Last Updated: July 20, 2026

1. Who We Are

Eternal Spring Institute is operated by IWKA Limited, a company incorporated in Hong Kong.

IWKA Limited is responsible for the personal data collected through this website and acts as the data controller for the purposes described in this Privacy Policy.

For privacy-related enquiries, please contact:

2. Information We Collect

We may collect the following personal information:

Contact information

Your name, email address, telephone number, billing address and delivery address.

Account and registration information

Information provided when you create an account, enrol in a course, register for an event or contact us.

Order and transaction information

Details of products, courses or event registrations you purchase, including payment status, refunds and order history.

Payments are processed by authorised payment providers such as PayPal. We do not normally receive or store your complete payment-card details.

Website usage information

Technical information such as your IP address, browser type, device information, pages visited and cookie or analytics data.

Communications

Information you provide through contact forms, emails, customer-service enquiries or other correspondence.

3. How We Use Your Information

We may use your personal information to:

• process purchases, event registrations and course enrolments;

• provide access to accounts and online learning materials;

• deliver products and services;

• communicate with you about orders, courses, events or account matters;

• provide customer support;

• send newsletters and promotional information where you have agreed to receive them;

• maintain the security and operation of our website;

• prevent fraud or misuse;

• comply with accounting, tax and other legal obligations; and

• improve our website, services and customer experience.

Our legal basis for processing may be the performance of a contract, compliance with a legal obligation, your consent or our legitimate business interests, depending on the purpose. GDPR privacy notices should explain the purposes, legal bases, recipients, retention and rights connected with the processing.

4. Marketing Communications

We will send marketing emails only where permitted by law.

You may unsubscribe at any time by clicking the unsubscribe link in an email or contacting us at:

info@eternalspringinstitute.com

Withdrawing your consent will not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies and Analytics

Our website may use:

• essential cookies needed for security, shopping carts, checkout and account functions;

• preference cookies;

• analytics cookies; and

• marketing cookies.

Where required, non-essential cookies will be used only after you provide consent through our cookie banner or preference panel.

More information may be available through the website’s cookie settings or a separate Cookie Policy.

6. Sharing Your Information

We may share personal information with service providers that help us operate our website and deliver our services, including:

• Squarespace, for website hosting and online commerce;

• PayPal and other payment processors;

• email and newsletter providers;

• online learning platforms;

• delivery and fulfilment providers;

• event administration providers;

• professional advisers such as accountants or legal advisers; and

• public authorities where disclosure is legally required.

These providers receive only the information reasonably necessary to perform their services.

We do not sell your personal information.

7. International Data Transfers

IWKA Limited is incorporated in Hong Kong, and some service providers may process information outside Portugal or the European Economic Area.

Where required, we use appropriate safeguards for international transfers, which may include contractual protections such as the European Commission’s Standard Contractual Clauses.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary to:

• provide the requested services;

• maintain customer and course accounts;

• process orders and refunds;

• meet accounting, tax or legal obligations;

• resolve disputes; and

• protect or enforce legal rights.

Different types of information may be kept for different periods. Information that is no longer required will be deleted, anonymised or securely retained where deletion is not legally possible.

GDPR principles require personal data to be kept for the shortest period reasonably necessary, taking account of the purpose and applicable legal obligations.

9. Your Data-Protection Rights

Depending on applicable law, you may have the right to:

• request access to your personal information;

• request correction of inaccurate or incomplete information;

• request deletion of your information;

• restrict certain processing;

• object to certain processing, including direct marketing;

• receive certain information in a portable format;

• withdraw your consent; and

• lodge a complaint with a data-protection authority.

Some rights are subject to legal limitations. For example, we may need to retain certain transaction records to comply with tax, accounting or legal obligations.

To exercise your rights, contact:

info@eternalspringinstitute.com

We may ask for information necessary to confirm your identity before responding.

10. Complaints

You may lodge a complaint with the data-protection authority in the country where you live or work.

In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados — CNPD

The CNPD provides a formal process for submitting data-protection complaints.

11. Children’s Information

Some Eternal Spring Institute programmes may be intended for children.

Registrations and purchases for children should be completed by a parent, guardian or authorised adult. Where legally required, we will obtain appropriate parental or guardian consent before collecting or using a child’s personal information.

12. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no website, transmission method or electronic storage system can be guaranteed to be completely secure.

13. Third-Party Websites

Our website may contain links to external websites or services. We are not responsible for the privacy practices of those third parties. You should review their privacy policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, practices or legal obligations.

The updated version will be published on this page with a revised “Last updated” date.

15. Contact Us

For questions, requests or concerns relating to this Privacy Policy, contact:

IWKA Limited, operating as Eternal Spring Institute
Email: info@eternalspringinstitute.com