Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with GDPR and other applicable regulations.
Last Updated: December 28, 2024 | Effective Date: December 28, 2024
Introduction
SkillStream LMS ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our learning management services.
We are the data controller responsible for your personal data. If you have questions about this policy or our data practices, please contact our Data Protection Officer at privacy@skillstreamlms.com.
By using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.
1. Information We Collect
Personal Information
We collect information you provide directly, including: name, email address, phone number, company name, job title, and billing information when you register, make purchases, or contact us.
Usage Data
We automatically collect information about how you interact with our services, including: IP address, browser type, device information, pages visited, time spent on pages, and referring URLs.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience. See our Cookie Policy for detailed information about the cookies we use.
2. How We Use Your Information
Service Delivery
To provide, maintain, and improve our learning management services, process transactions, and send service-related communications.
Communication
To respond to inquiries, provide customer support, send promotional materials (with your consent), and notify you of updates or changes.
Analytics & Improvement
To analyze usage patterns, diagnose technical issues, and develop new features to better serve your needs.
3. Legal Basis for Processing (GDPR)
Contractual Necessity
Processing necessary for the performance of a contract with you, such as providing our services and processing payments.
Legitimate Interests
Processing based on our legitimate business interests, such as fraud prevention, security, and service improvement, balanced against your rights.
Consent
Where required, we process data based on your explicit consent, which you can withdraw at any time without affecting prior processing.
Legal Obligations
Processing necessary to comply with legal requirements, such as education regulations and data protection laws.
4. Data Sharing and Disclosure
Service Providers
We share data with trusted third-party providers who assist in operating our services, subject to strict confidentiality agreements and GDPR-compliant data processing agreements.
Legal Requirements
We may disclose information when required by law, court order, or to protect our rights, property, or safety, or that of our users.
Business Transfers
In the event of a merger, acquisition, or sale, your information may be transferred as part of the business assets.
5. International Data Transfers
Transfer Mechanisms
When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
Adequacy Decisions
We may transfer data to countries with adequacy decisions from the European Commission, ensuring equivalent data protection standards.
6. Your Rights Under GDPR
Right of Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data under certain circumstances ('right to be forgotten').
Right to Restrict Processing
You can request limitation of processing of your personal data in specific situations.
Right to Data Portability
You can request your data in a structured, machine-readable format for transfer to another service.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
7. Data Retention
Retention Periods
We retain personal data only as long as necessary for the purposes outlined in this policy, typically for the duration of our business relationship plus any legally required retention period.
Account Data
Account information is retained while your account is active and for up to 7 years after closure for legal and regulatory compliance.
Marketing Data
Marketing preferences and consent records are retained until you withdraw consent or for 3 years after last interaction.
8. Data Security
Security Measures
We implement industry-standard security measures including encryption (TLS/SSL), access controls, regular security audits, and employee training.
Breach Notification
In the event of a data breach affecting your rights, we will notify you and relevant authorities within 72 hours as required by GDPR.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. We encourage you to review this policy regularly.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:
Data Protection Officer: privacy@skillstreamlms.com
General Inquiries: hello@skillstreamlms.com
Address: 824 Gold Hill Dr, Erie, Colorado 80516, United States
You also have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your residence, place of work, or where an alleged infringement occurred.