Coreveon
Log In / Sign Up Talk to Us
About
Services Carbon Accounting & Technical AssuranceScience-Based Target Setting & DecarbonisationClimate Risk & Scenario ModellingSustainability & Compliance ReportingGreen & Transition Finance
Industries Financial InstitutionsReal Estate & Built EnvironmentAgriculture & Food SystemsCorporatesPublic Sector & Development
Learning Free LearningProfessional ProgrammesCertification Companions Institutional Capacity Building Mock Exams
Resources Insights Case Studies Methodology Resource Library
Log In / Sign Up Talk to Us
Home / Privacy Policy

Privacy Policy

Last updated: [Insert Date]

This Privacy Policy explains how Coreveon ("Coreveon", "we", "us", or "our")
collects, uses, discloses, and safeguards information when you visit our website or use our
learning platform (collectively, the "Service"). It should be read together with our
Terms of Service. If you do not agree with this Privacy Policy, please do not use
the Service.

1. Information We Collect

1.1 Information you provide to us directly.

  • Account information: when you sign up, we collect your full name, email address, and
    password (stored as an irreversible hash — we never store your password in plain text),
    and optionally your organisation, industry, and what brought you to Coreveon.
  • Course activity: which courses you enrol in, your progress through chapters, your quiz
    answers and scores, and any certificates you earn.
  • Payment information: if you purchase a paid course, our payment processor, Stripe,
    collects your card details directly — we receive only a payment confirmation, transaction
    reference, and the amount paid. We never see or store your full card number.
  • Communications: information you submit through our contact form (name, email,
    organisation, role, topic, and message) or newsletter sign-up (email address), and any
    correspondence you send us.

1.2 Information collected automatically. When you use the Service, we and our service
providers may automatically collect certain information through cookies and similar
technologies, including your IP address, browser type and version, device information,
pages visited, and the date and time of your visit. See Section 5 (Cookies) for more detail.

1.3 Information from third parties. If you pay for a course, Stripe shares limited
transaction information with us (such as confirmation that payment succeeded, the amount,
and a payment reference) as described in Section 1.1.

2. How We Use Your Information

We use the information we collect to:

  • create and administer your account and provide the Service, including tracking your
    course progress, gating access to sequential course content, and issuing certificates;
  • process payments for paid courses and maintain records of those transactions;
  • send you transactional emails, such as a welcome email, email address verification,
    password reset links, and certificate-earned notifications;
  • send you our newsletter, where you have subscribed to it — you can unsubscribe at any time
    using the link in any newsletter email or by contacting us;
  • respond to enquiries you submit through our contact form;
  • detect, prevent, and address fraud, abuse, security incidents, and technical issues,
    including rate-limiting abusive login, signup, or form-submission attempts;
  • maintain the security and integrity of certificates we issue, including through the public
    certificate verification feature;
  • comply with our legal obligations and enforce our Terms of Service;
  • improve and develop the Service, including understanding how courses are used in aggregate.

Legal bases (EEA/UK users). Where applicable data protection law requires it, we process
your personal data on the following legal bases: performance of a contract with you (to
provide the Service you sign up for), our legitimate interests (such as securing the Service
and improving it, balanced against your rights), your consent (such as for the newsletter,
which you may withdraw at any time), and compliance with a legal obligation.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following
circumstances:

  • Service providers: with third parties who perform services on our behalf, such as
    Stripe (payment processing) and our email delivery provider (sending transactional and
    newsletter emails), under contractual obligations to protect your information and use it
    only for the purposes we specify.
  • Legal requirements: where required to do so by law, regulation, legal process, or
    governmental request, or where we believe disclosure is necessary to protect our rights,
    your safety, or the safety of others, investigate fraud, or respond to a government
    request.
  • Business transfers: in connection with a merger, acquisition, reorganisation, or sale
    of assets, in which case personal information may be transferred as part of that
    transaction, subject to standard confidentiality arrangements.
  • With your consent: for any other purpose disclosed to you at the time we collect the
    information, or with your consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to
provide you the Service, comply with our legal obligations, resolve disputes, and enforce
our agreements. Course completion records and certificates are retained indefinitely (unless
you request deletion under Section 6) so that a certificate can continue to be verified using
our public verification page. If you delete your account, we will delete or anonymise your
personal information within a reasonable period, except where we are required to retain it
for legal, tax, or accounting purposes.

5. Cookies and Similar Technologies

We use cookies and similar technologies (such as local storage) for purposes including:

  • Strictly necessary: keeping you signed in, remembering items like your language
    preference, and protecting the Service against cross-site request forgery.
  • Functional: remembering your preferences to improve your experience.
  • Analytics: understanding how visitors use the Service so we can improve it (if and
    when enabled).

You can control cookies through your browser settings, including blocking or deleting them;
please note that some parts of the Service may not function properly if you disable
strictly necessary cookies.

6. Your Rights

Depending on where you live, you may have some or all of the following rights regarding your
personal information:

  • Access: request a copy of the personal information we hold about you.
  • Correction: ask us to correct inaccurate or incomplete information (you can update
    much of this yourself from your account).
  • Deletion: ask us to delete your personal information, subject to certain exceptions
    (for example, where we need to retain information to comply with a legal obligation or to
    maintain the integrity of certificate records).
  • Portability: request a copy of your information in a structured, machine-readable
    format, where technically feasible.
  • Objection / restriction: object to or ask us to restrict certain processing of your
    information, including direct marketing (such as the newsletter, which you can unsubscribe
    from at any time).
  • Withdraw consent: where we rely on your consent, withdraw it at any time without
    affecting the lawfulness of processing before your withdrawal.

To exercise any of these rights, contact us at [Contact Email]. We may need to verify your
identity before fulfilling your request. If you are in the EEA or UK, you also have the
right to lodge a complaint with your local data protection authority.

7. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal
information from children under that age. If you believe a child has provided us with
personal information, please contact us at [Contact Email] and we will take steps to delete
it.

8. International Data Transfers

We may transfer, store, and process your information in countries other than the one in
which you live, including countries that may not have data protection laws equivalent to
those in your own country. Where we do so, we take steps to ensure appropriate safeguards
are in place, such as standard contractual clauses, to protect your information consistent
with this Privacy Policy and applicable law.

9. Data Security

We implement technical and organisational measures designed to protect your personal
information, including password hashing, rate limiting on authentication and form
endpoints, access controls restricting who within Coreveon can view your data, and
encryption of data in transit. No method of transmission or storage is completely secure,
however, and we cannot guarantee absolute security.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will
take reasonable steps to notify you, such as by posting a notice on the Service or updating
the "Last updated" date above. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact
us at:

Coreveon
[Registered Company Address]
[Contact Email]