Privacy Policy
Last updated:
Data We Collect
Account & Contact
Name, email, optional phone, and password hashes for authentication.
- Identifiers: account ID, hashed email for anti-abuse.
- Communication preferences: newsletter opt-in, course notifications.
Usage
Course progress, interactions, and device metadata used to improve learning outcomes.
- Device and log data (IP, timestamps, user agent) for security and diagnostics.
- Interaction events (lesson viewed, quiz attempts, time on task).
Payments
If you buy a course, we process payment information through PCI-compliant providers. We do not store full card numbers on our servers.
- Billing name, address, last 4 digits of card (tokenized by processor).
- Transaction metadata (amount, currency, status, fraud signals).
Communications
Messages you send to support and feedback you provide, including attachments you voluntarily upload.
Third-Party Sources
We may receive limited data from analytics, payment, or identity verification partners where permitted by law.
How We Use Data
- Provide and personalize courses
- Prevent fraud and abuse
- Comply with legal obligations
- Communicate about updates, service notices, and promotions (with opt-out)
- Improve our content and user experience via aggregated analytics
Legal Bases (GDPR)
We process data under one or more of the following bases: contract (to deliver courses), consent (for marketing and optional analytics), legitimate interests (security, product improvement), and legal obligations (recordkeeping, tax).
Sharing
We share data with service providers (hosting, analytics, payments, communications) bound by contracts and confidentiality. We do not sell personal data.
Your Rights
You may access, rectify, or delete your data, and object to certain processing. Contact us for requests.
EU/EEA (GDPR)
- Right of access, correction, deletion, and portability.
- Right to object or restrict processing; withdraw consent at any time.
- Right to lodge a complaint with your data protection authority.
California (CCPA/CPRA)
- Right to know, delete, correct, and opt out of sale/sharing.
- We do not sell personal information as defined by CCPA.
- No discrimination for exercising your rights.
Children
Our services are not directed to children under 13 (or as defined by local law). We do not knowingly collect data from children.
Security
We apply encryption in transit, strict access controls, and regular security reviews.
Incident Response
If a breach is detected, we investigate, notify affected users and regulators as required, and take corrective actions.
Data Retention
We keep data only as long as necessary for the purposes described or as required by law. You can request deletion at any time.
Contact
Email: [email protected] — Tel: +41 22 555 0199
Data Controller
Zevaron Courses, Rue des Étudiants 12, 1201 Genève, Switzerland.