Privacy Policy

The CDA Academy FL ("the Academy," "we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect through cdaacademyfl.com and our learning platform (the "Services"), how we use and protect it, and the choices you have. By using the Services, you agree to this Policy.

a) Information you provide directly:

• Account/registration data: name, email address, password (stored only in encrypted/hashed form), phone number.
• Enrollment & profile data: courses you enroll in, progress, quiz/test submissions, certificates earned.
• Payment data: when you purchase, our payment processor (Stripe) collects your card and billing information. We do not receive or store your full card number. We may retain limited transaction records (e.g., amount, date, last four digits, payment status).
• Communications: messages you send us, support requests, and content you post in discussions or community areas.

b) Information collected automatically:

• Device and usage data: IP address, browser type, device identifiers, pages viewed, time spent, referring URLs, and interactions with content.
• Cookies and similar technologies.

c) Information from third parties:

• Our payment processor may share transaction status; if you sign in through a third-party login (if offered), we receive basic profile information you authorize.

We use your information to:

• Provide, operate, and maintain the Services and your account;
• Process enrollments, payments, and issue certificates;
• Track course progress and deliver a personalized learning experience;
• Communicate with you about your account, courses, updates, and (where permitted) promotions you can opt out of;
• Provide customer support and respond to inquiries;
• Protect the security and integrity of the Services, detect fraud, and enforce our Terms;
• Comply with legal obligations.

We do not sell your personal information. We share it only:

• With service providers who help us operate the Services (e.g., payment processing, hosting, email delivery, analytics) under confidentiality obligations and only as needed;
• To comply with law, respond to lawful requests, subpoenas, or court orders, or protect our rights, safety, and property or that of others;
• In connection with a business transfer (merger, acquisition, or sale of assets), subject to this Policy;
• With your consent or at your direction.

We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including: encryption of data in transit (HTTPS/TLS), password hashing, role-based access controls, session-based authorization on data endpoints, payment tokenization through a PCI-DSS-compliant processor, and access logging. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential. In the event of a data breach affecting your personal information, we will notify affected individuals and authorities as required by applicable law, including the Florida Information Protection Act (Fla. Stat. § 501.171).

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below.

Depending on your location, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information (subject to legal exceptions);
• Opt out of marketing communications (use the unsubscribe link or contact us);
• Object to or restrict certain processing;
• Request a copy of your data in a portable format.

To exercise any right, contact [email protected]. We will verify your identity and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

We treat your course records (enrollment, progress, submissions, certificates) as confidential and use them only to deliver the Services and as described in this Policy.

The Services are intended for adults (18+) and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Our Services may contain links to or embedded content from third-party sites (e.g., video hosts). Their privacy practices are governed by their own policies, and we are not responsible for them.

We may update this Policy from time to time. Material changes will be posted here with a new "Last Updated" date. Your continued use of the Services constitutes acceptance of the updated Policy.