This Privacy Policy explains how RateBeard processes personal data when users visit or use the website and its IT security and digital literacy course services.
We use personal data to provide and manage accounts, deliver course content, process inquiries, maintain site security, monitor performance, improve functionality, prevent misuse, and meet legal obligations. We may also use limited data to understand how the site is used so that we can maintain and improve the learning experience.
We may share personal data with hosting, analytics, security, communication, and administrative service providers that help operate the website and deliver course content. These providers are expected to use the data only for the services they perform for us and to apply appropriate confidentiality and security measures. If a business transfer occurs, data may be disclosed as part of that transaction subject to applicable law.
We may disclose personal data where required to comply with law, respond to lawful requests, protect our rights or the rights of others, investigate security or fraud issues, or support a legal claim. We may also share data when a user directs us to do so or when disclosure is necessary to complete a requested service.
We may collect identifiers such as name or account details, contact information, course enrollment and progress data, messages sent through forms, technical data such as device and browser information, and usage data about pages viewed and actions taken. We do not seek to collect sensitive data unless a user chooses to provide it in a message or form.
We receive data when users create an account, enroll in or access courses, submit forms, communicate with us, or otherwise use the website. We also generate certain technical and usage data through logs, cookies, and similar technologies, and may receive limited information from payment, hosting, analytics, or security providers where they support the operation of the site.
We may use session cookies, which expire when the browser is closed, and persistent cookies, which remain for a limited period. Cookies may support essential site functions, remember user preferences, measure basic site performance, and help us understand how course pages are used. Similar technologies may be used for the same purposes.
We use standard controls to manage non-essential cookies where required. Users may block or delete cookies through their browser settings, and some browser features may allow preferences to be changed for specific cookie categories. If cookies are disabled, parts of the site may not function as intended.
Where the GDPR applies, we process personal data only on a valid legal basis, such as consent, performance of a contract, compliance with a legal obligation, or our legitimate interests where those interests are not overridden by user rights and freedoms. We also apply data minimization and purpose limitation principles in our handling of personal data.
Because RateBeard is intended for users in France and other EEA locations, GDPR rules apply where the processing of personal data falls within their scope.
Where the GDPR applies, users may have the right to access, correct, delete, restrict, or object to certain processing of their personal data, and the right to data portability in appropriate cases. Users may also withdraw consent where processing is based on consent, without affecting prior lawful processing. A complaint may be raised with the competent supervisory authority if required by law.
Subject to applicable law, users may have rights to access their personal data, request correction or deletion, object to certain processing, and ask for restriction of processing. Where processing is based on consent, users may withdraw that consent at any time for future processing. We may need to verify identity before acting on a request.
To exercise a privacy right, users should submit a clear request through the contact details in this policy and describe the data or processing concern involved. We will review the request, respond within the time required by law where applicable, and explain any refusal or limitation if a request cannot be fully granted.
We keep personal data only for as long as needed for the purpose for which it was collected, including account administration, course access, support, security monitoring, and legal compliance. When data is no longer required, we delete it, anonymize it, or retain it only for the period required by law or for legitimate recordkeeping needs.
When we make material changes, we will update the policy text and may provide additional notice through the site or other appropriate means. The revised version will apply from its stated effective date unless a different notice period is required by law.
