Privacy notice

Last updated: 11 November 2026.

Who is responsible

Vladimirs Karols, trading as Obsqo Labs, Malta. Email: ask@obsqolabs.com.

We are the controller of the personal data described in this notice. Contact us at ask@obsqolabs.com about anything in it.

What we collect

Account data: your name, email address and password (stored in encrypted form), if you create an account.
Learning data: your enrolments in free courses, progress, quiz and test answers, scores and certificates.
Newsletter data: your email address and the date you subscribed, if you sign up for updates.
Messages you send us, and course reviews you choose to post.
Technical data: IP address, browser and pages visited, through essential cookies and server logs.

The Risk Blind Spot Check stores your answers and result in your own browser only. They are not sent to us.

Full courses and payments

Full courses are sold and delivered by our course partner, Udemy. When you follow an Enrol link you leave this site, and Udemy handles your enrolment and payment under its own privacy policy. We do not receive your payment details.

Why we use it and our legal basis

To create your account, give you access to free courses, record your progress and issue certificates: performance of our agreement with you.
To keep the site secure, prevent misuse and improve the courses: our legitimate interests.
To send you news about new lessons, cases and courses: your consent, which you can withdraw at any time through the unsubscribe link in every email.

Who we share it with

We use service providers who process data for us under data processing terms:

Odoo S.A. (Belgium), which hosts the academy platform and sends our emails.
Google (YouTube), which streams the lesson videos embedded in the courses. When you play a video, YouTube may collect data under its own privacy policy.
Google (Google Fonts), which supplies the website's typeface. Your browser connects to Google, which receives your IP address.

Some providers process data outside the European Economic Area. Where they do, transfers rely on an adequacy decision, such as the EU-US Data Privacy Framework, or on standard contractual clauses.

We do not sell your personal data.

How long we keep it

We keep your account and learning records while your account is active and for two years after your last activity, so you can return to your courses and certificates.

We keep your newsletter subscription until you unsubscribe.

You can ask us to close your account at any time.

Your rights

You can ask for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time.

Write to ask@obsqolabs.com. We reply within one month.

You can also complain to the Information and Data Protection Commissioner in Malta (idpc.org.mt) or to the data protection authority where you live.

Children

The academy is meant for adults working in financial services. It is not aimed at anyone under 18.