Privacy Policy

This privacy policy applies to all websites for which ReadyTech Corporation is the data controller or data processor, including https://*.readytech.com, https://*.instructorled.training, https://*.selfpaced.training, and https://*.find.training.

ReadyTech is a California "C" corporation, registration number C1888440. Our offices are located at 720 Second Street, Suite 111, Oakland, CA 94607, United States.

If you have questions about this policy or our data privacy practices, please email us at data-privacy@readytech.com or send postal mail using the address above.

EU-U.S. and Swiss-U.S. Data Privacy Framework

ReadyTech complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. ReadyTech has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. ReadyTech has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/

The Federal Trade Commission has jurisdiction over ReadyTech's compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

Additional Dispute and Compliance Commitments

In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, ReadyTech commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF in the context of the employment relationship.

In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, ReadyTech commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

ReadyTech may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Onward Transfers and Our Liability

When we transfer your personal data to third-party service providers, contractors, or partners (collectively, "Third Parties"), we do so in compliance with the Data Privacy Framework (DPF) Principles. We require these Third Parties to protect your data with safeguards consistent with our own and the DPF Principles.

We remain accountable for ensuring Third Parties process your data consistent with DPF Principles. We will be liable for their actions if they process your data inconsistently with DPF Principles, unless we prove we are not responsible for the event causing the damage. We'll take reasonable steps to prevent or stop any inconsistent processing and cooperate with authorities if issues arise.

ReadyTech recognizes that, in light of the judgment of the Court of Justice of the EU in Case C-311/18, the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield are no longer valid transfer mechanisms for personal data from the Europe Union to the United States. At the same time, the U.S. Department of Commerce, which oversees compliance with Privacy Shield, has stated that it will nonetheless continue to administer the Privacy Shield program and that participants are not relieved of their obligations under Privacy Shield. Accordingly, ReadyTech, as a certified member of the Privacy Shield principles, continues to comply with its commitments. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

In compliance with the Privacy Shield Principles, ReadyTech commits to resolving complaints about our collection or use of your personal information. Individuals with inquiries or complaints regarding our Privacy Shield policy should first contact ReadyTech at data-privacy@readytech.com. ReadyTech has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit JAMS at https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of JAMS are provided at no cost to you. Furthermore, you have the right to invoke binding arbitration if your complaint goes unresolved, as described in the Privacy Shield framework.

Under Privacy Shield, ReadyTech is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

As explained in this privacy policy we sometimes provide personal information to third parties to perform services on our behalf. If we transfer personal information received under the Privacy Shield to a third party, the third party's access, use, and disclosure of the personal data must also be in compliance with our Privacy Shield obligations, and we will remain liable under the Privacy Shield for any failure to do so by the third party unless we prove we are not responsible for the event giving rise to the damage.

Minors

Our websites and services are not designed for or marketed to minors. We do not knowingly collect or solicit personal information from minors, and we do not knowingly allow minors to use our websites or services. If you are a minor, please do not use our websites or services or send us any information about yourself.

How and why we collect your personal data

We collect and use your personal data only to the extent necessary to operate our websites and services, provide our services to you, or for the legitimate purposes identified in this privacy policy. These are the categories of data we collect:

Account data

Some of our websites and applications require you to register in order to use some or all of the functionality. If you choose to register for an account you will provide us with some personal data, including your name, email address, username, and password. We collect this data because it is necessary to provide you access to our services and maintain the security of our services. We may use your data to communicate with you regarding your account. We retain account data as long as your account is active. You can cancel your account at any time and, if you do, we remove or anonymize your account data.

Legal basis for collection of account data: performance of a contract between you, or your employer, and us

Participation data

One of our core services is allowing users to participate in training events. When you participate in one of these events we collect certain information about you. When your first join an event you must activate your seat by providing your name. We store your name so the instructor and technical support know who is using which seat. Additionally, when you activate your seat you consent to allow us to collect data about your usage, progress, collaboration, and participation in the training event. This data may include whether you attend a particular session, how long you spend reading the materials, when and how often you access the hands-on lab environment, whether you complete lab exercises, when and how much you contribute to chat and other course activities, and your responses to interactive course content such as quizzes and course surveys. We collect this data for the purpose of providing the course instructor, training management, and us with oversight and understanding of how you participate in the training.

Legal basis for collection of participation data: your consent and our legitimate interest in monitoring and improving our services

Profile data

Some of our websites and applications allow you to create a personal profile. If you chose to create a profile the data we collect may include your name, telephone number, picture, address, email address, job title or role, employer, preferred language, and time zone. We collect and use profile data to allow you to collaborate with other users of our services. When you provide profile data you consent to us providing that data to other users and should understand that we cannot control what those users do with your data. You can change or remove your profile data at any time. If you create a profile during a training event the data is automatically deleted at the end of the event.

Legal basis for collection of profile data: your consent

Publication data

Some of our websites allow you to post chat and/or forum messages. If you do so, the publication data may include your name, alias, time of publication, message, and sentiment score. We use publication data only as necessary to enable the publication and allow the intended exchange of information between users of our services. When you provide data for publication you consent to us making that data visible to other users and should understand that we cannot control what those users do with your data. Publication data may be retained forever unless you request it to be deleted.

Legal basis for collection of publication data: your consent

Remote lab data

Our services may include providing you with temporary access to a hosted lab environment. This is not a personal system and all activity in the remote lab may be monitored by the course instructor, training management, and our technical support. The data we collect may include how much time you spend using the lab, which applications you use, your key stokes, your mouse clicks, screenshots of your activity, etc. We provide this monitoring so that you can get help with problems, so the instructor and management can monitor course progress and so we can ensure compliance with our Terms of Service. Do not use the remote lab environment to conduct any personal activities, such as using social media, financial transactions or personal web searches.

Legal basis for collection of lab data: our legitimate interest in properly monitoring and administering our services and your consent

Recording data

Some of our applications have a recording feature that allows the capture and sharing of all or part of your audio and all presentation content. We collect this data as a request of our customers to allow them to watch the content of recordings hosted on their account. ReadyTech is not responsible for how instructors or participants use recordings or the recording features. The recording will be stored, according to the principles stated in this policy, as long as the account owner requests it to be deleted. When you provide data in a recording event you consent to us making that data visible to other users and should understand that we cannot control what those users do with your data.

Legal basis for collection of recording data: customer's legitimate interest in properly monitoring and administering its content and your consent

Support Data

If you contact us for technical support, you have to provide some personal data which may include your name, your employer, email address, phone number, time zone, and reason for requiring support. We use the support data to help solve your problem and to better understand the types of problems our users have. We use a 3rd-party help desk software provider, Freshworks, to store and track your support request and associated data. We may share your support data with Freshworks only to the extent necessary for handling your support request. You can find the privacy policy for Freshworks here. We have configured Freshworks to keep support data for 3 years, after which it is automatically deleted.

Legal basis for collection of support data: your consent and performance of a contract between you, your employer, and us

Log data

When you access our websites and applications our servers automatically log data such as your IP address, operating system type and version, browser type, and version, etc. We use this data to help us ensure the security of our services and to provide technical support. In addition to the log data our servers collect, we also use Cloudflare as our content distribution network (CDN) to provide locally cached content and a better user experience on our websites. While using our websites your personal data may pass through and be cached on Cloudflare servers. You can find information about Cloudflare security and privacy policies here. We have executed a data processing agreement with Cloudflare.

Legal basis for collection of log data: our legitimate interest in properly administering and securing our websites and services

Aggregated usage data

We use Google Analytics and HubSpot to collect and aggregate data about your use of our website and services. This data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, feature usage, as well as information about the timing, frequency, and pattern of your service use. We use this data to analyze the use of our websites and to help us make good decisions about changes we make. For example, when deciding which languages to translate our website to, we review the aggregated usage data to determine what percentage of our users come from which countries. So our legal basis for collecting this data is our legitimate interest in monitoring and improving our website and services. We have executed the data processing addendum (DPA) with Google and set the retention of your usage data to 26 months.

Legal basis for collection of aggregated usage data: our legitimate interest in monitoring and improving our services

Marketing data

We may use your personal data for marketing purposes. This marketing data may include your name, phone number, email address, employer, service, or product interest information. We collect this data when you submit an inquiry from our websites or express interest in our products or services via email or phone. Additionally, we may collect your marketing data from 3rd parties with whom you have agreed to share your data. We use the marketing data for the purposes of offering, marketing, and selling our products and services to you. We use a 3rd-party sales automation provider, Apptivo, and a 3rd-party marketing automation provider, HubSpot, to manage your marketing data. You can request to have your marketing data removed at any time by contacting us at data-privacy@readytech.com or by updating your subscription preferences in one of our e-mails. You can find the privacy policy for Apptivo here and for HubSpot here.

Legal basis for collection of marketing data: your consent

Transaction data

If you purchase products or services from us, we collect your personal information related to this transaction. This may include your contact details, products or services purchased, the price paid, time of purchase, and payment type. We use this data so can provide the purchased product or service and keep proper records of those transactions. Financial transactions are processed using our PCI-compliant 3rd-party financial services providers, Recurly, PayPal, Authorize.net, and NetSuite. Those providers may store financial data related to your transaction, including credit card details, billing address, etc. We do not collect or process your personal financial data. You can find the privacy policies for our financial services providers at Recurly, PayPal, Authorize.Net, and NetSuite.

Legal basis for collection of transaction data: performance of a contract between you, or your employer, and us

Job application data

If you apply for a job with us, we may use the information you provide to evaluate your qualifications for employment. This information may include your name, email, phone, address, employment history, educational background, and any other information you include in your application or resume. We may share the information you provide with anyone who can assist us in evaluating your qualifications. This may include former employers and co-workers, educational institutions, etc. We use a 3rd-party hiring management application, Recruitee, to process your application data. You can find the privacy policy for Recruitee here. We have configured Recruitee to automatically delete your application data 4 months after you apply.

Legal basis for collection of job application data: your consent

Cookies

All of our websites and applications use cookies. Our Cookie Policy describes the cookies we and our service providers use.

Disclosure and storage of personal data

Except as identified in the policy, we do not sell, rent or otherwise disclose your private data to 3rd parties. According to the purposes as set out in this policy, ReadyTech stores personal data in secure networks with restricted access, following high-security standards such as end-to-end encryption and organizational safeguards to limit exposure to data breaches. At the same time, a data protection impact assessment is periodically performed to monitor the risks and define security and privacy controls to protect data.

Transfer of personal data

ReadyTech is a global organization with management, technical infrastructure, and business processes that cross borders. As such, we may share your data with our owned entities outside of the United States. The above also means that legislation protecting personal data varies among locations. Regardless of where your information is transferred to and resides, our privacy and security practices are designed to provide protection for your personal information globally. In other words, each time we take suitable measures in this respect so that in a situation in which such transfer of data takes place, this transfer of data always occurs in a manner where we ensure all personal data is provided with adequate protection and that all transfers are done lawfully and in accordance with this Privacy Statement and on the basis of international data protection and privacy programs.

We also use 3rd party hosting facilities operated by Microsoft, Google, Amazon, and ICONZ-Webvision to host some of our websites and applications. This means some or all of your data may be transferred to and stored with one of these hosting providers. We also use these hosting providers to provide lab environments as part of a training course. Here are links to the privacy policies of our hosting providers: Microsoft, Google, AWS, ICONZ-Webvision, and Digital Realty.

We reserve the right to share your personal data based on a good faith believe that doing so is necessary to investigate or prevent illegal activities or at the request of law enforcement. We may also use your data as needed to comply with a legal obligation or in defense of legal claims.

Your rights

Depending on where you live, you may have legal rights with regard to your private data. We have summarized below the right of those covered by the EU GDPR. Many of these rights are complex, and not all of the details have been included in our summaries. Therefore, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

Right to access

You have the right to know whether we have and use your personal data and, if we do, get access to the data.

Right to completeness and accuracy

You have the right to have any inaccurate personal data about you corrected and, in some cases, have any incomplete personal data about you completed.

Right to be forgotten

In some circumstances, you have the right to ask us to remove your personal data.

Right to restrict use

In some circumstances, you have the right to ask us to stop using your personal data but also ask us not to remove it.

Right to object to marketing

You have the right to object to our use of your personal data for marketing purposes.

Right of portability

In some circumstances, you have a right to request an electronic copy of the private data we have.

Right to file a complaint

You have a right to file a complaint with the appropriate regulatory authority responsible for data protection.

Right to withdraw consent

If you consented to allow us to collect private data from you, you have the right to withdraw that consent.

Right to binding arbitration

Under certain conditions described in Annex 1 of the DPF, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

Contacting us

You can exercise any of your rights in relation to your personal data via written notice to us at data-privacy@readytech.com. If you request a copy of your personal data and provide sufficient proof of identity, we will supply you with a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.

Changes to this policy

We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy. When the changes are significant we will attempt to notify you by email or through the private notification features of our websites and services.

Last Changed: June 25, 2025