Privacy Policy

1. Scope

This Privacy Policy explains how GoldenCrest Insight Lab (“GoldenCrest”, “we”, “us”) collects, uses, and protects personal information when you visit our website, purchase courses, or interact with our services.

2. Data We Collect

• Account data: name, email, password (hashed), organization, role.
• Transaction data: purchased courses, invoices, payment status (we do not store full card numbers).
• Usage data: pages visited, device information, approximate location, referring URLs.
• Learning data: progress, assessments, certificates, support conversations.
• Cookies and similar technologies: preferences, session state, authentication tokens.

3. How We Use Data

• Provide and personalize the learning experience.
• Process payments and deliver transaction confirmations.
• Improve content through aggregated analytics.
• Ensure security and prevent fraud.
• Communicate about updates, new courses, and policy changes.

4. Sharing

We do not sell personal data. We share limited information with service providers who help us operate the platform (payment processing, hosting, analytics) under strict confidentiality and security contracts.

5. Retention

We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Learning certificates may be retained indefinitely for verification purposes.

6. Security

We employ administrative, technical, and physical safeguards to protect personal information. Although no transmission or storage method is entirely secure, we continuously strengthen our controls and monitoring.

7. Your Rights

Depending on your jurisdiction, you may exercise rights to access, correct, delete, or port your data, and to object to or restrict processing. Submit requests to [email protected].

8. Cookies

We use strictly necessary cookies for authentication and site functionality, along with preference cookies for theme selection and language preferences. Manage cookie settings through your browser. Our cookie banner records consent choices.

9. International Transfers

Data may be processed in the United States and other jurisdictions. We rely on standard contractual clauses and other lawful transfer mechanisms for international data movement.

10. Children

Our services are not directed to children under 16. If we discover that a child has provided personal data without verified parental consent, we will delete it promptly.

11. Changes

We may revise this Policy to reflect legal, operational, or technical updates. Material changes will be announced on this page with the updated “Last Updated” date.