Privacy Policy
At FIXA Data Cafe - Training Assessment Platform, we are committed to protecting your personal data and ensuring compliance with the General Data Protection Regulation (GDPR) and other industry security standards (such as SOC 2). This Privacy Policy explains how we collect, process, store, and protect your information.
1. Data We Collect
We only collect data necessary to manage your student account, track course progress, evaluate assessment submissions, and issue credentials. This includes:
- Account Details: Full name, email address, and a secure cryptographic hash of your password.
- Academic Data: Course registration details, assigned assessments, test answers/durations, project files (.xlsx) you upload, and grade outputs.
- Financial Data: Records of payment installments, payment methods, transaction references, and payment dates (no raw credit card numbers are stored on our servers).
- Technical Data: IP address, browser type, and device details captured in secure audit logs for security monitoring and fraud prevention.
2. Purpose and Legal Basis for Processing
Under the GDPR, our legal bases for processing your data are:
- Contractual Necessity: To provide course tracking, grading feedback, and certificate issuance as part of your student registration.
- Legal Obligation / Legitimate Interest: To maintain secure audit trails (SOC 2 compliance) and prevent cheating or unauthorized system usage.
3. Data Retention and Security
Your personal data is stored securely on servers featuring standard encryption and access control protocols. We retain your information as long as your student account is active. In the event of account deactivation or deletion, your associated records (submissions, grades, and profile details) are purged from active storage in accordance with our cascading deletion policy.
4. Your GDPR Rights
You have the following rights regarding your personal data stored within our platform:
- Right of Access (Data Portability): You can request and download a copy of all your platform records in a structured JSON format directly from your Settings page.
- Right to Rectification: You can request updates to inaccurate personal profile details.
- Right to Erasure ("Right to be Forgotten"): You can request the permanent deletion of your account and all associated submission history by contacting administration.
- Right to Restrict Processing: You have the right to object to specific processing actions.
5. Contact Information
If you have questions about this policy or wish to submit an account erasure request, please email our Data Protection Officer at admin@fixadatacafe.com.