Privacy Policy (EU / EEA)

Controller: Project Management Structure (pmstructure.com). This policy explains how PM Structure processes personal data on our website and services. For privacy requests email support@pmstructure.com.

• Identity & contact: name, email, phone when you subscribe, checkout, book consultation, or contact support. • Account: login credentials and profile if you register. • Transaction: order history, residence and billing country, and regional pricing verification fields (checkout requests; no card payment on this site). • Technical: IP address, browser type, device data, cookies and local storage (see [Cookie Policy](/legal/cookies)). • Communications: messages you send us and newsletter preferences. • Region selection: country/region you choose for pricing (stored in local storage).

To provide pathways and services, process payments, verify regional eligibility, send newsletters you opt into, improve the site, prevent fraud, comply with law, and respond to support enquiries. We do not sell personal data.

• Contract: delivering your order and account. • Consent: marketing/newsletter and optional analytics cookies. • Legitimate interests: security, fraud prevention, and product improvement where balanced against your rights. • Legal obligation: tax, accounting, and regulatory requirements.

We use processors listed at [/legal/subprocessors](/legal/subprocessors) for hosting, database/auth (Supabase), and email. Optional analytics runs only after cookie consent. We may disclose data if required by law or to protect rights and safety.

• Account and order records: while your account is active and for a reasonable period after (typically up to 7 years where required for tax/legal). • Marketing: until you unsubscribe or withdraw consent. • Support tickets: long enough to resolve your issue and improve service. • Logs and security data: limited periods unless needed for investigations.

Data may be processed outside your country (e.g. US/EU cloud providers). Where required we use appropriate safeguards such as Standard Contractual Clauses. See regional addenda for local details.

Depending on your location you may have rights to access, correct, delete, restrict, object, or port your data, and withdraw consent. Email support with subject line “Privacy request”, your region, and enough detail to identify your account. See [/legal/privacy](/legal/privacy) for EU, UK, US, India, Pakistan, and GCC supplements.

Our services are not directed at children under 16. Purchases require you to be 18+ (or age of majority). We do not knowingly collect data from children under 16. If you believe we have, email support immediately so we can delete it. Regional addenda may specify lower age thresholds for consent in specific countries.

If a personal data breach poses risk to your rights, we will notify you and regulators as required by applicable law without undue delay.

We post updates on this page with a new “Last updated” date. Material changes may also be noted in the cookie banner version where relevant.

For questions about this Privacy Policy, email support@pmstructure.com with your region and order email if applicable.

Addendum for individuals in the European Union and European Economic Area (GDPR).

You have the right to access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interests. You may withdraw consent at any time for consent-based processing (e.g. marketing, analytics cookies).

• Contract: orders and account services. • Consent: newsletters and non-essential cookies. • Legitimate interests: security and service improvement (balanced against your rights). • Legal obligation: compliance and record-keeping.

Our services are not directed at children under 16. In some member states, parental consent may be required for information society services offered to children aged 13-16. We do not knowingly process children’s data for marketing.

We retain personal data only as long as needed for the purposes in our [Global Privacy Policy](/legal/privacy), unless a longer period is required by law.

You may lodge a complaint with your local data protection authority. A list is available from the European Data Protection Board (edpb.europa.eu).

Where we transfer data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Email support@pmstructure.com with subject “GDPR request”, your country, and the right you wish to exercise. We respond within one month where GDPR applies, and may extend by two further months for complex requests.

For questions about EU/EEA privacy, email support@pmstructure.com with your region and order email if applicable.