Privacy Policy

1. Scope

This policy describes how Nebulaix FireCraft (“we”, “us”) processes personal data in connection with our fire safety training services on nebulaix.click and related tools.

2. Data we collect

• Account data: name, email, password hash.
• Contact data: phone, organization, role, messages you send us.
• Training records: enrollments, completion status, certificates.
• Transaction data: course selections and billing contact.
• Usage data: device type, pages viewed, approximate location by IP.
• Cookies and local storage: preferences (theme), saved items (Fallows), and cart.

3. Sources

We collect data directly from you, from your employer if they enroll you, and from our website analytics. We do not buy personal data from data brokers.

4. How we use data

• Provide courses, cohorts, certificates, and support.
• Communicate about schedules, updates, and policy changes.
• Improve training materials and site features.
• Maintain site security and prevent fraud.
• Comply with legal obligations.

5. Legal bases

We process data based on contract performance, legitimate interests (course delivery and safety), consent where required (cookies, newsletters), and legal obligations.

6. Sharing

We share data with service providers that support our operations (hosting, email). We do not sell personal data. For employer-sponsored training, we may share attendance records with your employer.

7. Cookies and local storage

We use essential cookies and local storage to remember preferences (theme), cookie consent, saved courses (Fallows), and the cart. You can clear these in your browser settings. Our cookie banner controls non-essential storage.

8. Security

We use encryption in transit, access controls, and staff training. No method is perfectly secure, but we work to reduce risks and promptly address incidents.

9. Retention

We retain training records as requested by your organization or as required by law, and remove or anonymize data when no longer needed.

10. Your rights

Depending on your location, you may request access, correction, deletion, portability, or restriction of processing. Contact us to exercise rights; we will verify your identity before fulfilling requests.

11. Children

Our services are designed for adults in the workplace. We do not knowingly collect data from children under 13.

12. Changes

We may update this policy. We will post changes here and, if significant, notify account holders by email.

13. Contact

For privacy questions, email [email protected] or call +1 (415) 555-0198.