Privacy Policy

1. Who we are

Easy PM ("we", "us") provides project management training, PMP exam preparation and related online courses through this website and our mobile application.

We are the controller of the personal data described in this policy. For anything to do with your data, contact us at support@easypm.org.

2. What we collect

We only collect what the service needs to work. In practice that is:

We do not ask for, and do not want, special category data such as health information. Please do not send it to us.

3. Photographs at live sessions

We sometimes photograph and film our live training sessions and publish the results on this website and our social media.

We ask for your agreement separately when you register, as its own tick box, and it is never a condition of taking a course. You can change your answer at any time from your profile, and you can ask us to take down a picture that has already been published.

If you have declined, we will not photograph you. Where that is difficult in a full room, tell the trainer at the start of the session and we will arrange the seating around it.

4. Our legal basis

• Performance of a contract - your account, your enrolments and the courses you have paid for.
• Legal obligation - keeping records of payments for the period the law requires.
• Legitimate interests - keeping the site secure, preventing fraud, and understanding how the site is used so we can improve it.
• Consent - photographs of you at live sessions, any marketing email you have opted into, and analytics cookies for visitors from the EU, the UK and Switzerland. You can withdraw consent at any time without affecting your courses.

5. Who else sees it

We do not sell your data. We share it only with the services that make the platform work:

Your instructor and our administrators can see your enrolments, exam results and any feedback you submit. Other students cannot, except for reviews you choose to publish on a course page.

6. Analytics and session recording

We use Google Analytics to count visits and see which pages, courses and sources of traffic lead to enrolments. It receives the pages you open, how you arrived, your device and browser, an approximate location derived from your IP address, and the courses you view and buy. It does not receive your name or email address, and web addresses that contain an email or a security token - such as a password reset link - have those parts removed before anything is sent. Google Signals and advertising features are switched off.

When you buy a course, our server reports the purchase to Google Analytics directly, using the random identifier Google Analytics gave your browser, so the sale is counted even if the page is closed early.

We also use Microsoft Clarity, which records how visitors move through the site - clicks, scrolling, and a replay of the session - so we can find pages that confuse people. These recordings can capture what you type into a page. Clarity is configured to mask input fields, we do not use it to read passwords or payment details, and it is not loaded at all on pages whose address contains an email or a security token.

Visitors from the EU, the UK and Switzerland are asked before either tool loads, and nothing is set until they agree; you can change your choice at any time from "Cookie settings" at the bottom of the page. Elsewhere both tools load by default. To opt out, you can block the google-analytics.com, googletagmanager.com and clarity.ms domains, or install Google's Analytics opt-out browser add-on.

Staff accounts are not tracked.

7. Cookies

We use a small number of cookies:

• A session cookie that keeps you signed in. The site does not work without it.
• Your chosen language and text size, so the site looks the same next time.
• Google Analytics (_ga) and Microsoft Clarity analytics cookies, described above.
• Your answer to the cookie question, if you were asked, so we do not ask again.

We do not use advertising cookies and we do not track you across other websites.

8. How long we keep it

• Your account and learning history: for as long as your account is open.
• Certificates: indefinitely, so that a certificate you earned stays valid and printable long after the course has finished.
• Payment records: for as long as tax and accounting law requires.
• Session photographs: until you ask us to remove them, or until they are no longer used.
• Analytics: Google Analytics keeps visit data for 14 months; Microsoft Clarity for as long as its own policy allows.

If you close your account we delete or anonymise what we are not required to keep.

9. Your rights

You can ask us to:

• give you a copy of the data we hold about you;
• correct anything that is wrong;
• delete your data, where we are not required to keep it;
• stop using it for a particular purpose, or withdraw a consent you gave;
• take down a photograph of you.

Write to support@easypm.org and we will respond within 30 days. If you are not satisfied with our answer you can complain to your national data protection authority.

10. Security

Passwords are stored hashed, never in readable form. Payments are handled entirely by Stripe, so card numbers do not reach our servers. Access to student records is restricted to administrators and to the instructor responsible for the course.

No system is perfectly secure. If a breach ever affects your data we will tell you and the relevant authority as the law requires.

11. Children

Our courses are intended for working professionals. We do not knowingly create accounts for anyone under 16. If you believe a child has registered, tell us and we will remove the account.

12. Changes to this policy

If we change how we use your data we will update this page and change the date at the top. Where the change is significant we will tell you by email.

13. Contact

Email: support@easypm.org

WhatsApp and phone: +20 109 401 4982