Privacy Policy
Last updated: March 20, 2024
This Privacy Policy describes how Layertrack ("we," "us," or "our") collects, uses, stores, and shares information about you when you access or use our website, platform, and related services (collectively, the "Services"). By using our Services, you agree to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide Directly
We collect information you submit when you create an account, enrol in a course, contact our support team, or otherwise interact with our Services. This may include:
| Category | Examples |
|---|---|
| Identity data | Full name, username, profile photo |
| Contact data | Email address, phone number, mailing address |
| Account credentials | Password (stored in hashed form), security questions |
| Payment data | Billing address, transaction identifiers (card numbers are handled by our payment processor and are not stored by us) |
| Communications | Messages sent to support, survey responses, feedback submissions |
1.2 Information Collected Automatically
When you use our Services, certain technical information is collected automatically through cookies, web beacons, and similar technologies:
| Category | Examples |
|---|---|
| Device data | IP address, browser type and version, operating system, device identifiers |
| Usage data | Pages viewed, features used, time spent, click paths, search queries within the platform |
| Log data | Access timestamps, error logs, referral URLs |
| Location data | Approximate geographic location derived from IP address |
1.3 Information from Third Parties
We may receive information about you from third-party services such as single sign-on providers (e.g., Google or similar OAuth providers), payment processors, analytics partners, and publicly available sources. We combine this information only as permitted by this policy and applicable law.
2. How We Use Your Information
We process personal information for the following purposes:
| Purpose | Description |
|---|---|
| Service delivery | Creating and managing your account, providing access to courses and educational content, processing transactions |
| Personalisation | Adapting content recommendations and learning paths based on your activity and preferences |
| Communications | Sending transactional emails, course updates, administrative notices, and, where you have opted in, marketing messages |
| Security and fraud prevention | Detecting and preventing unauthorised access, abuse, and fraudulent activity |
| Analytics and improvement | Understanding how users interact with the platform to improve features, performance, and content quality |
| Legal compliance | Meeting our obligations under applicable laws, responding to lawful requests, enforcing our Terms of Service |
We do not sell your personal information to third parties. We do not use your personal information for automated decision-making that produces legal or similarly significant effects without providing you with a means to contest the outcome.
3. Legal Basis for Processing
Where required by applicable law, we rely on one or more of the following legal bases to process your personal information:
Contract performance: Processing necessary to provide the Services you have requested or to fulfil a contract with you.
Legitimate interests: Processing necessary for our legitimate business interests, such as improving the platform, preventing fraud, and ensuring security, provided those interests are not overridden by your rights.
Consent: Where you have given us clear, informed consent to process your information for a specific purpose, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Legal obligation: Processing necessary to comply with a legal obligation to which we are subject.
4. Cookies and Tracking Technologies
4.1 Types of Cookies We Use
| Type | Purpose |
|---|---|
| Strictly necessary | Required for the platform to function — authentication, session management, security |
| Functional | Remember your preferences such as language, display settings, and saved progress |
| Analytics | Measure usage patterns and platform performance using aggregated, anonymised data |
| Marketing | Deliver relevant promotional content where you have consented |
4.2 Managing Cookies
You can control cookies through your browser settings or through the cookie preference centre available on our platform. Disabling strictly necessary cookies will impair the functionality of the Services. Disabling other categories will not affect your ability to access core features.
5. Sharing of Information
We share your information only in the following circumstances:
Service providers: We engage trusted third-party vendors who process data on our behalf under contractual obligations that require them to maintain appropriate security standards and use data only for the purposes we specify. These include cloud hosting providers, payment processors, email delivery services, and analytics tools.
Business transfers: In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify you before your information becomes subject to a materially different privacy policy.
Legal requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
With your consent: We will share your information with any other party when you have explicitly authorised us to do so.
6. Data Retention
We retain personal information for as long as necessary to provide the Services, fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymise it using secure methods.
Account data is retained for the duration of your active account. If you request account deletion, we will remove your personally identifiable information within 30 days, except where retention is required by law or legitimate business necessity such as fraud prevention records.
7. Data Security
We implement and maintain technical and organisational measures designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include encryption of data in transit using TLS, encryption of sensitive data at rest, access controls and role-based permissions, regular security assessments, and incident response procedures.
No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.
8. Your Rights and Choices
Depending on your location and applicable law, you may have the following rights regarding your personal information:
| Right | Description |
|---|---|
| Access | Request a copy of the personal information we hold about you |
| Rectification | Request correction of inaccurate or incomplete information |
| Erasure | Request deletion of your personal information, subject to legal retention obligations |
| Restriction | Request that we limit processing of your information in certain circumstances |
| Portability | Receive your information in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests or for direct marketing purposes |
| Withdraw consent | Withdraw previously given consent at any time without affecting prior lawful processing |
To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within a reasonable timeframe and no later than required by applicable law. We may need to verify your identity before processing your request.
9. Children's Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will take prompt steps to delete it. If you believe a child under 16 has provided personal information to us, please contact us immediately.
10. Third-Party Links and Integrations
Our platform may contain links to third-party websites, tools, or integrated services. This Privacy Policy applies only to our Services. We are not responsible for the privacy practices of third parties, and we encourage you to review the privacy policies of any external services you access through our platform.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account or displaying a prominent notice on our platform.
Your continued use of our Services after the effective date of an updated policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you should discontinue use of the Services and may request deletion of your account.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:
| Company | Layertrack |
| Website | layertrack.sbs |
| support@layertrack.sbs | |
| Phone | +1 (514) 694-2420 |
| Mailing address | 6450 Rue Beaubien E, Montréal, QC H1M 1A9, Canada |
We are committed to resolving any concerns you may have about our privacy practices in a timely and transparent manner.