Privacy

This notice describes what the Academy holds about you, why, and what you can do about it. It is written to be read, not to be survived.

## What we hold

If you create an account: your name, your email address, and your date of birth. The date of birth is asked for because the rules differ for people under eighteen and we cannot apply them without knowing.

If you take a course: which lessons you have opened and completed, your assessment attempts and scores, and any work you submit for marking.

If you are issued a certificate: your name as it appears on it, the credential, the dates, and the serial number. This record is permanent by design — a certificate that could be quietly deleted could not be verified later.

If you write to us through the contact form: what you wrote, used to answer you and for nothing else. It is not added to a mailing list.

## What we do not hold

We do not hold payment card details. When a payment provider is connected, cards will be handled by that provider and never reach this site.

We do not build a profile of you across other websites, and we do not buy or sell data about you.

## Who can see it

Your learning record is yours. Instructors on a course you are taking can see your work on that course. Administrators can see what they need to run the Academy. Nobody else can, and the database enforces that with row-level security rather than trusting the application to remember.

A certificate's serial can be checked by anyone, and doing so reveals the holder's name, the credential and the dates — that is what verification means. It reveals nothing else: not your email, not your other courses, not your grades.

## Young learners

The Academy teaches people as young as twelve. A minor's account requires a guardian, profiles are not public, and communication between learners is not enabled.

## Your rights

You can ask for a copy of what we hold, ask for it to be corrected, or ask for your account to be closed. Write to contact@unescocp.academy. Closing an account removes your personal details; issued certificates keep the serial and the credential, because a verifiable record that disappears was never verifiable.

## Changes

This notice carries a version number below. Consent recorded against it references that version, so you can always tell what you agreed to.