Privacy Policy

Enrollment information

Course enrollment asks for the student’s first and last name, age group, city and U.S. state, and a parent or guardian’s email (or an adult student’s own email). Names identify course records and certificates; city and state help us understand the regions we serve. We do not request a street address, birth date, or precise location. The optional “How did you hear about us?” question helps us understand how families find Fincisely. Student details are not displayed in a public directory. Public enrollment inquiries collect the student’s first and last name, a parent or guardian’s email (or an adult student’s own email), city, state and message and are forwarded through FormSubmit. Marketing consent is separate and optional.

Information you provide

Course enrollment collects the parent or guardian’s email, or an adult student’s own email, the student’s age group and state, the student’s first and last name and city, enrollment type, and your authorization and communication choices. We keep the date, role, and policy versions accepted. Contact and group requests collect the information you enter, such as name, email, organization, role, and message. Knowledge Club signup collects an email and your request for updates. Educator access requests also collect professional contact information and intended use.

Learning and account records

We store account status, activation and access dates, protected password hashes, sign-in sessions, security records, course progress, module completion, initial and best quiz scores and totals, project completion status, and certificate eligibility. We do not store individual quiz answers. Course evaluations include ratings, an intended next step, and an optional comment. Email delivery records may include message content, delivery status, and certificates. Course reflection text entered in the current private reflection tool stays in that page’s memory and is not submitted to our database; it is lost when you leave or refresh unless you save or print it yourself.

Technical information

Our hosting, security, form, font, and email providers may process IP addresses, browser or device information, request timestamps, and operational logs. The course uses essential sign-in cookies. See our Cookie Notice for details. We do not add advertising pixels or behavioral advertising tools to these websites.

How we use information

We use information to respond to requests, enroll and support students, verify payment and access, save learning progress, issue certificates, deliver account and course emails, protect the service, improve the course, and meet legal obligations. City and state support regional audience analysis; we do not request precise location. We do not sell personal information or share it for cross-context behavioral advertising.

Parents, adult students, and course emails

For students under 18, enrollment and activation must be completed by a parent or legal guardian using their email. Course communications can include module topics, completion and quiz results, and suggestions for conversations at home. These records are accessible to the registered adult. Students ages 18–19 may submit their own enrollment requests using their own email. We do not send an adult student’s progress to another person merely because that person describes themselves as a parent. Contact us to arrange or change an authorized contact.

Optional updates

News, tips, product, workshop, and event updates are optional and separate from course authorization. Declining them does not affect access. To stop marketing, use the unsubscribe instructions or email hello@fincisely.com with “Unsubscribe.” We honor requests within 10 business days. Account, security, payment, and necessary course messages are separate from marketing.

Service providers and other disclosures

The course runs on Sites infrastructure with Cloudflare hosting and database services. Zoho processes our connected course email delivery and email correspondence. Public website forms use FormSubmit to forward submissions to our inbox; its privacy notice is at https://formsubmit.co/privacy.pdf. Public pages request fonts from Google Fonts, which receives connection information when those fonts load. These providers receive the information needed for their services; their own terms govern their processing. We may also disclose information when legally required, to protect people or the service, or in a business transfer with applicable safeguards and notice. We do not publish students’ work, names, or testimonials without separate permission. School or organization access and any sharing with instructors require a separate arrangement.

Payment information

The current course enrollment form does not collect payments or bank-card details. Paid enrollment uses separate payment instructions and manual verification. We may keep payment confirmations, transaction references, and refund correspondence. Any payment provider’s own privacy terms apply to information given directly to it. Do not send card numbers or banking credentials to us by email or in a form.

Retention and security

We retain information for the purposes described in this policy and review it for deletion when it is no longer needed. Course access lasts nine months from activation; access expiration and deletion are separate events.

Our agreed retention schedule calls for student accounts, progress and quiz scores to be deleted 30 days after access expires, with advance notice to download certificates and completion records. Routine contact messages are scheduled for deletion six months after an inquiry is resolved. Messages needed for purchases, refunds or disputes follow the relevant longer schedule.

We retain minimal authorization and Terms acceptance evidence for legal and contractual purposes. The proposed baseline is four years after access ends; for minors, our baseline is the later of the student’s 22nd birthday or four years after access ends. This is a conservative business choice, not a universal statutory retention requirement. Payment and refund records follow a seven-year business retention schedule measured from the relevant tax return's filing or due date, whichever is later. This seven-year period is our conservative business choice, rather than a universal legal minimum.

Marketing contacts remain while subscribed. We review inactive subscriptions after 12 months and remove contacts who do not reconfirm. After unsubscribe, a minimal suppression record remains while we conduct marketing to help prevent future unwanted messages.

These fixed periods are the agreed operational schedule. Deletion procedures and provider backup handling are being finalized; expiration does not currently trigger automatic account deletion. Until implementation is verified, contact hello@fincisely.com for a deletion request. Relevant records may be retained longer where necessary for a documented legal obligation, audit, chargeback or dispute, with periodic review. Backups and provider records follow their confirmed retention arrangements.

We use HTTPS, hashed passwords, restricted account access and protected session tokens. No online service can promise absolute security.

Your choices and requests

Email hello@fincisely.com to request access, correction, deletion, a copy of your information, or withdrawal of optional marketing permission. For a minor’s account, the registered parent or guardian can make the request; an adult student can request their own records. We verify authority before releasing or changing records, using only information reasonably needed for that verification. Deleting information needed to run an account can end course access. Some records may remain where required or permitted by law. We will respond within applicable legal deadlines. Privacy rights depend on where you live; nothing here limits rights you have under applicable law.

Age and sensitive information

The course is designed for ages 13–19 and is not offered to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted information, contact us so we can investigate, restrict access, and remove it as appropriate. Do not enter Social Security numbers, account or card numbers, passwords, or other sensitive personal or financial information in course activities, comments, or messages. Use fictional examples.

Location, tracking preferences, and changes

Course enrollment currently asks for a U.S. state. Providers may process information in the United States or other countries. We do not offer a cross-site advertising tracking service and do not change site behavior in response to browser Do Not Track signals. External sites you choose to visit have their own practices. We update this policy when our practices change and show the update date. Material changes affecting existing accounts will be communicated through the service or registered email; new agreement is requested where required.