Privacy policy

When you make an account: your name, email address, and the segment you picked so we know roughly who we are talking to. Optionally a phone number and company if you add them.

As you learn: which modules you have watched, how far into each one you got, your quiz attempts and scores, any notes you write, and the certificates you earn. This is what makes “pick up where you left off” work.

When you buy something: a record of what you bought and what it cost. Card details go straight to Stripe — we never receive or store them.

When you contact us: whatever you put in the form.

We do not collect your card number, your government ID, or your location. We do not buy data about you from anyone else, and we do not build advertising profiles.

To run your account and remember your progress, to process payments, to answer you when you contact us, and to work out which courses to build next. That is the whole list.

Only the companies we need to run the service:

Supabase stores the database and handles logins. Stripe processes payments. Vercel hosts the site.

We do not sell your data. We do not share it with advertisers. If we are ever legally required to hand something over, we will tell you unless we are prohibited from doing so.

If your employer or program bought your seat, they can see that you were enrolled and whether you completed courses. They cannot see your notes.

We use cookies to keep you signed in. That is it — no advertising cookies and no third-party trackers. There is nothing to opt out of, which is why you are not being interrupted by a consent banner.

Your account data stays until you ask us to delete it. Order records are kept for seven years because tax rules require it. If you delete your account, we remove your personal data and keep only the anonymised order record.

You can see and correct most of your information directly on your account page. You can request a copy of everything we hold, ask us to correct it, or ask us to delete it — there is a deletion request button on the account page, or email us.

Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA. We apply the same handling to everyone regardless of where they are.

Data is encrypted in transit and at rest. Access to the production database is restricted, and the parts of your record that control access — enrolments, orders, subscriptions, quiz results and certificates — can only be written by our server, never by a browser.

No system is perfect. If there is ever a breach affecting your data, we will tell you.

Bydand CMI is not aimed at children under 16. Younger students should use an account set up by a parent, guardian or school.

Email info@bydandcmi.com and we will respond within 30 days.