Carvo Group ("we", "us", or "our") is committed to protecting the privacy and security of the personal information of our students, clients, and website visitors. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and safeguarding of personal information in connection with our training portals, toolkits, and courses.

As a business based in Prince Edward Island (PEI), Canada, our collection and handling of personal information is governed by the Canadian federal Personal Information Protection and Electronic Documents Act (PIPEDA). By enrolling in our courses, registering seat licenses, or using our website, you consent to the practices described in this policy.

1. The Information We Collect

We collect personal information that you voluntarily provide to us when registering for the course, enrolling employees, purchasing seat licenses, or contacting our support team. This may include:

• Account Information: Name, professional email address, phone number, company name, department, job title, and geographic location (e.g., province/state).
• Transaction Data: Billing address, postal code, and payment details. All payments are processed securely through our CPHR-compliant third-party payment gateway (Stripe); we do not store full credit card numbers on our local servers.
• Team Seats & Employee Data: For organizations purchasing a Team & Organization License (where applicable), we collect the names and business emails of the designated managers assigned to the team seats.
• Academic & Certification Progress: Lessons completed, time elapsed, interaction history, quiz results, final assessment submissions, and certificate issue records. This is necessary to certify your eligibility for any applicable continuing professional development (CPD) credits.
• Technical Usage: IP address, browser type, device information, operating system, and data collected via local browser storage or functional cookies to keep you logged into the course player.

2. How We Use Your Information

We use the collected personal information strictly to fulfill our educational service commitments, including:

1. Provisioning and maintaining your access to our courses, training portals, and interactive tools.
2. Managing multi-seat corporate dashboards (if applicable) and providing progress reporting to organizational administrators who hold the primary Team License.
3. Verifying curriculum completion and issuing official course credentials and certificates eligible for continuing professional hours (where applicable).
4. Processing payments, issue invoices, and verifying tax compliance in Prince Edward Island and applicable Canadian provincial jurisdictions.
5. Providing customer service and strategic technical support to keep you moving forward in the training portal.
6. Sending course updates, curriculum additions, and operational resources that are directly related to your enrollment. You may opt out of promotional communications at any time.

3. Consent and Your Control

Consent is voluntary and may be withdrawn at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent for essential services (such as processing payment or maintaining your Thinkific course login), we may no longer be able to provide access to the training portal or support services.

4. Data Sharing and Third-Party Processors

We only share your information with trusted service providers who are essential to our operations, and only to the extent necessary to deliver the program. These partners include:

• Learning Management Platform: Our courses are hosted and securely delivered via Thinkific, which maintains strict security standards for student data.
• Payment Infrastructure: Payment transactions are securely handled by Stripe, ensuring PCI-DSS Level 1 compliance.
• Analytics and Communications: Secure email delivery services and aggregated analytical tools to monitor platform performance and prevent security issues.

All third-party processors are contractually bound to protect your data and are strictly prohibited from using your personal information for any other purpose.

5. Retention and Security of Data

Your personal information is stored securely in virtual servers located within secure cloud environments. We implement robust electronic and administrative safeguards to protect your personal information against loss, theft, unauthorized access, duplication, modification, or disclosure.

Retention Period: We retain account and certification progress data as long as your account remains active so you can access your lifetime curriculum benefits. Financial transaction records are retained for a minimum of 7 years in compliance with Canadian tax audit laws.

6. Accessing and Correcting Your Information

Under PIPEDA, you have the right to request access to the personal information we hold about you and to request corrections if you believe any information is inaccurate or incomplete. To make an access or correction request, please contact our Privacy Compliance Officer at the address below.

7. Privacy Contact & Questions

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices in Prince Edward Island, please contact us:

Carvo Group
Attn: Privacy Compliance Officer
Email: [email protected]
Address: P.O.Box 21002, Charlottetown, PE C1A 9H6

If we are unable to resolve your concern, you have the right to contact the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.