Privacy Policy

1. Who is responsible for your data

Hromium is the data controller for the service described in this policy. Questions and privacy requests can be sent to hi@hromium.com.

2. Data we collect

• Account data: name, email address, authentication provider, and account identifiers.
• Learning data: lesson progress, answers, completion status, and saved preferences.
• Purchase data: Stripe customer and transaction identifiers, payment status, amount, currency, and billing details. We do not store full card numbers.
• Technical data: IP address, browser and device information, security logs, requested pages, referrer, and campaign parameters.
• Communications: messages you send to us and your email preferences.

3. Why we use it

We process account, purchase, and learning data to provide the service and fulfil our contract with you. We use security and operational logs to protect the service and prevent abuse based on our legitimate interests. We use analytics or send marketing email only where we have the consent required by law. We also process records where necessary to meet legal and tax obligations.

4. Service providers

We share only the data needed to operate the service with providers that support hosting and databases, Stripe for payments, Zoho for transactional email, and Google Analytics when analytics is enabled and consent has been given. These providers may process data in other countries using the safeguards required by applicable law. We do not sell personal data.

5. Cookies and analytics

Essential cookies keep you signed in, protect account actions, and remember necessary preferences. Optional analytics cookies help us understand which pages and course steps are useful. Optional cookies must not be loaded before you make a choice where consent is required. You can withdraw consent or remove cookies through your browser and the site’s cookie controls.

6. Retention

We keep account and course records while your account and purchased access remain active. Purchase records are retained for the periods required by tax and accounting law. Security logs are normally kept for up to 90 days, support messages for up to 24 months, and Google Analytics event data for up to 14 months. We may retain limited records longer when required to establish or defend legal claims.

7. Your rights

Depending on applicable law, you may ask to access, correct, erase, restrict, or export your data, object to certain processing, or withdraw consent. You may also complain to the Spanish Data Protection Agency or your local supervisory authority. Send requests to hi@hromium.com. We may need to verify your identity before acting on a request.

8. Security and children

We use reasonable technical and organisational measures to protect personal data, but no online service can guarantee absolute security. The service is intended for adults and is not directed to children under 18.

9. Changes and contact

We may update this policy when the service or legal requirements change. The date above shows the latest revision. Contact us at hi@hromium.com.