Privacy Policy
Last updated: July 14, 2026
Information We Collect
When you create an account or purchase a course, we collect your name, email address, and billing details. As you train, we collect usage data such as course progress, quiz scores, and certificate completions. If your account was set up by your employer, we also receive your name and email from them. For security, we log sign-in activity, including the date and time, IP address, and device type of each login.
How We Use Your Information
We use your information to deliver safety training courses, issue certificates of completion, process payments, provide customer support, and send service communications about your account, purchases, and licence renewals. We use sign-in and usage records to keep accounts secure, detect account sharing, and enforce seat licences. We may also use aggregated, anonymized data to improve our platform.
Cookies
We use a small number of cookies. Essential cookies keep you signed in and are required for the platform to work. Analytics cookies help us understand how the platform is used, as described below. We do not use advertising or cross-site tracking cookies.
Analytics & Session Replay
We use PostHog, a product analytics service, to understand how visitors use our platform. This includes page views, clicks, and session replay, which records how a visitor moves through pages (mouse movement, scrolling, and navigation). Text you type into forms, including passwords, is masked before any recording leaves your browser. We use this information solely to find problems and improve the platform. PostHog processes this data on our behalf and does not use it for its own purposes. To opt out of analytics, contact us through our contact page.
Payment Information
Payments are processed by third-party payment providers (such as Shopify and Stripe). Your card number is entered directly with the payment provider and is never transmitted to or stored on our servers. We share your name, email, and order details with the provider to complete the transaction, prevent fraud, and handle refunds. Once your payment details reach a payment provider, that provider's own privacy policy also applies.
Service Providers
We share personal information only with service providers that help us run the platform: cloud hosting, payment processing, email delivery, and analytics. Each provider processes data only on our instructions and only for the purposes described in this policy. We do not sell your personal information, and we do not share it with anyone for their own marketing.
Employer & Organization Access
If your employer or organization purchased training on your behalf, their administrators can see your course progress, completion status, and certificates as part of their compliance record-keeping obligations. We may also confirm the authenticity of a certificate to an employer, and we may disclose training records where a regulator or law requires it.
Data Retention
We keep your account information for as long as your account is active. Training records and certificates are retained longer, because employers and regulators may need them as proof of training for several years after completion. Security logs are kept for a limited period and then removed. When data is no longer needed, we delete it or anonymize it.
Account Deletion
You may request deletion of your account and personal data at any time through our contact page. We will honour the request except where we are required to keep specific records, for example training completions and certificates that your employer must retain for workplace-safety compliance, or transaction records we must keep for tax and accounting law.
Data Security
We implement industry-standard security measures to protect your personal information, including encrypted data transmission (TLS), secure password hashing, and restricted access controls. If a data breach ever creates a real risk of harm to you, we will notify you and the appropriate authorities as required by applicable law.
Where Your Data Is Stored
Our platform and service providers may store and process data in the United States, Canada, or other jurisdictions where they operate. Wherever your data is processed, it is protected by the safeguards described in this policy, though it may also be subject to the laws of the jurisdiction where it is stored.
Children's Privacy
Our platform is workplace training for adults and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
Communications
We send service emails that are part of operating your account, such as purchase receipts, account claim links, licence renewal reminders, and seat notifications for organization administrators. We send marketing email only with your consent, and every marketing message includes a working unsubscribe link.
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within 30 days. If we decline a request, we will explain why, and you may ask us to review the decision. Depending on where you live, you may also have additional rights under local privacy law, such as PIPEDA in Canada or state privacy laws in the United States.
Changes to This Policy
We may update this policy as the platform evolves or the law changes. When we do, we will update the date at the top of this page, and for material changes we will provide notice on the platform.
Contact Us
If you have questions about this privacy policy or want to exercise any of your rights, please reach us through our contact page.