Privacy Policy
Your privacy and confidentiality are fundamental to our executive training platform.
Last updated: March 15, 2024
Introduction
AnDirect ("we," "our," or "us") is committed to protecting the privacy and confidentiality of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our executive risk management training platform.
Given the sensitive nature of executive training and the confidential business information that may be discussed, we maintain the highest standards of data protection and privacy.
Information We Collect
Personal Information
- Name, title, and professional contact information
- Company affiliation and industry sector
- Professional experience and background
- Training preferences and learning objectives
- Payment and billing information
- Communication preferences and history
- Professional certifications and qualifications
- Emergency contact information when required
- Dietary restrictions and accessibility needs for events
- Professional references and recommendations
- Career history and current role responsibilities
Platform Usage Data
- Training module completion and progress
- Simulation performance and decision patterns
- Time spent on various platform features
- Assessment results and skill development metrics
- Learning path preferences and customizations
- Interaction patterns with training content
- Feedback and evaluation responses
- Collaboration activities with other users
- Resource downloads and material access
- Search queries and content preferences
Technical Information
- IP address and device information
- Browser type and operating system
- Login times and session duration
- Platform interaction logs for security purposes
- Network connection details and quality metrics
- Device performance and compatibility data
- Geographic location data (when permitted)
- Cookie and tracking technology information
How We Use Your Information
Training Delivery
- Provide personalized training experiences
- Track progress and generate performance analytics
- Customize content based on industry and role
- Deliver certificates and completion records
- Facilitate peer-to-peer learning opportunities
- Recommend relevant training modules and resources
- Schedule and coordinate training sessions
- Provide technical support and troubleshooting
- Enable collaborative learning features
Platform Improvement
- Analyze usage patterns to enhance user experience
- Develop new training modules and scenarios
- Improve platform security and performance
- Conduct research on executive learning patterns (anonymized)
- Optimize content delivery and accessibility
- Test new features and functionality
- Monitor system performance and reliability
- Enhance mobile and cross-platform compatibility
Communication
- Send training updates and new module notifications
- Provide technical support and customer service
- Share relevant industry insights and best practices
- Conduct satisfaction surveys and feedback collection
- Deliver important platform announcements
- Facilitate networking opportunities with other executives
- Send reminders for scheduled training sessions
Business Operations
- Process payments and manage billing
- Maintain accurate user accounts and profiles
- Comply with legal and regulatory requirements
- Prevent fraud and ensure platform security
- Generate business intelligence and reporting
- Manage partnerships and integrations
Data Protection and Security
Security Measures
- End-to-end encryption for all data transmission
- Multi-factor authentication for platform access
- Regular security audits and penetration testing
- Secure data centers with 24/7 monitoring
- Advanced firewall and intrusion detection systems
- Regular security training for all staff members
- Incident response procedures and protocols
- Data backup and disaster recovery systems
- Compliance with international security standards
- Regular vulnerability assessments and updates
Access Controls
- Role-based access to personal information
- Regular access reviews and permission updates
- Strict employee confidentiality agreements
- Limited data retention periods
- Principle of least privilege implementation
- Segregation of duties for sensitive operations
- Audit trails for all data access activities
- Automated access revocation procedures
Confidentiality Commitment
We understand that executive training involves sensitive business discussions and strategic thinking. All training content, decisions made within simulations, and performance data are treated with the highest level of confidentiality and are never shared with third parties without explicit consent.
Information Sharing and Disclosure
We Do Not Sell Personal Information
AnDirect does not sell, rent, or trade personal information to third parties for marketing or commercial purposes.
Limited Sharing Circumstances
- Service Providers: Trusted partners who assist in platform operations under strict confidentiality agreements
- Legal Requirements: When required by law or to protect our legal rights
- Business Transfers: In the event of a merger or acquisition, with continued privacy protection
- Consent: When you explicitly authorize information sharing
- Emergency Situations: To protect the safety and security of users or the public
- Professional Development: With certified training partners for accreditation purposes
Anonymized Data
We may use anonymized and aggregated data for research, industry reports, and platform improvement. This data cannot be used to identify individual users or their specific training activities.
International Data Transfers
When transferring data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.
Your Privacy Rights
Access and Control
- Request access to your personal information
- Update or correct inaccurate information
- Delete your account and associated data
- Export your training records and progress data
- Restrict processing of your personal data
- Object to certain types of data processing
- Withdraw consent for data processing activities
- Request data portability to another service
Communication Preferences
- Opt out of marketing communications
- Choose notification frequency and types
- Update contact preferences
- Manage subscription settings
- Control automated decision-making preferences
Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another service provider.
Right to be Forgotten
Under certain circumstances, you have the right to request deletion of your personal data. We will comply with such requests unless we have legitimate grounds to retain the information.
Data Retention and Deletion
Retention Periods
- Account Information: Retained for the duration of your account plus 7 years for legal compliance
- Training Records: Maintained for 10 years to support professional development tracking
- Communication Data: Stored for 3 years for customer service purposes
- Technical Logs: Retained for 12 months for security and performance monitoring
- Financial Records: Kept for 7 years in accordance with accounting regulations
- Marketing Data: Retained until consent is withdrawn or 2 years of inactivity
Secure Deletion
When data reaches the end of its retention period or upon valid deletion requests, we use secure deletion methods to ensure information cannot be recovered or reconstructed.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@andirect.com
Phone: +64 21 938 407
Address:
AnDirect Privacy Officer
48 Arabi Street, Mount Roskill
Auckland 1041, New Zealand
We will respond to privacy inquiries within 30 days and work with you to resolve any concerns about your personal information.