1. Data we collect
Account: your name, email, the name to print on certificates, country, company or organisation, language and, if you add one, a photo.
Learning and exams: course progress, exam answers, practical submissions, FRET reports and results. Security and integrity: IP address, approximate location, device and browser, and the timing of each attempt.
Purchases: what you bought, when, and any billing details you add. Card data is handled by Stripe and never reaches IDFE. Messages: what you send through the contact form and My Account › Messages.
2. Why we use it
To provide courses and exams, grade them, issue and verify certificates, review exam integrity, process payments, keep tax records and answer your messages. The legal bases are contract, legitimate interest (security, integrity and public verification of issued credentials), legal obligation and, where we ask for it, consent.
Service providers process data on our behalf under data processing agreements: Stripe (payments), Resend (sign-in links and email replies to contact messages), Google (optional sign-in), Hostinger (hosting) and PostHog (analytics, only with your consent). Where data leaves your country, standard contractual clauses or equivalent safeguards apply.
Essential cookies keep you signed in and remember your language. Analytics cookies are set only if you accept them, and you can change your choice at any time under Cookie preferences in the footer.
3. The public registry
When a certificate is issued, anyone with its code can see the holder's name, country and company or organisation, the certification, its dates and its status (valid, expired or revoked), together with the badges the holder has earned.
Your photo appears on your public credential pages only if you choose to show it, and you can hide it again at any time in your profile.
4. Your rights (LGPD and GDPR)
You can access, correct, export or delete your data, object to processing and withdraw consent. Most of this can be done in My Account › Profile. When you delete your account you choose whether your issued credentials stay verifiable.
For any other request, write to us through the contact form and choose the topic “Privacy request”. We reply within the time limits set by law. You may also complain to your data protection authority, such as the ANPD in Brazil or the authority of your EU country.
5. Retention
Account data is kept while your account is active. Exam answers, submissions and integrity logs are kept for 5 years, the validity of a certificate, so that results can be reviewed and appeals decided. Purchase records are kept for as long as tax law requires.
Issued credentials stay in the public registry, also after they expire, so that their codes can still be checked, unless you ask for them to be withdrawn.