Effective date: 2026-02-08 • Applies to whitepost.click and related services.
Information We Collect
We collect account identifiers, contact details, and course progress to operate the service. Payment is processed by third parties; we do not store full card numbers.
Categories of personal information we may collect include:
- Account information: name, username, password (hashed), and authentication tokens.
- Contact details: email address, phone number, billing or mailing address when provided.
- Learning activity: enrolled courses, progress checkpoints, completion timestamps, quiz results.
- Transactional metadata: order IDs, last four digits of card, and payment status from our payment processor.
- Device and usage: IP address, browser type, device identifiers, pages viewed, and referrer/UTM parameters.
- Cookies and similar technologies: session identifiers, preferences, and analytics tags.
- Support communications: messages you send us, feedback, and survey responses.
We do not intentionally collect sensitive categories (such as health, biometric, or precise geolocation) unless explicitly provided for a clear purpose and with consent where required.
How We Use Information
We provide access, personalize content, improve courses, and communicate updates. We do not sell personal data.
- Service delivery: authenticate users, maintain accounts, and provide course access.
- Personalization: recommend content, remember preferences, and tailor notifications.
- Improvement and analytics: measure engagement, fix bugs, and enhance performance.
- Security and fraud prevention: detect suspicious activity, prevent abuse, and enforce policies.
- Legal compliance: fulfill tax, accounting, and regulatory obligations.
- Communications: send transactional emails (receipts, updates) and, with opt-in where required, newsletters or product announcements.
Data Retention
We retain data for as long as needed to provide services and comply with applicable obligations.
Retention is determined by factors such as account status, legal requirements, dispute resolution periods, and product improvement needs. When data is no longer required, we delete or de‑identify it. Backups are stored for a limited time before being overwritten on a rolling basis.
Your Rights
You can request access, correction, or deletion of your data, subject to verification and applicable limits.
- Access and portability: obtain a copy of your personal information in a commonly used format.
- Correction: update inaccurate or incomplete information.
- Deletion: request erasure where we have no legal basis to retain data.
- Restriction and objection: limit or object to certain processing, including direct marketing.
- Consent withdrawal: where processing is based on consent, you may withdraw it at any time.
- Appeal and complaints: you may contact us or your local authority if you believe your rights are not respected.
To exercise rights, contact us using the details below. We may request verification to protect your account and privacy.
Security
We apply reasonable administrative and technical safeguards to protect information.
- Industry-standard transport security for data in transit.
- Access controls, least-privilege principles, and activity logging for internal systems.
- Vendor diligence and contractual safeguards with our processors.
No method of transmission or storage is completely secure. If you suspect unauthorized access to your account, contact us immediately.
Cookies and Tracking
We use necessary cookies to sign you in and maintain sessions, and we may use analytics cookies to understand product performance. You can adjust browser settings to block or delete cookies, which may impact certain features.
- Essential: session ID, CSRF tokens, and preference storage.
- Analytics: aggregated metrics on page views and feature usage.
Legal Bases for Processing
Where required, we rely on the following lawful bases: performance of a contract (providing the service you requested), legitimate interests (product improvement, fraud prevention, and security), consent (optional communications and certain analytics), and legal obligations (tax, accounting, compliance).
International Transfers
We may process information on servers located in jurisdictions different from your own. When transferring data, we use appropriate safeguards as required by applicable law, such as standard contractual clauses or comparable mechanisms.
Children’s Privacy
Our services are not directed to children under the age where parental consent is required by law. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate action.
Changes to This Policy
We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Material updates will be announced through the service or by email where appropriate. The “Effective date” at the top indicates when this policy last changed.
Contact
Email: [email protected] • Phone: +1 415 555 0139
If you have questions about this policy, your data, or wish to exercise your rights, please reach out using the details above. We endeavor to respond within one calendar month, or a timeframe required by applicable law.