Privacy Policy

1. Introduction

Getdera is committed to protecting your privacy. We operate a B2B learning management platform and professional development services. This policy applies to all users, learners, enterprise clients, and visitors to getdera.com.

By accessing or using our Services, you agree to this Privacy Policy. If you are using our Services on behalf of an organization, you agree on behalf of that organization.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, work email, job title, company name, phone number, and password when you register.
• Profile data: Professional background, certifications, and learning preferences you add to your profile.
• Payment information: Billing address and payment method details (processed securely via our payment providers; we do not store full card numbers).
• Communications: Messages you send us via contact forms, support tickets, or email.
• Survey responses: Optional feedback, ratings, and NPS responses you submit voluntarily.

2.2 Information Collected Automatically

• Usage data: Pages visited, courses accessed, features used, time spent, and completion rates.
• Device information: Browser type, operating system, device type, screen resolution, and IP address.
• Log data: Server logs including timestamps, referring URLs, and error reports.
• Cookies and similar technologies: As described in Section 5 below.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform and services.
• Process your registration, subscriptions, and course enrollments.
• Issue and verify certificates of completion.
• Send transactional emails (confirmations, receipts, password resets).
• Personalize your learning experience and course recommendations.
• Send marketing communications (with your consent, or where permitted by law).
• Analyze usage trends to improve our products and services.
• Detect, prevent, and address fraud, security, and technical issues.
• Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

• Service providers: Trusted third-party vendors who process data on our behalf (e.g., payment processors, cloud hosting, email delivery, analytics).
• Enterprise clients: If your account is provisioned through an employer or organization, we share relevant learning progress and completion data with that organization's administrators.
• Legal requirements: When required by law, regulation, or legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality obligations.
• With your consent: In any other case with your explicit permission.

5. Cookies & Tracking

We use cookies and similar technologies to improve your experience and analyze platform usage. Our cookies fall into the following categories:

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• TLS/HTTPS encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Regular security audits and penetration testing.
• Role-based access controls and least-privilege principles.
• SOC 2 Type II compliance in progress.

No method of transmission or storage is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

To exercise your rights, contact us at [email protected]. We will respond within 30 days.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. We typically retain account data for 3 years after account closure, with certain records retained longer where required by law. Learning completion records and certificates may be retained indefinitely at the user's request to support credential verification.

9. Children's Privacy

Our Services are designed for business professionals and are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform at least 30 days before the changes take effect. Your continued use of our Services after the effective date constitutes acceptance of the revised policy.

11. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection Officer: