Privacy policy

This Privacy Policy explains how ClickCerts, Inc. ("ClickCerts," "we," or "us") collects, uses, shares, and protects personal information. Please read it alongside ourTerms of Service.

Who this policy applies to

ClickCerts is a business-to-business service. This policy applies to:

• Visitors to our marketing website at clickcerts.com.
• Account administrators who sign up for ClickCerts on behalf of a company.
• End Users — the employees, contractors, or staff to whom a Customer assigns training through ClickCerts.

When a Customer uses ClickCerts to train its End Users, the Customer is the controller of the End User information processed in the platform, and ClickCerts is a processor acting on the Customer's instructions. If you are an End User with a privacy request related to your training records, your first point of contact is generally your employer — but you may also reach us atsales@clickcerts.com and we will route your request appropriately.

Information we collect

Information you provide directly.

• Account information. When an administrator creates an account, we collect name, work email, company name, role, and billing contact details.
• Communications. When you contact us through our website or by email, we receive the contents of your message and the contact details you provide.
• Payment information. Payments for direct subscriptions are processed by our third-party payment processor. We do not store full card numbers; we receive limited information from the processor such as the card brand, last four digits, and billing ZIP code to identify the payment method on file.

Information provided by a Customer about its End Users.

• Name and work email for each End User.
• Training assignments, completion status, watch progress, quiz scores, and certificate records.
• For Customers using single sign-on (SSO), the limited profile information their identity provider passes to us.

Information collected automatically.

• Log and device data. IP address, browser type, operating system, device identifiers, referring URL, and pages or features accessed.
• Cookies and similar technologies. Session cookies that keep you signed in, and a small number of functional cookies. We do not use third-party advertising or cross-site tracking cookies on the platform.
• Video playback analytics. When an End User watches a training video, our video infrastructure provider records playback events such as start, pause, resume, and percentage watched, which we use to enforce the watch-completion requirement before quiz access.

How we use information

• To provide, maintain, secure, and improve the ClickCerts platform.
• To create and manage accounts, deliver training, and issue certificates.
• To verify completion records when a certificate URL is accessed.
• To communicate with administrators about their account, billing, security, and product updates.
• To send marketing communications to administrators about features and offers — you can opt out at any time using the unsubscribe link in those emails.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our agreements.

Where required by law, the legal bases on which we rely include performance of a contract, compliance with legal obligations, consent (where applicable), and our legitimate interests in operating and improving the Service in a way that does not override your rights.

How we share information

We do not sell personal information. We do not share personal information with third parties for their own independent marketing purposes.

We share information in these limited circumstances:

• Service providers (subprocessors). We use trusted service providers to operate the platform, in categories including cloud hosting and database infrastructure, web hosting and content delivery, transactional email delivery, payment processing, and video hosting and analytics. Each subprocessor is contractually bound to use personal information only to perform services for us and to maintain appropriate security safeguards. A current list of named subprocessors is available to Customers on request.
• Customers. If you are an End User, your training assignments, completion status, and certificate records are visible to administrators at the Customer that holds the subscription.
• Resellers. If your Customer's subscription is managed by a reseller or managed service provider, that reseller's administrators may have access to billing and high-level usage information for the Customers they manage.
• Legal and safety. We may disclose information when we believe in good faith that disclosure is necessary to comply with a legal obligation, respond to a valid legal request, enforce our Terms, or protect the rights, safety, or property of ClickCerts, our customers, or others.
• Business transfers. If ClickCerts is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify Customers of any such transfer that materially affects how their information is handled.

Data retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

• Active accounts. Account and training data is retained throughout the life of your subscription.
• After cancellation. Customer account data is retained for at least 90 days after the end of the paid term to allow export of training records and certificates. Customers may request earlier deletion at any time.
• Certificates. Certificates issued during an active subscription remain accessible through their printed expiry date, including for verification by third parties given the verification URL.
• Marketing site contacts. Information submitted through marketing forms is retained for as long as we have an ongoing relationship with you or, where there is no relationship, for a reasonable period to follow up — typically up to two years — after which it is deleted or anonymized.

Your rights and choices

Depending on where you are located, you may have rights regarding your personal information. These can include the right to access, correct, delete, or receive a copy of your information; to opt out of certain uses; and to lodge a complaint with a supervisory authority.

To exercise a right, emailsales@clickcerts.com. We will respond within the time required by applicable law. If you are an End User, we may need to direct your request to the Customer that holds your subscription, since they control the underlying training records.

Notice for California residents

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) provides you with additional rights, including the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information for purposes that would trigger the right to limit. To exercise any other California right, emailsales@clickcerts.com. You may also designate an authorized agent to act on your behalf.

Notice for residents of other U.S. states with privacy laws

Residents of states that have enacted comprehensive consumer privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Florida, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, New Jersey, Kentucky, Maryland, Minnesota, and Rhode Island, among others — may have rights similar to those listed above. To exercise a right, contact us atsales@clickcerts.com. We will honor verified requests to the extent required by the law of your state.

Notice for users in the EEA, UK, and Switzerland

If you are in the European Economic Area, United Kingdom, or Switzerland, you have rights under the EU General Data Protection Regulation, the UK GDPR, or the Swiss Federal Act on Data Protection. These include rights to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to lodge a complaint with your local data protection authority. To exercise these rights, emailsales@clickcerts.com.

Personal information processed by ClickCerts is stored in the United States. When personal information is transferred from the EEA, UK, or Switzerland to the United States, we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses, supplemented where appropriate by additional safeguards.

Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and routine review of our security practices. No system is perfectly secure; if you have reason to believe an account or the Service has been compromised, contact us promptly atsales@clickcerts.com.

Children's privacy

ClickCerts is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

Cookies

We use a small number of strictly necessary and functional cookies to operate the platform — for example, to keep you signed in and to remember your preferences. We do not use cookies for advertising or cross-site tracking. Your browser may allow you to refuse or delete cookies; doing so may affect Service functionality.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify the billing contact on your account and post the updated policy here with a new "Last updated" date. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

Contact

For privacy questions or to exercise a right, emailsales@clickcerts.com or write to ClickCerts, Inc., 145 Tremont Street, Suite 201-1641, Boston, MA 02111.