This is template wording; please have it reviewed and adapted by a legal adviser before publishing.
Privacy and Data Protection Policy
Last updated: [date] · Effective from: [date]
01Introduction
[Legal company name] (“ABA Resources”, “we” or “the platform”) respects your privacy and is committed to protecting the personal data you share with us when you use the website, the learning platform and related services, including training programs, consultations and institutional services.
This policy explains what data we collect, how we use and protect it, and the rights available to you. By using the platform you confirm that you have read and understood this policy. If you do not agree with any of its terms, please stop using the platform.
This policy applies to all website visitors, trainees, consultation clients and institutional representatives, and should be read together with the Terms and Conditions.
02Data we collect
We collect different types of data depending on how you interact with the platform:
Data you provide directly
- Identity and contact data: full name, email address, phone or WhatsApp number, country.
- Account data: username, password (encrypted), language and currency preferences.
- Professional and academic data: qualifications, employer, job title, and documents required to enroll in certain programs or to issue certificates.
- Consultation data: information you share voluntarily when requesting a consultation, which may include general information about a child’s or client’s situation.
- Correspondence: the content of messages you send us through the contact form, email or WhatsApp.
Data we collect automatically
- Device and browser data, IP address, operating system and approximate location.
- Usage data, such as the pages you visit, the lessons you watch, your progress in programs and your test results.
- Data from cookies and similar technologies (see section 04).
Payment data
Payments are processed through approved third-party payment gateways. We do not store your full card details on our servers; we keep only limited information such as the transaction number, amount, currency and payment status.
We recommend not sharing detailed health information or information that identifies your child in public contact forms; the specialist will ask you only for the information needed, through a secure channel, when required.
03How we use your data
We use your data only for the following legitimate purposes:
- Creating and managing your account, and giving you access to the training programs and content you enrolled in.
- Processing enrollments, payments and installments, and issuing invoices.
- Tracking your academic progress, issuing certificates and documenting training hours where applicable.
- Providing consultations and scheduling appointments with specialists.
- Replying to your inquiries and technical support requests.
- Sending operational notifications about your account and programs (such as live session times and content updates).
- Sending the newsletter and promotional offers, only with your consent, with the option to unsubscribe at any time.
- Improving the platform and developing content by analyzing usage data in aggregate.
- Complying with legal and regulatory obligations, and preventing fraud and misuse.
We process your data on one of the following bases, as applicable: performing the contract with you, your consent, a legal obligation, or our legitimate interest in running and improving the platform in a way that does not conflict with your rights.
04Cookies
Cookies are small text files stored on your device when you visit the website. We use them for the following purposes:
- Essential cookies: to run the website, sign you in, and keep your session and shopping cart secure.
- Preference cookies: to remember your choices, such as language and currency.
- Analytics cookies: to understand how visitors use the website and improve performance.
- Marketing cookies: to measure the effectiveness of advertising campaigns; used only with your consent.
You can control or delete cookies in your browser settings. Please note that disabling essential cookies may affect how parts of the platform work.
05Sharing data with third parties
We do not sell or rent your personal data to anyone. We may share the minimum data necessary with the following parties to provide our services:
- Payment gateways: to process payments and installments securely.
- Streaming and video meeting platforms: such as platforms for live sessions and remote consultations.
- Hosting and cloud storage providers: to run the platform and store data.
- Email and messaging service providers: to send notifications and the newsletter.
- Analytics tools: to measure usage and improve the experience.
- Accreditation bodies: when needed to document training hours or verify certificates, after informing you.
- Official authorities: when required by law or under a lawful court order.
We require service providers to process data only on our instructions and with appropriate protection standards. Some data may be transferred to servers outside [country]; in that case we take the necessary safeguards to protect it.
06Data protection and security
We apply reasonable technical and administrative measures to protect your data from unauthorized access, loss or alteration, including:
- Encrypting the connection between your browser and the platform using HTTPS.
- Storing passwords in encrypted form, without access to them.
- Restricting data access to authorized staff only, on a need-to-know basis.
- Regular system reviews and backups.
No method of electronic transmission or storage is completely secure. You are responsible for keeping your password confidential; please tell us immediately if you suspect any unauthorized use of your account.
07Data retention
We keep your personal data for as long as needed to fulfil the purposes described in this policy, or as long as the law requires, including:
- Account data: while the account is active, and for [period] after it is closed.
- Training records and certificates: for [period], to allow certificate verification and accreditation requirements.
- Financial records and invoices: for the period required by the laws in force in [country].
- Correspondence and contact requests: for [period] from the date of the last contact.
When the retention period ends, we delete the data or anonymize it securely.
08Your rights
Under applicable law, you have the following rights regarding your personal data:
- Right of access: to request a copy of the data we hold about you.
- Right to rectification: to update any inaccurate or incomplete data.
- Right to erasure: to request deletion of your data, unless we are legally required to keep it.
- Right to object and restrict: to object to processing of your data for certain purposes, such as direct marketing.
- Withdrawing consent: to withdraw your consent at any time, without affecting the lawfulness of earlier processing.
- Data portability: to request your data in a structured, machine-readable format where applicable.
To exercise any of these rights, email us at the address in the next section. We may ask to verify your identity before acting on the request, and we usually reply within [number of days] days.
The platform is not directly aimed at children under [age]; accounts must be created by an adult or a parent or guardian.
09Contacting us about privacy
If you have any questions or comments about this policy or about how your data is processed, you can contact us at:
- Entity: [Legal company name]
- Address: [Address]
- Email: [Email address]
- Contact page: Contact Us
We may update this policy from time to time. We will publish any change on this page and update the “Last updated” date, and we will notify you of material changes by email or by a notice on the platform.