Privacy Policy

Legal Framework

Compliance with U.S. Privacy Regulations

OSHAcademy respects and complies with applicable U.S. privacy and data protection frameworks, including:

• California Consumer Privacy Act (CCPA)
• California Privacy Rights Act (CPRA)
• Federal Trade Commission Act (FTC Act) – Section 5 (Consumer Data Protection)
• Relevant U.S. consumer protection and electronic data protection standards

These regulations guide how organizations collect, use, store, and protect personal data.

Data Collection

Information We Collect

OSHAcademy may collect the following types of information:

• Personal identification details (name, email, phone number, nationality)
• Course registration and enrollment details
• Certification and examination records
• Verification information for issued certificates
• Payment or billing information (where applicable)
• Website usage data (IP address, browser information, cookies)

Protection

Data Security

OSHAcademy uses modern technical and administrative safeguards to protect personal data. All sensitive records are maintained in secure and encrypted databases to prevent unauthorized access, misuse, or disclosure.

Access to data is restricted to authorized personnel only.

Verification

Certificate Verification System

To maintain transparency and trust, OSHAcademy may publish limited certification information in its secure verification database, allowing employers and organizations to verify certificates issued by OSHAcademy.

Only necessary verification data is accessible through this system.

Third Parties

Data Sharing

OSHAcademy does not sell, trade, or rent personal information to third parties. Information may only be shared:

• When required by law or regulatory authorities
• For legitimate certificate verification purposes
• With authorized training partners under strict confidentiality