Privacy Policy

What Information Enters Our Systems

Information enters our platform through three distinct channels. First, when someone creates an account or enrolls in a program, they provide identification details — name, email address, phone number, and mailing address. We need these basics to deliver educational materials and maintain communication throughout the learning period.

Second, as students work through course modules, our platform automatically generates records of their progress. Which lessons they've completed, how long they spent on particular topics, quiz results, assignment submissions — these behavioral patterns help us understand where students might need additional support. The system captures this without students needing to think about it.

Third, payment transactions create their own trail of information. When someone purchases a program, we collect billing addresses and transaction identifiers. Our payment processor handles the sensitive financial details, but we retain enough information to track what programs someone has purchased and whether their payments processed successfully.

Why We Maintain These Records

Every piece of information we gather serves operational necessity. Account details enable us to deliver course materials to the right person at the right location. Without accurate contact information, we couldn't send program updates, respond to support requests, or provide completion certificates.

Learning activity records serve two purposes. Primarily, they let us show students their own progress — what they've finished, what remains, where they might want to review. But these patterns also reveal where our curriculum works well and where it doesn't. When we notice many students struggling with a particular module, that signals we need to revise our teaching approach for that topic.

Transaction information fulfills basic business requirements. We need to know who paid for what program, when their access should begin and end, and whether any refund requests connect to valid purchases. Canadian tax regulations also require us to maintain purchase records for specific retention periods.

How Long We Keep Different Categories

Retention periods vary based on information type and legal requirements. Active student records remain immediately accessible throughout enrollment and for twelve months following program completion. This extended period accommodates students who take breaks, need to reference materials after finishing, or want to re-access content while applying their knowledge.

After that twelve-month window, we remove personal identifiers but retain anonymized learning patterns. These de-identified records help us improve curriculum without maintaining unnecessary links to specific individuals. Financial records follow different rules — Canadian regulations require seven-year retention for tax purposes regardless of whether someone remains an active student.

Who Gets Access Beyond Our Team

We don't sell student information to marketing companies or data brokers. That said, running an online educational platform requires working with specialized service providers who need limited access to function effectively.

Essential Service Relationships

Our learning platform runs on cloud infrastructure provided by a major hosting company. Their servers store course materials and student accounts, which means they technically have access to that information — but their contracts prohibit them from using it for any purpose except maintaining the servers we rent from them.

Email communications flow through a dedicated service that handles message delivery, spam filtering, and bounce management. When we send course updates or respond to student questions, that provider processes the messages. They see email addresses and message content, but again, contractual terms prevent them from using that information independently.

Payment processing involves a third-party financial service that handles credit card transactions. They receive billing information and payment details directly from students during checkout. We never see complete credit card numbers — our systems only receive confirmation codes and billing addresses after the payment processor approves transactions.

Limited Disclosure Circumstances

Occasionally we might need to share information beyond these service relationships. If a student requests an official transcript or completion certificate for employment purposes, we'll verify their learning records with whoever they designate. If law enforcement presents valid legal demands for specific records, we comply with those requirements while notifying affected individuals unless legally prohibited from doing so.

Should Offhanuhjz ever merge with another educational organization or undergo significant structural change, student records would transfer to the successor entity. We'd provide advance notice of such transitions so students could make informed decisions about continuing their enrollment.

Security Measures We've Implemented

Our platform implements several layers of technical protection. All data transmission between student devices and our servers occurs through encrypted connections — the same technology banks use for online transactions. Account passwords undergo one-way encryption before storage, meaning even our administrators can't view them. Students who forget passwords must reset them rather than having them retrieved.

Access to student records within our organization follows need-to-know principles. Instructors see learning activity for students in their specific programs. Administrative staff handling enrollment questions can view account details. Financial personnel access transaction records. But no single employee has unrestricted access to all information about all students.

Rights Students Can Exercise

Canadian privacy legislation grants individuals specific rights regarding their personal information. Students can request copies of what we maintain about them — we'll provide comprehensive records within 30 days of receiving such requests. If someone spots inaccuracies in their account information, they can log in and correct most details directly, or contact us for help with fields they can't edit themselves.

Students who want their information removed entirely can request account deletion. We'll erase personal identifiers while preserving anonymized learning data for curriculum improvement purposes. Financial records necessary for tax compliance must remain for their legally mandated retention period even after someone requests deletion of other information.

Anyone who objects to how we handle their information can file complaints with the Office of the Privacy Commissioner of Canada. We prefer resolving concerns directly first, but students have the right to involve regulatory oversight at any point.

Changes to These Practices

As our platform evolves and privacy regulations change, we'll update these practices periodically. Material changes that affect how we handle existing student information will prompt direct notification via email. The date at the top of this document reflects when we last revised these terms — checking back occasionally helps students stay informed about current practices.

For questions about specific situations not covered here, or concerns about how we've handled particular information, reaching out directly often provides clearer answers than trying to interpret policy language.