Privacy Policy
Effective date: January 1, 2026
ForwardStep Floristry (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what data we collect, why we collect it, and how you can exercise your rights.
1. Information We Collect
- Account Data: name, email, and optional phone collected during sign-up or contact.
- Transaction Data: course selections, invoices, and payment confirmations (processed by PCI-compliant providers; we do not store full card numbers).
- Learning Activity: enrollments, progress metrics, assessments, and certifications.
- Device & Usage: IP address, browser type, and pages visited for security and analytics.
- Cookies: essential for authentication and preferences; analytics to improve our services.
2. How We Use Information
- Provide and improve courses, certifications, and support.
- Process enrollments and communicate about your account.
- Protect our services from fraud, abuse, and technical issues.
- Comply with legal obligations and enforce our Terms.
3. Legal Bases
We rely on performance of a contract (to provide courses), legitimate interests (to improve services and maintain security), consent (for certain cookies/marketing), and legal obligation (compliance and record-keeping).
4. Sharing
We share data with service providers under contract (e.g., payment processors, analytics, email). We do not sell personal information. We may disclose information to comply with law or protect rights and safety.
5. International Transfers
Where data crosses borders, we use appropriate safeguards such as standard contractual clauses and access controls.
6. Data Retention
We retain data for as long as necessary to provide services, fulfill legal obligations, resolve disputes, and enforce our agreements. Certification records may be kept for verification purposes.
7. Your Rights
- Access, correct, or delete your data.
- Object to or restrict processing under certain circumstances.
- Withdraw consent where processing is based on consent.
- Portability: request a copy of data in a machine-readable format.
8. Cookies
Essential cookies are required to operate the site. Analytics cookies help us understand usage. You may control cookies in your browser and through our on-site consent tools.
9. Security
We implement administrative, technical, and physical safeguards, including encryption in transit, access controls, and regular audits. No method is 100% secure; we continuously improve safeguards.
10. Children’s Privacy
Our services are not directed to children under 16. We do not knowingly collect data from children. If you believe a child provided us data, contact us to delete it.
11. Contact
Questions or requests: [email protected] • +1 (415) 555-0137
12. Changes
We may update this Policy to reflect changes in law or our services. We will post the updated version with a new effective date.