Privacy & Cookies

1. Company and privacy contact

2. Notice at collection: categories and purposes

Depending on how you interact with the site and which production services are enabled, we may process the following categories. The site does not intentionally collect every category on every visit.

• Network and device information: IP address or network information, browser/device characteristics, timestamps, requested URLs, referring pages, language settings, and security logs. Purpose: deliver pages, maintain security, diagnose problems, prevent abuse, and protect service integrity.
• Internet or site activity: page visits, resource requests, navigation events, and link activity where enabled. Purpose: operate, measure, debug, and improve the educational experience.
• Communications information: email address, phone number, message content, subscription or opt-in source, delivery status, and communication preferences when you contact us or participate in an email/SMS program. Purpose: respond, deliver requested communications, maintain consent/suppression records, and comply with communications law.
• Browser-local learning state: checklist completion or similar preferences stored on your own device. Purpose: remember a feature you used. Current first-party Learning Center code keeps this state in local storage rather than a cloud account.

We do not ask you to submit passwords, brokerage credentials, payment-card numbers, Social Security numbers, or other highly sensitive financial credentials through the Learning Center.

Retention and sale/sharing notice: Retention criteria are explained in Section 9. The current Learning Center does not sell personal information or share it for cross-context behavioral advertising. If those practices or the categories/purposes above materially change, this notice and any required collection or opt-out controls must be updated before the change takes effect.

3. Current Learning Center technical implementation

The current package does not contain a first-party advertising pixel, Google Analytics/Google Tag Manager, a first-party form submission endpoint, or first-party JavaScript that writes document.cookie. The first-party JavaScript uses local storage for checklist completion state. The package loads Google-hosted font resources and the Learning Center home page can load a TradingView market-data widget; those third parties receive the technical request information necessary to deliver their resources and may apply their own policies.

If production hosting, analytics, advertising, forms, community features, or measurement are added later, this notice and any required consent controls must be updated before those new uses begin.

4. Cookies, local storage, and similar technologies

Browser storage technologies include cookies, local storage, and similar mechanisms. Current first-party Learning Center code uses local storage for checklist state. Local browser data can remain until it expires, the feature removes it, or you clear it. Clearing browser data, changing browsers/devices, or using private browsing can remove or separate locally stored learning state.

Third-party resources can use their own cookies or similar technologies. Where applicable law requires prior consent for non-essential storage or access technologies, non-essential technologies should not be activated until the required choice has been obtained. Browser settings can also be used to clear or block storage, although blocking essential storage may affect functionality.

5. Third-party resources and service providers

Categories of recipients can include hosting/CDN/security providers, font/resource providers, market-data and chart providers, email/SMS delivery platforms, support providers, and professional advisers. Providers process information under their own contracts and privacy terms, and some can process data in countries different from yours.

The current Learning Center directly references Google Fonts and a TradingView widget. External regulator, broker, exchange, government, or publisher links are separate websites; when you choose to follow an external link, the destination site's own privacy practices apply.

6. Purposes and lawful bases where GDPR/UK GDPR applies

Where the EU GDPR or UK GDPR applies, processing can rely on different lawful bases depending on the activity: providing a feature you request or responding to you; legitimate interests in secure and reliable site operation, fraud prevention, debugging, and maintaining educational services; consent where required for optional tracking or marketing communications; and compliance with legal obligations. When processing is based on consent, you may withdraw it for future processing. When legitimate interests are used, we consider the purpose, necessity, and impact on individuals.

7. Sharing, disclosure, sale, and cross-context advertising

We may disclose information to service providers that operate the site or communications, to professional advisers, or when reasonably necessary to comply with law, protect rights and security, investigate abuse, or complete a lawful business transaction.

The current Learning Center does not use advertising pixels and does not sell personal information or share it for cross-context behavioral advertising. If those practices change, this notice and any legally required “Do Not Sell or Share” or opt-out controls must be updated before the change takes effect.

8. Global Privacy Control and preference signals

Because the current Learning Center does not sell personal information or share it for cross-context behavioral advertising, there is no current sale/sharing choice to process. If a future deployment engages in activity for which applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, the production implementation must honor that signal as required.

9. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including security, support, legal compliance, recordkeeping, or suppression of future marketing after an opt-out. Browser-local checklist data remains on the device until it is cleared or removed by the feature. Server and provider logs are retained according to operational, security, contractual, and legal requirements. When exact periods are not fixed, retention is determined by the nature of the data, the purpose, risk, legal requirements, and whether the information remains necessary.

10. International data transfers

MINDBRIDGE BUSINESS ACADEMY LLC is based in the United States. Service providers can process information in the United States or other jurisdictions. Where a law requires a transfer mechanism or additional safeguards for cross-border transfers, we use the mechanism and protections applicable to the relevant processing and provider relationship.

11. Privacy rights

Rights depend on where you live and whether a particular law applies to the operator and the processing.

• EEA/UK: rights can include access, correction, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to a competent supervisory authority.
• California: where the CCPA applies, rights can include notice, access/knowledge, deletion, correction, opt-out of sale/sharing, limitation of certain sensitive-personal-information uses, and non-discrimination for exercising applicable rights.
• Singapore: where the PDPA applies, rights can include access and correction and the ability to withdraw consent subject to applicable requirements and consequences.
• Other jurisdictions: other U.S. states and countries can provide additional or similar rights.

To submit a privacy request, email Contact email. We may need to verify identity before fulfilling rights that require verification. We will not use verification information for an unrelated purpose.

12. Email and SMS communications

If you receive educational email or SMS communications, the Communications & Messaging Terms explain consent, message frequency, opt-out, HELP, and delivery limitations. Marketing consent can be withdrawn for future messages. We may retain a suppression record after an opt-out so that the address or number is not accidentally re-enrolled.

13. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and services involved. No Internet transmission, browser, email, messaging system, or storage method can be guaranteed completely secure. Do not send passwords, account credentials, payment information, or other unnecessary sensitive information by ordinary email or SMS.

14. Children

The Learning Center is general investor education and is not directed to children under 13. We do not knowingly ask children under 13 to provide personal information through this Learning Center. If you believe a child has provided personal information, contact us so the situation can be reviewed.

15. Changes to this privacy notice

We update this notice when data practices, providers, site features, or legal requirements materially change. If a new purpose is incompatible with the purpose previously disclosed, or new categories are collected where a notice-at-collection requirement applies, the required updated notice should be provided before the new collection or use begins.

16. Contact and complaints

If a privacy law gives you a right to complain to a regulator or supervisory authority, you may also contact the authority that is competent for your location or the relevant processing.