Privacy Policy
Effective date: January 1, 2026
Who we are
NestFound Drywall Institute provides professional training in drywall installation. You can contact us at [email protected] or +1 (415) 555-0198.
Personal data we collect
- Account details: name, email address, and password (hashed and salted).
- Order and billing details: course selections and transaction metadata processed via payment partners.
- Support communications: messages and attachments you send to us.
- Usage and device data: pages visited, approximate region, and settings like theme preference.
How we use personal data
- Provide and improve our services and course materials.
- Process orders and deliver receipts, confirmations, or service updates.
- Respond to support requests and technical issues.
- Maintain security, prevent fraud, and comply with legal obligations.
Legal bases for processing
We process data based on contract performance, legitimate interests in running a training service, and compliance with applicable laws. Where required, we ask for your consent (for example, to store cookies beyond what is strictly necessary).
Cookies and similar technologies
We use essential cookies to maintain sessions, store preferences (e.g., theme), and remember consent choices. You may decline non-essential cookies via our banner. See settings in your browser to clear cookies at any time.
Data retention
We retain account and order records for as long as needed to provide services and meet legal requirements. Support messages are kept for up to 24 months unless retention is needed for a dispute or audit.
Sharing and processors
We do not sell personal data. We share limited data with service providers who help us operate the site (hosting, analytics, payment processing). These providers are bound by contracts to protect your data and act only on our instructions.
International transfers
If data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses and regional data centers where feasible.
Security
We apply layered security: encryption in transit (TLS), hashed credentials, access controls, and routine audits. No method is perfectly secure, but we work to reduce risk and respond quickly to incidents.
Your rights
Depending on your location, you may request access, correction, deletion, or portability of your personal data, and object to or restrict certain processing. Contact [email protected] to exercise these rights.
Children
Our services are not directed to children under 16. If you believe a child provided personal data, contact us to remove it.
Changes to this policy
We may update this policy to reflect changes in law or our practices. We will post revisions with a new effective date.
Contact
For questions about this policy or our data practices, email [email protected].