Under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws, you have specific rights regarding your personal data. IFO4 is committed to honoring these rights and making it easy for you to exercise them.
As outlined in GDPR Articles 13 through 22, you have the right to be informed about how your data is collected and used, the right to access your data, the right to have it corrected or deleted, the right to restrict or object to processing, the right to data portability, and rights related to automated decision-making. IFO4 does not use automated decision-making or profiling that produces legal effects.
CCPA: California residents have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (IFO4 does not sell personal information), and the right to non-discrimination for exercising these rights.
To provide, maintain, and improve the IFO4 platform, process certifications, deliver course content, and manage your membership.
To analyze usage patterns (in aggregate) to improve our platform, develop new features, and enhance the user experience.
To send transactional emails (receipts, certification updates), and with your consent, newsletters and product updates.
To comply with legal obligations, resolve disputes, enforce our agreements, and protect the rights and safety of our users.
| Data Category | Retention Period |
|---|---|
| Profile Data | Duration of account + 30 days after deletion request |
| Certification Records | 7 years (regulatory requirement for professional credentials) |
| Payment Records | 7 years (tax and financial compliance) |
| Activity Logs | 2 years from creation, then anonymized |
| Analytics Data | 13 months, then aggregated and anonymized |
| Support Tickets | 3 years from resolution |
You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
You have the right to have inaccurate personal data corrected and incomplete data completed.
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON).
You have the right to request restriction of processing of your personal data under certain conditions.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
For any questions about this privacy policy, your personal data, or to exercise your rights, contact our Data Protection team:
IFO4 Data Protection Officer
privacy@ifo4.org