the "Personal Data Access Request" option in Privacy Settings at: https://lms.sociocracy30.org/profile → "Edit" → "Privacy Settings" → "Advanced Privacy Settings"
- Or email us at academy@sociocracy30.org with the subject line "Data Portability Request".
We will process your request within 30 days in compliance with GDPR regulations.
19.3 Deleting Your Account and Data ("Right to be Forgotten")
You have the right to request permanent deletion of your account and associated personal data.
To delete your account, you may:
- Use the "Delete My Account and Forget Me" option in your Privacy Settings at: [https://lms.sociocracy30.org/profile] → "Edit" → "Privacy Settings" → "Advanced Privacy Settings"
- Request account deletion via email by contacting academy@sociocracy30.org with the subject line "Account Deletion Request".
⚠ Important: Deleting your account is permanent and irreversible. This will remove all course progress, quiz results, and certificates.
For LearnWorlds-specific deletion requests, you may also contact LearnWorlds directly via their Privacy Policy.
19.4 Restricting Marketing and Third-Party Sharing
You may control how we use your data for marketing purposes:
- Unsubscribe from emails via the "Unsubscribe" link in any email.
- Opt out of third-party marketing data sharing via your Privacy Settings on the LMS platform.
- Withdraw consent for analytics tracking or profiling within your account settings or by contacting us.
Even if you opt out of marketing, you will continue to receive service-related emails (e.g., account updates, security notifications).
19.5 Managing Cookies and Tracking Technologies
You may adjust cookie settings within your Privacy Settings at: [https://lms.sociocracy30.org/profile] → "Edit" → "Privacy Settings"
You can also:
- Modify your browser settings to block or delete cookies.
- Use third-party opt-out tools, such as:
- Google Ads Preferences
- Your Online Choices (EU)
- Network Advertising Initiative (US)
- Blocking cookies may impact some site functionality, but you will still be able to access core course content.
For more details, refer to our Cookie Policy.
20. Erasure of Data
We erase personal data when:
- The purpose for which it was collected no longer applies.
- You withdraw consent (where consent was the sole legal basis).
- You validly exercise your right to erasure or object to processing.
- We are legally required to erase it.
If data must be retained for legal reasons (e.g., tax, accounting, or to establish or defend legal claims), we restrict its processing to those limited purposes.
21. Changes to This Policy
21.1 We reserve the right to modify or update this Policy at any time to reflect changes in our data processing practices or legal requirements. We will notify users of significant policy updates via email or in-app notifications where applicable. Minor updates will be published on our website, with the “Last Update” date revised accordingly.
21.2 Your Acceptance
Your continued use of our Website or services after changes have been posted indicates your acceptance of those changes. If the changes require further consent from you (e.g., additional data uses), we will request such consent separately.
22. Contacting Us
If you have any questions or concerns about this Privacy Policy, your personal data, or wish to exercise any of your rights:
- Email: academy@sociocracy30.org or bernhard@thriveincollaboration.com
- Postal Address: Thrive-in Collaboration, Mühlenstr. 26a, 85567 Grafing, Germany
We will respond to your inquiry as soon as possible and in compliance with applicable data protection laws.
If your privacy concern relates to LearnWorlds’ data processing, you may also contact them directly through their Privacy Policy portal: https://www.learnworlds.com/privacy-policy/.
External links
Official Sociocracy 3.0 website ↗
Copyright © 2025

Subscribe now
Invite James to your event
Thank you!
Subscribe to our newsletter now!
Join our mailing list and we'll be in touch with information about new courses, upcoming events and other news.