Effective Date: 17/04/2026
Last Updated: 17/04/2026
Company: Fieldemy (hereinafter “Fieldemy,” “we,” “us,” or “our”)
Platform: https://fieldemy.com
At Fieldemy, your privacy is a priority. This Data Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our learning management system (LMS), website, mobile apps, and related services (collectively, the “Platform”).
By using Fieldemy, you consent to the data practices described in this policy. If you do not agree, please do not use our Platform.
1. Information We Collect
We collect information that identifies, relates to, describes, or could be associated with you (“Personal Data”).
1.1 Information You Provide Directly
| Category | Examples |
|---|---|
| Account & Profile | Full name, email address, username, password, profile photo (optional), date of birth (if required for age verification), language preference |
| Payment Information | Billing name, billing address, payment method details (credit/debit card number, PayPal email). Note: Full payment data is processed by third-party payment processors (e.g., Stripe, PayPal); we do not store complete card numbers. |
| Learning Activity | Course enrollments, progress data, quiz/test answers, assignment submissions, completion certificates, time spent on lessons |
| Communications | Support tickets, forum posts, course reviews, messages to instructors or other learners, survey responses |
| Corporate/Bulk Data | For enterprise clients: employee names, work emails, job titles, department, and training completion records |
1.2 Information Collected Automatically
When you use the Platform, we may automatically collect:
| Category | Examples |
|---|---|
| Device & Browser | IP address, browser type and version, operating system, device identifiers |
| Usage Data | Pages visited, clicks, scrolls, search queries, course access timestamps, video playback events |
| Location Data | Approximate geographic location derived from IP address (city/region level) |
| Cookies & Tracking | See Section 8 (Cookies and Tracking Technologies) |
1.3 Information from Third Parties
- Social logins: If you sign up via Google, LinkedIn, or Facebook, we receive your public profile information (name, email, profile picture) as permitted by that platform.
- Enterprise clients: Your employer may provide your information to enroll you in corporate training plans.
- Payment processors: We receive confirmation of payment and masked payment details (e.g., last 4 digits of card).
2. How We Use Your Personal Data
We use your Personal Data for the following purposes:
| Purpose | Legal Basis (for GDPR/UK) |
|---|---|
| To provide and manage your account | Contract performance |
| To process enrollments and payments | Contract performance |
| To deliver course content and track progress | Contract performance |
| To issue certificates and completion records | Contract performance |
| To communicate important updates (e.g., policy changes, course cancellations) | Legitimate interest / Legal obligation |
| To provide customer support | Legitimate interest |
| To improve our Platform (analytics, bug fixing, feature development) | Legitimate interest |
| To personalize your experience (e.g., course recommendations) | Legitimate interest / Consent (where required) |
| To prevent fraud, security incidents, and unauthorized access | Legal obligation / Legitimate interest |
| To comply with legal and regulatory requirements | Legal obligation |
| To send marketing emails (promotions, new courses) – you may opt out anytime | Consent |
Important: We do not sell your Personal Data to third parties. We do not use automated decision-making or profiling that produces legal effects without human review.
3. Sharing & Disclosure of Personal Data
We may share your Personal Data in the following circumstances:
3.1 Service Providers (Processors)
We engage third-party companies to perform services on our behalf, such as:
- Cloud hosting (e.g., AWS, Google Cloud)
- Payment processing (Stripe, PayPal)
- Email delivery (SendGrid, Mailchimp)
- Analytics (Google Analytics, Mixpanel)
- Video hosting (Vimeo, Wistia)
- Customer support tools (Zendesk, Intercom)
These providers are contractually bound to process data only for specified purposes and to maintain confidentiality.
3.2 Instructors & Course Creators
If you enroll in a course created by a third-party instructor, we share with that instructor:
- Your name and email address
- Course progress and quiz scores (as needed for grading/certification)
- Any direct messages you send to the instructor
Instructors may not use your data for marketing unless you separately consent.
3.3 Corporate / Enterprise Clients
If you access Fieldemy through an enterprise account (e.g., your employer):
- Your employer receives progress reports and completion status for assigned courses.
- Your employer does not receive your payment details or personal messages.
- Your employer may request account suspension or data deletion upon your departure.
3.4 Legal Compliance & Safety
We may disclose your Personal Data if required by law, subpoena, court order, or governmental request, or to:
- Protect the security and integrity of the Platform
- Prevent fraud or illegal activity
- Protect the rights, property, or safety of Fieldemy, users, or the public
3.5 Business Transfers
If Fieldemy is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will notify you via email and/or a prominent notice on the Platform.
4. Data Retention
We retain your Personal Data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Account & profile data | Until you delete your account, plus 30 days for recovery, then anonymized |
| Course progress & certificates | For the duration of your account + 2 years for record-keeping |
| Payment records | 7 years (for tax and accounting compliance) |
| Support tickets & communications | 3 years after resolution |
| Analytics & usage logs | 26 months (aggregated/anonymized after 13 months) |
| Marketing data | Until you unsubscribe or request deletion |
After account deletion: Your personal identifiers are removed, but anonymized learning analytics and certificates (without name) may be retained for research or platform improvement.
5. Your Rights & Choices
Depending on your jurisdiction (e.g., GDPR for EEA/UK, CCPA for California), you may have the following rights:
| Right | Description |
|---|---|
| Access | Request a copy of your Personal Data we hold |
| Rectification | Correct inaccurate or incomplete data |
| Erasure (Right to be Forgotten) | Request deletion of your data, subject to legal obligations |
| Restriction | Limit how we use your data |
| Data Portability | Receive your data in a structured, machine-readable format |
| Object | Object to processing based on legitimate interests or direct marketing |
| Withdraw Consent | Withdraw previously given consent (e.g., marketing emails) |
| Opt-out of Sale/Sharing | We do not sell data, but you may opt out of targeted ads (see Section 8) |
| Non-Discrimination | Exercise your rights without fear of being charged differently |
How to Exercise Your Rights
- Self-service: Account Settings → Privacy → Download/Delete My Data
- Email request:
privacy@fieldemy.com(please include “Privacy Request” in subject line) - Response time: Within 30 days (we may extend by 60 days for complex requests, with notice)
Verification: We may ask for proof of identity (e.g., government ID or signed declaration) before processing certain requests.
6. Children’s Privacy
Fieldemy is not directed at children under 16 (or the applicable age of digital consent in your country, which may be 13–16). We do not knowingly collect Personal Data from children under 16.
If you believe a child has provided us with Personal Data, please contact us at privacy@fieldemy.com. Upon verification, we will delete the information.
For EU users: Under GDPR, parental consent is required for children under 16 (member states may lower to 13).
7. International Data Transfers
Fieldemy operates from [Your Country] and may store and process data in servers located in the [US, EU, or other regions].
- For EEA/UK users: We ensure adequate protection for transfers outside the EEA/UK using:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreement (IDTA) where applicable
- Data processing agreements with our service providers
- For users worldwide: By using Fieldemy, you consent to the transfer of your data to countries that may have different data protection laws than your own.
8. Cookies & Tracking Technologies
We use cookies, web beacons, and similar technologies to:
| Cookie Type | Purpose |
|---|---|
| Essential | Enable login, shopping cart, security, and basic functionality (cannot be disabled) |
| Preference | Remember language, video playback speed, and display settings |
| Analytics | Understand how users navigate the Platform (Google Analytics, etc.) |
| Marketing | Serve relevant ads on third-party sites (Facebook, Google Ads). You can opt out via your browser or our cookie consent banner. |
Your Choices:
- Manage cookies via your browser settings (may break some functionality).
- Use our cookie consent manager (available on first visit and in account settings).
- Opt out of Google Analytics: tools.google.com/dlpage/gaoptout
- Opt out of interest-based ads: optout.aboutads.info (US) or youronlinechoices.eu (EU)
9. Data Security
We implement appropriate technical and organizational measures to protect your Personal Data, including:
- Encryption: TLS 1.2+ for data in transit; AES-256 for data at rest
- Access controls: Role-based access to customer data; background checks for employees
- Regular testing: Vulnerability scans, penetration tests, and security audits
- Incident response: A breach notification plan in compliance with GDPR/CCPA (72 hours for regulators, without undue delay to affected users)
Despite our efforts, no method of transmission over the Internet is 100% secure. You use the Platform at your own risk.
If you suspect a security breach involving your account, contact security@fieldemy.com immediately.
10. Third-Party Links & Services
The Platform may contain links to external websites (e.g., YouTube videos, recommended tools). This policy does not apply to those third parties. We are not responsible for their privacy practices. Please review their policies before providing any Personal Data.
11. Updates to This Privacy Policy
We may update this policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.
- Material changes (e.g., new data sharing practices, international transfers) will be notified via:
- Email to your registered address (30 days in advance where feasible)
- A prominent banner on the Platform
- Non-material changes (e.g., clarifications, typo fixes) are effective immediately upon posting.
Your continued use of Fieldemy after the effective date constitutes acceptance of the revised policy.
12. Jurisdiction-Specific Provisions
12.1 California Residents (CCPA/CPRA)
In addition to rights in Section 5, California residents have:
- Right to Know: Categories of Personal Data collected, sources, business purposes, and third parties with whom we share.
- Right to Opt-Out of “Sharing” for Cross-Context Behavioral Advertising: We do not sell data, but we use cookies for targeted ads. Use “Do Not Sell or Share My Personal Information” link in our footer.
- Sensitive Personal Information: We do not collect sensitive data (SSN, precise geolocation, biometrics, etc.).
- Shine the Light: For California’s “Shine the Light” law (disclosure of data shared for direct marketing), we do not share for that purpose. You may still request a list of categories shared by emailing
privacy@fieldemy.com.
12.2 EEA/UK Residents (GDPR/UK GDPR)
- Data Controller: Fieldemy [Insert Legal Entity Name], [Insert Address]
- Data Protection Officer (DPO):
dpo@fieldemy.com - Supervisory Authority: You have the right to lodge a complaint with your local Data Protection Authority (e.g., ICO in UK, CNIL in France).
- Legal Bases Summary: See Section 2. For legitimate interests, we balance our needs against your rights (e.g., improving security, analytics, and support).
12.3 Brazil (LGPD)
You have the same rights as Section 5, plus the right to anonymization, blocking, or deletion of unnecessary data. You may indicate your consent preferences at registration.
12.4 Australia (Privacy Act)
We comply with the Australian Privacy Principles (APPs). You may make a complaint to the OAIC if unsatisfied with our response.
13. Contact Information
For privacy-related questions, requests, or complaints:
Data Privacy Team
Email: privacy@fieldemy.com (preferred)
Support: support@fieldemy.com
DPO (Europe/International): dpo@fieldemy.com
Mail: [Insert full physical address]
Phone: [Optional – insert number, noting that calls may be recorded]
Response time: 2 business days for acknowledgment; 30 days for substantive response.
Appendix: Quick Reference for Common Requests
| What you want | How to do it |
|---|---|
| Delete my account & data | Account Settings → Delete Account, or email privacy@fieldemy.com |
| Stop marketing emails | Click “Unsubscribe” in any email or Account Settings → Notifications |
| Download my data | Account Settings → Privacy → Export Data |
| Report a data breach | security@fieldemy.com |
| Complaint about an instructor | support@fieldemy.com |
| Exercise GDPR/CCPA rights | privacy@fieldemy.com with “Privacy Request” in subject line |