Privacy Policy

1. Introduction

Academy of Compliance ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and platforms. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our e-learning platform, website, and services.

2. Information We Collect

2.1 Personal Information You Provide

When you register for our platform or services, we collect:

• Full name and email address
• Company name and job title
• Phone number (optional)
• Password and authentication credentials
• Payment information (processed securely by third-party providers)
• Training progress and assessment scores

2.2 Automatically Collected Information

We automatically collect certain information about your device and usage:

• IP address and browser type
• Pages visited and time spent on platform
• Course completion and assessment data
• Login timestamps and activity logs
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

• Delivering and managing training courses and certifications
• Processing payments and maintaining billing records
• Sending course updates, reminders, and educational communications
• Monitoring platform security and preventing fraud
• Improving our services based on user feedback
• Complying with legal and regulatory requirements
• Generating compliance reports for organizational managers

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of sensitive data in transit and at rest
• Secure password storage using hashing algorithms
• Access controls and role-based permissions
• Regular security audits and penetration testing
• Compliance with SOC 2 and ISO 27001 standards

However, no security system is impenetrable. We cannot guarantee absolute security and are not responsible for unauthorized access beyond our reasonable control.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Organizational administrators: Completion status and assessment scores for training oversight
• Service providers: Third-party vendors for hosting, payment processing, and email delivery
• Legal requirements: Law enforcement or regulatory bodies when legally required

6. Retention of Data

We retain personal information for as long as necessary to provide services and meet legal obligations. Training records are typically retained for 7 years to meet compliance and audit requirements. You may request deletion of your account data, subject to legal retention requirements.

7. Your Rights

Depending on your location, you may have the following rights:

• Right to access: Obtain a copy of your personal data
• Right to rectification: Correct inaccurate information
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Opt-out of marketing communications

To exercise any of these rights, please contact us at privacy@aoc.edu.pl.

8. Cookies and Tracking

We use cookies to enhance your experience, maintain session information, and analyze platform usage. You can control cookie preferences through your browser settings. Disabling cookies may affect platform functionality.

9. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal information.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or through our platform.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Email: info@aoc.edu.pl
• Address: Academy of Compliance, Poland
• Response time: We aim to respond within 30 days