This Privacy Policy describes how Get Certified as Project Manager (“Get Certified as Project Manager”, “we”, “us”) collects, uses and protects your personal data when you use the platform available at https://certificatecomoprojectmanager.com/ (the “Platform”). By using the Platform you agree to the practices described here.
1. Data controller
Get Certified as Project Manager, [postal address]. Privacy contact: jose.aristud@icloud.com.
2. Data we collect
- Account data: name, email address, password (stored as a hash), preferred language and two-step verification method.
- Learning data: practice and simulation attempts, answers, flags, timing, scores and per-domain statistics.
- Organization data: the organization and team you belong to, your role (administrator, team lead or member) and invitations sent or received.
- Payment data: plan purchased, amount, currency, date and transaction reference. Card or PayPal account details are handled directly by Stripe or PayPal; we never receive or store them.
- Technical and security data: sign-in records (with the IP address stored in pseudonymized, hashed form), failed attempts, verification events and trusted devices, together with standard browser technical data.
3. Purposes and legal bases
- To provide the service you signed up for and manage your account (performance of a contract).
- To process payments and issue receipts (performance of a contract and legal obligations).
- To show your progress and, for organization accounts, reports to authorized administrators and team leads (performance of a contract and the organization's legitimate interest).
- To protect the Platform against fraud and unauthorized access (legitimate interest and legal obligations).
- To send transactional communications: welcome, verification codes, password reset, invitations and receipts (performance of a contract).
- To improve the content and the Platform through aggregated, anonymized analysis (legitimate interest).
We do not send marketing communications without your consent and we do not sell your personal data.
4. Visibility within organizations
If your account belongs to an organization, that organization's administrators can see your name, email address, role, team, number of attempts, average and best scores and performance by domain. Team leads see the same information limited to the members of their teams. The question-by-question detail of your attempts is visible only to you.
5. Cookies and similar technologies
We use strictly necessary cookies to operate the Platform: user session, form protection, language preference (vpm_lang) and, if you choose it, the trusted-device cookie for two-step verification. We do not use advertising cookies. Payment providers may set their own cookies on their checkout pages.
6. Recipients and processors
We share data only with providers that deliver services to us under contract and on our instructions: our hosting provider, our email delivery service, Stripe and PayPal for payment processing and, where enabled, external captcha providers. We may also disclose data where required by law.
7. International transfers
Some providers may process data outside your country of residence. In such cases we rely on appropriate safeguards, such as standard contractual clauses or other mechanisms recognized by applicable law.
8. Retention
We keep your account data while your account is active and, after deletion, for the period required to comply with legal obligations, resolve disputes and enforce our agreements. Security logs are retained for 90 days. Billing records are retained for the period required by applicable tax law.
9. Your rights
You may access, correct, update or delete your data, object to or restrict certain processing, request portability and withdraw consent where consent is the legal basis. You can exercise these rights from your profile in My Portal or by writing to jose.aristud@icloud.com. You also have the right to lodge a complaint with the competent data protection authority.
10. Security
We apply appropriate technical and organizational measures: encryption in transit (HTTPS), hashed passwords, two-step verification, encryption of keys and secrets at rest, rate limiting, security headers and event logging. No system is completely secure; we recommend using a unique password and keeping two-step verification enabled.
11. Children
The Platform is not directed at persons under 18 and we do not knowingly collect data from minors. If you become aware that a minor has provided us with data, please contact us so we can delete it.
12. Changes to this Policy
We may update this Policy. The current version will be posted on this page with the date of the last update. Where changes are material, we will notify you by email or through a notice on the Platform.
13. Contact
Get Certified as Project Manager
[postal address]
jose.aristud@icloud.com