Privacy Policy

What we collect

• Account data: your name, email address and password hash.
• Learning data: which units you opened, progress, assessment results and certificates.
• Enquiry data: what you write to us through the registration form or by email.
• Technical data: IP address, browser type and pages requested, retained in server logs.
• Payment data: handled by our payment processor. We store a transaction reference and the last four digits of the card only. We never receive or store full card numbers.

Why we hold it

• To operate your account and deliver the courses you enrolled in — necessary to perform our contract with you.
• To answer your enquiries and provide support.
• To improve course material by looking at where learners commonly stop — our legitimate interest, assessed against your rights.
• To meet accounting, tax and anti-fraud obligations.
• To send optional course updates, where you have opted in. Every such email carries a one-click unsubscribe.

What we never do

• We do not sell personal data, and we never have.
• We do not share learning data with advertisers or data brokers.
• We do not ask for wallet addresses, seed phrases or private keys, and we would have no use for them.
• We do not build advertising profiles from your course activity.

Who processes data for us

We use a small number of processors to run the service: a hosting and content-delivery provider, a payment processor, a transactional email provider, and an error-monitoring service. Each is bound by a data-processing agreement and may use the data only to provide the service to us.

How long we keep it

• Account and learning data: for as long as your account is open, then 12 months after closure.
• Certificates: retained indefinitely so that issued certificates remain verifiable, unless you ask us to revoke yours.
• Enquiry correspondence: 24 months.
• Server logs: 90 days.
• Financial records: seven years, as required by tax law.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent. Write to our support address and we will respond within 30 days at the latest. You may also complain to your local data-protection authority.

International transfers and security

Our servers are in the United States, so data from other regions is transferred there under standard contractual clauses. Data is encrypted in transit and at rest, access is limited to staff who need it, and we will notify affected learners and the relevant authority without undue delay if a breach puts your rights at risk.

Children

This platform is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a minor has registered, contact us and we will delete the account.