This Privacy Policy describes how [COMPANY LEGAL NAME, LLC] (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information in connection with the Board Certified Business Credit Professional program and the website bcbcp.org (the “Service”).
By using the Service, you consent to the practices described in this Policy. If you do not agree, please do not use the Service.
01Information We Collect
1.1 Information you provide.
- Account information: name, email, password (hashed), mailing address, phone number.
- Professional information: business name, industry role, and any credentials you submit.
- Payment information: billing name and address, and payment card details (handled directly by our payment processor; we do not store full card numbers).
- Certification activity: course progress, exam attempts, scores, and certificate records.
- Communications: messages you send us, support requests, feedback, and forum or testimonial content.
1.2 Information collected automatically.
- Usage data: pages viewed, features used, time spent, and referring URLs.
- Device & technical data: IP address, browser type, operating system, device identifiers, and approximate geographic location.
- Cookies & similar technologies: see Section 6.
1.3 Information from third parties.
We may receive information from payment processors, fulfillment and shipping vendors, exam providers, email delivery services, analytics providers, and affiliates who refer you to the Service. The information typically includes transaction status, shipping status, exam results, and attribution data.
02How We Collect It
We collect information directly from you when you register, enroll, pay, take the exam, or contact us; automatically through your interactions with the Service; and from third-party service providers who help us operate the Service.
03How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service;
- Process enrollments, renewals, payments, and refunds;
- Deliver course materials, administer the certification exam, and issue credentials;
- Communicate with you about your account, purchases, and program updates;
- Send marketing and educational emails where permitted (you may unsubscribe at any time);
- Provide customer support and respond to inquiries;
- Monitor, analyze, and improve the Service;
- Detect, prevent, and address fraud, abuse, and security incidents;
- Enforce our Terms of Service and other policies;
- Comply with legal obligations and respond to lawful requests.
04How We Share Information
We do not sell your personal information. We share it only as described below:
- Service providers: with vendors who perform services on our behalf (see Section 5).
- Payment processing: with Stripe to complete your transactions.
- Affiliates and referrers: where you signed up through an affiliate link, we may share limited attribution data (such as enrollment confirmation and commission amount) with the referring affiliate.
- Legal and safety: when we believe disclosure is required by law, legal process, or to protect the rights, property, or safety of the Company, our members, or others.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to customary confidentiality protections.
- With your consent: for any other purpose you authorize.
05Service Providers
We rely on trusted third parties to operate the Service. The categories below are representative and may change over time:
| Category | Purpose | Representative vendor |
|---|---|---|
| Payment processing | Billing, invoicing, subscriptions | Stripe |
| Hosting | Application hosting and storage | cPanel / [HOSTING PROVIDER] |
| Fulfillment | Shipping physical certification materials | ShipStation |
| Exam delivery | Proctoring and exam administration | ClassMarker |
| Email delivery | Transactional and marketing email | [EMAIL PROVIDER] |
| Analytics | Usage analytics and performance | [ANALYTICS PROVIDER] |
Each provider is contractually required to use your information only to perform services for us and to protect it appropriately.
06Cookies & Tracking
We use cookies and similar technologies to keep you signed in, remember preferences, analyze usage, attribute affiliate referrals, and improve the Service. You can control cookies through your browser settings, but disabling them may limit functionality (for example, you may not be able to log in).
We honor browser-level privacy signals (such as Global Privacy Control) where required by applicable law.
07Email & CAN-SPAM Compliance
We send two categories of email: transactional (receipts, renewal notices, exam results, password resets, and other messages necessary to operate your account) and promotional (educational content, product updates, and program offers).
You may opt out of promotional emails at any time by using the unsubscribe link included in every such email or by emailing privacy@bcbcp.org. Even if you opt out of promotional emails, we will continue to send transactional emails. All commercial emails include our physical mailing address in compliance with the CAN-SPAM Act.
08Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted transmission (TLS), hashed passwords, restricted access, and monitored infrastructure. However, no method of transmission or storage is completely secure. You are responsible for protecting your password and for any activity under your account.
If we learn of a security incident that materially affects your information, we will notify you and regulators where required by law.
09Data Retention
We retain personal information for as long as needed to provide the Service and to satisfy our legal, accounting, and reporting obligations. Certification records are retained for the life of the credential (and a reasonable period thereafter) so we can verify the authenticity of past credentials. Payment and transaction records are retained for tax and audit purposes as required by law. When retention is no longer required, we delete or anonymize the information.
10Your Rights
Depending on your location and applicable law, you may have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of your information, subject to legal and record-keeping exceptions;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent;
- Port your information to another provider in a structured, machine-readable format.
To exercise any of these rights, contact us at privacy@bcbcp.org. We will respond within the timeframes required by applicable law. We may need to verify your identity before fulfilling certain requests.
11California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) provides additional rights, including the right to know what categories of personal information we collect, sell, or share; the right to request deletion; the right to correct inaccurate information; the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising; and the right not to receive discriminatory treatment for exercising these rights.
We do not sell personal information in the traditional sense and do not knowingly share personal information for cross-context behavioral advertising. To submit a California privacy request, email privacy@bcbcp.org with “California Privacy Request” in the subject line.
12International Users
The Service is operated from the United States. If you access it from outside the U.S., your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.
13Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it. If you believe a child has provided us with personal information, please contact privacy@bcbcp.org.
14Third-Party Links
The Service may contain links to third-party websites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any information.
15Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated by email or through the Service at least fourteen (14) days before they take effect. The “Last updated” date at the top of this page indicates the most recent revision. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
16Contact
[COMPANY LEGAL NAME, LLC]
[STREET ADDRESS, CITY, STATE ZIP]
Privacy inquiries: privacy@bcbcp.org
General support: support@bcbcp.org