Information We Collect

• Account details — your name, email address, optional alternate email, phone number, country, role (student, instructor or administrator), public user ID, profile photo, and bio.

• Authentication data — a hashed password (using bcrypt; we never see your plaintext password) and, for two-factor authentication, a TOTP secret bound to your authenticator app. We also store failed sign-in counts and lock timestamps for security.

• Learning data — courses you are enrolled in, lesson progress, assessment attempts and answers, assignment submissions, certificates issued to you, and the date you completed each attempt.

• Communications — messages you send or receive within the platform, announcements you receive, notifications, and support tickets including any attachments you submit.

• Files you upload — lesson videos, course thumbnails, assignment attachments, ticket attachments and certificate design files.

• Technical data — a session cookie used to keep you signed in, your selected theme/RTL cookie, browser and device information, and IP address.

How We Use Your Information

• to provide access to courses, lessons, assessments, assignments and certificates;

• to authenticate you, enforce two-factor authentication, detect and respond to failed sign-in attempts, and time out inactive sessions;

• to record course progress per attempt and issue certificates upon completion;

• to send platform notifications about enrolments, messages, assessment results, announcements, assignments and ticket updates;

• to respond to your support requests and contact-form submissions;

• to keep the Service secure, debug issues, and meet our legal obligations.

Sharing of Information

We do not sell your personal information. We share it only with:

• the administrators and instructors of the courses you are enrolled in (for example, to grade assessments, manage enrolments, or review submissions);

• service providers acting on our behalf (for example, hosting, email delivery and payment processing) under written confidentiality and data-protection commitments;

• affiliated companies within the Enterprise Technology International group, where they support delivery of the Service;

• regulators, courts or law-enforcement bodies where we are legally required to disclose information.

Data Security

We apply technical and organisational measures to protect your information, including:

• passwords stored using salted bcrypt hashes;

• mandatory two-factor authentication on every sign-in;

• automatic sign-out after five minutes of inactivity;

• account lockout after five consecutive failed sign-ins, unlockable only by an administrator;

• role-based access controls so students, instructors and administrators only see what their role permits.

Cookies

We use a small number of cookies, including a secure session cookie used by NextAuth to keep you signed in, and preference cookies that remember your selected theme and reading direction.

We do not use third-party advertising or cross-site tracking cookies.

Data Retention

We retain your account information for as long as your account is active. Enrolment records, lesson progress and certificates are retained as a long-term record of completed training, even after a student is removed from an in-progress attempt, so that prior achievements remain visible on the dashboard.

If you ask us to delete your account, we will remove your personal information within a reasonable period, subject to records we are required to keep by law.

Your Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;

• correct information that is inaccurate or out of date (you can update most profile fields yourself from Settings);

• request deletion of your personal information;

• object to or restrict certain uses of your information;

• withdraw consent for processing that relies on it.

Children’s Privacy

Sardonyx Nex is intended for users aged 18 and over, or younger users whose parent, guardian or training organisation has consented on their behalf. We do not knowingly collect personal information from children under 13.

Third-Party Links

Course content may link to external websites or embedded videos. We are not responsible for the privacy practices of those third parties — please review their own policies before sharing information with them.

International Transfers

Sardonyx Nex is operated from Jamaica. If you access the Service from outside Jamaica, your information will be transferred to and processed in Jamaica or in jurisdictions where our service providers operate, under appropriate safeguards.

Updates to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the platform or by email.

Contact Us

Enterprise Technology International — Sardonyx Nex

264 Pineapple Drive, Jamaica

Phone: +1 876-383-0421

Email: info@sardonyxcims.com · support@sardonyxcims.com