Privacy Notice

Who We Are

DPO School is operated by Rindogatan LLC. We provide IAPP certification training courses. Contact us at dposchool@todo.law.

What Data We Collect

When you submit a booking request, we store:

• Your name, email address, phone number, and company name
• Your course preference, preferred dates and number of attendees
• Any additional message you choose to provide
• The status of your booking, our internal notes on it, when it was paid, and when we sent you a payment reminder

When you pay for a course, Stripe processes your card. We do not see or store your card number. We store the Stripe reference for the payment. To issue an invoice, we read from Stripe the billing name and address you gave at checkout and place them on the invoice we email to you.

When you subscribe to e-learning, we store:

• Your email address (and your name, if given)
• Your Stripe customer and subscription references, the status of your subscription and its renewal date
• If a renewal payment fails, the date it first failed (to run the 7-day grace period); cleared once you pay
• Login links (valid for 1 hour) and login sessions (valid for 30 days)

When you press “Manage subscription”, you go to a Stripe page where you can cancel, change your card or download invoices. Stripe holds your card details and invoices; we do not see your card number.

To stop abuse of our forms, login and payment pages, we count recent requests from each IP address. We store a coded form of the address (a keyed hash, not the address itself) with the count, for a window of at most one hour; the record is deleted with the next request to any of those pages after the window ends.

When you log in to e-learning, we place one cookie in your browser (learn_session) that keeps you logged in for 30 days. We set no advertising or analytics cookies ourselves.

We count visits to our pages with Vercel Web Analytics, without cookies and without identifying visitors.

Our server logs record the email address each message is sent to, and when.

How We Use Your Data

We use your personal data to:

• Process and respond to your booking request
• Communicate about course availability and scheduling
• Send booking confirmations, payment information, payment reminders and invoices
• Run your e-learning subscription: check access, send login links and renew it

Who Receives Your Data

We use these service providers to run the site:

• Vercel: hosts the website and counts page visits
• Neon: hosts our database
• Stripe: takes card payments and subscriptions
• Resend: sends our emails
• Bunny.net: delivers the videos, audio and PDF files of the e-learning courses
• Cal.com: the booking calendar on our contact page, if you use it, under Cal.com's own terms

Legal Basis

We process your data based on your consent (submitting the booking form) and our legitimate interest in managing course registrations.

Data Retention

We retain booking data for the duration of our business relationship and as required by applicable law. You may request deletion at any time.

Your Rights

You have the right to access, correct, delete, or port your personal data. Contact us at dposchool@todo.law.

Contact

The Hurt Hub @ Davidson College, 210 Delburg St., Davidson, NC 28036
(737) 336-4630
dposchool@todo.law