1. Data controller
The controller of your personal data is Certiplus LLC, located at 1401 Sawgrass Corporate Pkwy, Sunrise, FL 33323, USA.
2. Data we collect
- Account data: first name, last name, email, phone number and, if you provide it, date of birth. Your password is stored encrypted; we never store it in plain text.
- Exam activity: redeemed coupons, attempts, submitted answers, scores, exam start and submission times, and whether a submission was made after the time limit. If you use the simulator while logged in, we also keep your practice history.
- Certificates: certifications earned, issue and expiration dates, score and status.
- Purchases: orders, products, amounts, payment status and issued vouchers. Payments are processed by Paddle: we do not receive your card details; Paddle shares with us the transaction information we need.
- Technical data: IP address and basic browser data, used for service security and to limit abusive attempts.
- Communications: information you send us through the contact form or to support.
3. How we use your data
- To create and manage your account and verify your email address.
- To manage your coupons, exams, attempts and certificates.
- To process your purchases and issue your vouchers.
- To allow public verification of issued certificates.
- To provide support and answer your requests.
- To protect the platform, prevent fraud and ensure exam integrity.
- To comply with legal, accounting and tax obligations.
4. Public certificate verification
So that third parties (for example, employers) can check your certification, anyone with a certificate's identifier or QR code can see: your full name, the certification, the issue and expiration dates, the score and the certificate status. We do not show your email, phone number or other contact details.
7. How long we keep your data
We keep your account data while your account is active. Exam and certificate records are kept as long as needed for certificate verification and traceability of results. Purchase and payment records are kept for as long as accounting and tax obligations require.
8. Security
We protect your information with reasonable technical and organizational measures: encrypted connections, encrypted passwords, role-based access control and audit logs of support actions. No system is completely infallible; if we detect an incident affecting your data, we will inform you as required by law.
9. Your rights
- Access the personal data we hold about you.
- Correct or update it; you can edit your name, phone number and date of birth from your profile.
- Request its deletion. Please note that if we delete your account, your certificates can no longer be verified.
- Object to certain uses or ask us to restrict them, and request a copy of your data.
To exercise these rights, write to us through the contact form. We may ask for information to verify your identity before handling the request.
10. Minors
Certiplus is intended for adults. If you are a minor, you must use the platform with the permission of your parent or guardian.
11. International transfers
Your data is processed in the United States and in the countries where our providers operate. When it is transferred outside your country, we seek to ensure it receives an adequate level of protection.
12. Changes to this policy
We may update this policy. We will publish the new version on this page with its update date and, if the changes are significant, we will let you know.
13. Contact
For any questions about this policy or your data, write to us through the contact form at certiplus.io/contact or by mail to Certiplus LLC, 1401 Sawgrass Corporate Pkwy, Sunrise, FL 33323, USA.