General Data Protection Regulation (GDPR) Privacy Notice
Last updated: September 28, 2024
This notice explains how we collect, use, store, and protect personal data in accordance with applicable data protection legislation. We are committed to handling your personal information responsibly and transparently.
1. Data Controller
Domain operates as the data controller for personal data collected through this platform. As data controller, we determine the purposes and means of processing your personal data. You may contact us at any time regarding your data using the contact details provided on our website.
2. Legal Basis for Processing
We process your personal data only when a valid legal basis applies. The legal bases we rely on include:
| Legal Basis | Description |
|---|---|
| Consent | You have given clear, informed consent for a specific processing purpose. |
| Contractual Necessity | Processing is necessary to fulfil a contract you are party to or to take pre-contractual steps at your request. |
| Legal Obligation | Processing is necessary to comply with a legal obligation to which we are subject. |
| Legitimate Interests | Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. |
3. Personal Data We Collect
3.1 Data You Provide Directly
When you register, enrol in courses, or contact us, we may collect the following categories of personal data:
Identity data: first name, last name, username or similar identifier.
Contact data: email address, telephone number, postal address.
Account data: login credentials, account preferences, and profile information.
Payment data: billing address and transaction references. Full payment card details are processed by our payment service providers and are not stored by us.
Communications data: messages, feedback, and support requests you send to us.
3.2 Data Collected Automatically
When you access our platform, we may automatically collect technical data including your IP address, browser type and version, device identifiers, operating system, pages visited, time spent on pages, and referring URLs. This data is used to maintain platform security, monitor performance, and improve user experience.
3.3 Data from Third Parties
If you choose to register or log in using a third-party authentication provider, we receive basic profile information as permitted by your privacy settings on that service.
4. How We Use Your Personal Data
We use personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contractual necessity |
| Delivering purchased courses and educational content | Contractual necessity |
| Processing payments and issuing receipts | Contractual necessity; legal obligation |
| Sending transactional and service-related communications | Contractual necessity |
| Sending promotional communications and newsletters | Consent |
| Improving platform functionality and user experience | Legitimate interests |
| Ensuring platform security and preventing fraud | Legitimate interests; legal obligation |
| Complying with legal and regulatory requirements | Legal obligation |
| Responding to support requests and enquiries | Contractual necessity; legitimate interests |
5. Cookies and Tracking Technologies
Our platform uses cookies and similar tracking technologies to operate core functionality, remember your preferences, and analyse usage patterns. You may control cookie settings through your browser or through our cookie consent tool. Disabling certain cookies may affect the availability or functionality of parts of the platform.
We do not use tracking technologies to build advertising profiles or sell your data to third-party advertisers.
6. Data Sharing and Disclosure
6.1 Service Providers
We share personal data with carefully selected third-party service providers who process data on our behalf. These include hosting and infrastructure providers, payment processors, email delivery services, and analytics platforms. All processors are bound by data processing agreements and are required to implement appropriate security measures.
6.2 Legal Disclosure
We may disclose personal data where required to do so by law, court order, or regulatory authority, or where such disclosure is necessary to protect our legal rights or the safety of others.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business assets, personal data may be transferred as part of that transaction. Affected individuals will be notified in advance where required by law.
6.4 No Sale of Personal Data
We do not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes.
7. International Data Transfers
As a globally operating platform, your personal data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by relevant data protection authorities, to ensure your data receives an equivalent level of protection.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Retention periods are determined based on the nature of the data, the purpose of processing, and applicable legal obligations.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Account data is generally retained for the duration of your account and for a defined period thereafter to handle any post-termination queries or legal matters.
9. Your Rights
Depending on your location and applicable law, you may have the following rights in relation to your personal data:
| Right | Description |
|---|---|
| Right of Access | You may request a copy of the personal data we hold about you. |
| Right to Rectification | You may request correction of inaccurate or incomplete personal data. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations. |
| Right to Restriction | You may request that we restrict processing of your data under certain circumstances. |
| Right to Data Portability | You may request receipt of your personal data in a structured, commonly used, machine-readable format. |
| Right to Object | You may object to processing based on legitimate interests or for direct marketing purposes. |
| Right to Withdraw Consent | Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. |
| Right to Lodge a Complaint | You have the right to lodge a complaint with a competent data protection supervisory authority. |
To exercise any of these rights, please contact us using the details provided on our contact page. We will respond to verified requests within the timeframes required by applicable law, generally within 30 days.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and staff training on data protection obligations.
While we take all reasonable precautions, no method of electronic transmission or storage is entirely secure. We cannot guarantee absolute security but commit to promptly addressing any identified vulnerabilities and notifying affected individuals and authorities in the event of a qualifying data breach.
11. Children's Privacy
Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from individuals under this age. If we become aware that personal data has been collected from a child without appropriate consent, we will take steps to delete that data promptly. If you believe a child has provided us with personal data, please contact us immediately.
12. Automated Decision-Making and Profiling
We do not make decisions about you that produce legal or similarly significant effects solely based on automated processing, including profiling. Where any form of automated analysis is used to personalise your experience on the platform, meaningful human oversight remains part of our process.
13. Changes to This Notice
We may update this privacy notice periodically to reflect changes in our practices, technology, legal requirements, or other factors. The date at the top of this notice indicates when it was last revised. Where changes are material, we will notify you through the platform or by email prior to the changes taking effect. We encourage you to review this notice regularly.
14. Contact Us
If you have questions, concerns, or requests regarding this notice or the handling of your personal data, please contact us:
Domain
112 Rue Laurier, Cowansville, QC J2K 1H3, Canada
Email: [email protected]
Phone: +1 506 576 5001
We are committed to resolving any concerns you may have regarding the processing of your personal data in a timely and transparent manner.