Legal

Privacy Policy

Last updated: July 2026

This Privacy Policy explains how OnCourse Design collects, uses, stores, and protects personal data in connection with its websites, digital learning platforms, AI-powered tools, LMS/CRM integrations, training programs, and related services.

1. Information Collected

OnCourse Design may collect the following categories of information:

  • Contact information, such as name, email address, phone number, job title, organization, and preferred language.
  • Learning and platform data, such as enrollments, progress, attendance, completion status, certificates, assessment results, and user interactions.
  • Technical information, such as IP address, browser type, device information, log data, cookies, and usage analytics.
  • Information submitted through forms, support requests, scheduling tools, or AI-assisted features.

2. How Information Is Used

Personal data may be used to:

  • Provide and manage access to websites, portals, training programs, and client environments.
  • Deliver courses, coaching, onboarding experiences, and support services.
  • Personalize learning experiences and language preferences.
  • Generate reports related to participation, progress, completion, and organizational learning outcomes.
  • Improve platform performance, user experience, content quality, and service operations.
  • Maintain security, detect abuse, troubleshoot issues, and comply with legal obligations.

3. AI and Automated Features

Some Services may use AI-powered systems to support tutoring, search, content generation, recommendations, automation, or workflow assistance.

Information submitted to these features may be processed to generate responses or improve task performance within the scope of the service. Users should avoid entering highly sensitive personal information into AI interfaces unless specifically authorized and contractually supported.

AI outputs should be reviewed by qualified personnel before being used for compliance, instructional, legal, or operational decisions.

4. Legal Bases and Institutional Role

Depending on the context, OnCourse Design may act as a service provider, processor, or contractor on behalf of a client organization. In many cases, the client organization determines the purpose and legal basis for the processing of learner or workforce data.

Where required by applicable law, personal data is processed on a lawful basis such as consent, contractual necessity, legitimate interests, or compliance with legal obligations.

5. Data Sharing

Personal data may be shared with:

  • The client organization sponsoring the training, platform, or program.
  • Service providers that support hosting, analytics, communications, identity management, AI functionality, customer support, and infrastructure operations.
  • Advisors, auditors, or authorities when required by law, contract, or legitimate legal process.

6. Data Retention

Personal data is retained for as long as necessary to provide the Services, support the client relationship, maintain records, resolve disputes, enforce agreements, and comply with legal, contractual, or regulatory requirements.

Retention periods may vary based on the type of program, client instructions, and applicable industry obligations.

7. Security Measures

OnCourse Design uses reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure.

No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

8. International Transfers

Where personal data is transferred across jurisdictions, appropriate safeguards may be used as required by applicable law, including contractual protections or equivalent mechanisms.

9. Cookies and Similar Technologies

Websites and platforms may use cookies, pixels, local storage, and similar technologies to remember preferences, maintain sessions, improve functionality, and analyze usage. Users can manage cookie preferences through browser settings or consent tools where legally required.

10. Individual Rights

Depending on the applicable law and the relationship with the client organization, individuals may have rights to access, correct, delete, restrict, object to, or request portability of their personal data.

In many cases, requests relating to learner or employee data should be directed first to the relevant client organization, which controls the data for its own users.

11. Children's Data

The Services are generally intended for professional, workforce, or adult learning contexts unless otherwise specified in writing. If a program involves minors or student populations subject to special protections, the client organization is responsible for ensuring appropriate notices, permissions, and legal authority.

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements, operational practices, technologies, or service offerings. The revised version becomes effective when posted, unless otherwise stated.

13. Contact

Questions about this Privacy Policy or data practices may be directed through the contact information published on the website or in the applicable agreement.