FRSecure Academy Privacy Notice

Version 1.0

FRSecure Academy respects the privacy of the people who use the Academy and is committed to handling personal information responsibly, securely, and transparently.

This Privacy Notice explains the types of personal information FRSecure Academy may collect through the Academy learning management system (“Academy”), why that information is used, how it may be shared and protected, how long it may be retained, and the choices and rights that may be available to users.

1. Information We Collect

FRSecure Academy may collect and maintain information necessary to provide, administer, secure, and improve Academy services.

Depending on how you use the Academy, this may include:

Account and profile information, such as your name, email address, username, organization, job-related information, profile preferences, and other information associated with your Academy account.

Enrollment information, including courses, programs, cohorts, groups, enrollment dates, enrollment status, and other information related to your participation in Academy training.

Learning and activity information, including course access, activities viewed or completed, progress, participation, submissions, assignments, attendance information, and other learning activity.

Assessment and achievement information, including quiz and examination results, grades, completion records, competency information, certificates, badges, credentials, and other evidence of learning or achievement.

Communications, including messages, discussion posts, support requests, instructor communications, feedback, and other information you provide through Academy communication features.

Technical and security information, including IP addresses, authentication events, browser and device information, timestamps, system logs, security events, and other information necessary to operate, troubleshoot, and protect the Academy.

Cookies and session information may also be used to authenticate users, maintain sessions, remember preferences, provide Academy functionality, and protect the security of the service.

2. How We Use Information

FRSecure Academy may use personal information to:

• create, maintain, and secure Academy accounts;
• authenticate users and manage access;
• enroll users in courses and training programs;
• deliver educational content and learning experiences;
• track course participation and progress;
• administer assessments and evaluate learning;
• maintain grades, completion records, competencies, and credentials;
• communicate with learners, instructors, administrators, and program personnel;
• provide technical and learner support;
• issue and verify certificates, badges, or other credentials;
• operate, maintain, troubleshoot, and improve the Academy;
• detect, investigate, and respond to security incidents or misuse;
• maintain appropriate administrative, educational, contractual, and historical records;
• comply with applicable legal, regulatory, contractual, or organizational obligations; and
• protect the rights, safety, security, and legitimate interests of FRSecure, Academy users, and others.

FRSecure Academy seeks to collect and use information that is reasonably necessary for legitimate educational, operational, administrative, security, contractual, or legal purposes.

3. Consent and Other Bases for Processing

Your acknowledgement of this Privacy Notice confirms that the notice has been presented to you. It does not necessarily mean that consent is the legal basis for every processing activity described in this notice.

Depending on the circumstances and applicable law, FRSecure Academy may process personal information because it is necessary to provide requested services, administer a contractual or educational relationship, comply with legal obligations, protect legitimate interests, maintain security, or for another lawful purpose.

Where consent is specifically required for a particular processing activity, FRSecure Academy may request that consent separately.

4. Learning Records and Historical Integrity

Some Academy information represents an educational or administrative record rather than temporary account information.

For example, enrollment history, assessment results, course completions, certificates, credentials, and related records may need to be preserved after a course ends or an Academy account is suspended or closed.

Removing a user's ability to access the Academy therefore does not necessarily require deletion of all information associated with that user.

FRSecure Academy seeks to balance legitimate recordkeeping requirements with applicable privacy rights and data-retention obligations.

5. Sharing and Service Providers

FRSecure Academy does not sell Academy users' personal information as part of operating the Academy.

Information may be made available to authorized FRSecure personnel, instructors, program administrators, support personnel, service providers, contractors, or other parties when access is reasonably necessary for an authorized purpose.

FRSecure Academy also relies on technology and service providers to operate the Academy. These may include infrastructure hosting, email delivery, data storage, backup, security, authentication, communications, and other technology providers.

Information provided to service providers should be limited to what is reasonably necessary for the service being provided and handled subject to appropriate contractual, security, privacy, or other safeguards where applicable.

Information may also be disclosed when reasonably necessary to comply with law, legal process, contractual obligations, or legitimate requests from authorized authorities, or to protect the rights, property, or safety of FRSecure, Academy users, or others.

6. Information Security

FRSecure Academy uses administrative, technical, and operational safeguards intended to protect Academy information against unauthorized access, disclosure, alteration, destruction, or misuse.

These safeguards may include access controls, authentication protections, encryption, system monitoring, logging, backups, vulnerability and security management, and restrictions on administrative privileges.

No information system can be guaranteed to be completely secure. Users also have a responsibility to protect their account credentials and promptly report suspected unauthorized access or other security concerns.

7. Retention and Deletion

FRSecure Academy retains information according to its purpose, operational requirements, legitimate educational and business needs, contractual requirements, security needs, and applicable legal or regulatory obligations.

Different categories of information may therefore have different retention periods.

When information is no longer reasonably required and no legal, contractual, operational, security, historical, or other legitimate reason requires its preservation, it may be deleted, anonymized, or otherwise disposed of in accordance with applicable procedures.

Deletion from an active production system does not necessarily result in immediate deletion from backups. Backup systems exist primarily for recovery and continuity purposes and are not intended to serve as permanent record-retention systems. Information contained in backups may remain until those backups expire or are securely replaced according to established backup-retention practices.

Legal holds, investigations, disputes, security incidents, or other legitimate requirements may require information to be preserved beyond its normal retention period.

8. International Processing

FRSecure Academy and the service providers supporting it may operate systems or process information in more than one geographic location.

As a result, personal information may be stored or processed outside the country, state, province, or other jurisdiction in which a user resides.

Where required, FRSecure Academy will seek to use appropriate safeguards for international transfers or processing of personal information.

9. Your Privacy Choices and Rights

Depending on where you live and the circumstances in which your information is processed, you may have rights regarding your personal information.

These may include rights to request access to information, correction of inaccurate information, deletion of certain information, restriction or objection to certain processing, withdrawal of consent where processing depends upon consent, or other rights provided by applicable law.

These rights are not necessarily absolute. For example, FRSecure Academy may be required or permitted to retain certain educational, transactional, security, contractual, legal, or historical records even after a deletion request.

FRSecure Academy may need to verify your identity before fulfilling a privacy request.

10. Information About Other People

Users should not provide personal information about another person through the Academy unless they are authorized to do so and the information is appropriate for the educational or administrative purpose involved.

Course assignments, discussion forums, messages, uploads, and other Academy features should not be used to disclose unnecessary sensitive or confidential information about other people.

11. Children's Information

FRSecure Academy is primarily intended for professional and adult education.

If an Academy program is offered to minors, additional consent, authorization, privacy, or safeguarding requirements may apply. FRSecure Academy may implement additional procedures appropriate to that program and applicable law.

12. Changes to This Privacy Notice

FRSecure Academy may update this Privacy Notice when Academy services, practices, legal requirements, or privacy practices change.

Material changes may result in a new policy version and may require users to review or acknowledge the updated notice through the Academy.

Historical versions may be retained where appropriate to document the privacy terms applicable at a particular time.

13. Contact Us

Questions, concerns, or requests regarding this Privacy Notice or the handling of personal information may be directed to:

FRSecure Academy
Email: training@frsecure.academy

When submitting a privacy request, please provide enough information for FRSecure Academy to understand the request and, where necessary, verify your identity. Do not include passwords or other unnecessary sensitive information in your request.