Privacy Policy

1. Company Information

Courses Direct LLC, 5225 2nd E Ct, Tuscaloosa, AL 35405, USA. Email: learn@courses-direct.com. Phone: +1 (205) 752-3804. EIN: XX-XXXXXXX. Registered in the State of Alabama.

2. Applicable Law

This Privacy Policy complies with: Alabama Data Breach Notification Act (Ala. Code 8-38-1 et seq.); California Consumer Privacy Act (CCPA/CPRA) for California residents; Children's Online Privacy Protection Act (COPPA); CAN-SPAM Act; FTC Act Section 5. We also voluntarily follow GDPR principles where practicable.

3. Data Collected

Account: Name, email, phone (optional). Learning: Course progress, exercise completion, AI tool usage patterns (aggregated). Payment: Stripe (PCI DSS L1). Last 4 digits, brand, amount only. Communication: Emails, form submissions, chat messages. Analytics: Plausible (cookieless, EU-hosted). No personal data collected.

4. How We Use Your Data

Service delivery: Course access, progress tracking, certificates, support. Course improvement: Aggregated, anonymized usage data to improve content. Communication: Transactional emails; marketing only with opt-in consent. Legal compliance: Tax reporting, fraud prevention.

5. California Residents (CCPA/CPRA)

Rights: know, delete, correct, opt out of sale (we do not sell data), non-discrimination. 45-day response. Contact: learn@courses-direct.com.

6. Data Security

TLS 1.3, AES-256, bcrypt password hashing, MFA for staff, encrypted backups, NDA for all team members.

7. Retention

Account: duration + 2 years. Course progress: lifetime (certificate verification). Payment: 7 years (IRS). Analytics: none stored.

8. Contact

learn@courses-direct.com. 5225 2nd E Ct, Tuscaloosa, AL 35405.

Last updated: March 2026.