Privacy Policy — Legal Risk Alert

Legal Risk Alert ("we", "our", "us") respects your privacy. This Policy explains what personal data we collect, how we use it, and the rights you have under laws such as Canada's PIPEDA and the EU/UK GDPR.

1. Data we collect

Account data: name, email, organization (optional), password hash.
Learning data: course progress, quiz scores, certificates earned.
Technical data: IP address, device, browser, pages visited.
Communications: messages you send us through forms or email.

2. How we use your data

To provide and improve the Services and your learning experience.
To issue certificates and track progress.
To send essential service emails (account, security, course updates).
With your consent, to send marketing emails — you can unsubscribe anytime.
To comply with legal obligations and protect against fraud or abuse.

3. Legal bases (GDPR/UK GDPR)

Performance of a contract (delivering the Services you signed up for).
Legitimate interests (security, product improvement).
Consent (marketing emails, optional cookies).
Legal obligation (tax, accounting, lawful requests).

4. Sharing

We share data only with:

Trusted service providers (hosting, authentication, analytics, email delivery) under contract.
Authorities, when required by law.
A successor entity in the event of a merger or acquisition.

We do not sell your personal data.

5. International transfers

Data may be processed in Canada, the United States, or the EU. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

6. Retention

We keep account data while your account is active and for a reasonable period afterward to comply with legal, accounting, and reporting obligations. You can request deletion at any time (see Your rights).

7. Security

We use encryption in transit, hashed passwords, role-based access, and audited infrastructure. No system is perfectly secure; please use a strong, unique password.

8. Your rights

Depending on where you live, you may have the right to:

Access, correct, or delete your data.
Restrict or object to processing.
Receive a copy of your data (portability).
Withdraw consent at any time.
Lodge a complaint with your data protection authority.

To exercise any right, contact us. We will respond within applicable legal timeframes.

9. Cookies

We use essential cookies to keep you signed in and a limited set of analytics cookies to understand usage. You can control cookies through your browser settings.

10. Children

The Services are not directed to children under 16 and we do not knowingly collect their data.

11. Changes

We may update this Policy. Material changes will be communicated by email or through the Services.

12. Contact

Privacy questions? Contact us.