Privacy Policy
Last updated: June 17, 2026
Fourth Tech (“Fourth Tech,” “we,” “us”) provides online GRC and cybersecurity training. This policy explains what personal data we collect, why, how we protect it, and the rights you have over it. We practice the privacy and security disciplines we teach.
1. Information we collect
Account information you provide when you register: your name, email address, and password (passwords are stored only as salted hashes by our authentication provider — we never see them).
Learning activity: courses and labs you enroll in, lesson progress, quiz and exam attempts, and assignment submissions, so we can track your progress and issue credentials.
Payment information: when you purchase, payment is processed by our payment provider (Stripe). We do not collect or store your full card number — we receive only a confirmation and limited billing metadata.
Technical data: standard server logs and cookies (see our Cookie Notice) used to operate, secure, and improve the site.
2. How we use your information
We use your data to: create and manage your account; deliver courses, labs, and assessments; process payments and issue receipts; provide support; send service messages (and, only with your consent, marketing); and maintain the security and integrity of the platform.
3. Legal bases (GDPR / UK GDPR)
Where the GDPR applies, we rely on: performance of a contract (to deliver the training you purchase); your consent (for optional marketing and non-essential cookies); legitimate interests (to secure and improve the service); and compliance with legal obligations (e.g., tax and accounting records).
4. Service providers we share data with
We share the minimum data necessary with vetted processors who act on our behalf under contract:
Authentication & database hosting (to store your account and learning records).
Payment processing (to take payment securely).
Application hosting and content delivery.
Scheduling (for consultations you book) and email delivery (for service messages).
We do not sell your personal data.
5. Data retention
We keep your account and learning records for as long as your account is active and as needed to provide the service, then for any period required by law (for example, financial records). You can request deletion at any time, subject to those legal retention requirements.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to processing, and to withdraw consent. If you are in California, you have rights under the CCPA/CPRA, including the right to know and delete, and the right not to be discriminated against for exercising them. To exercise any right, contact us via our Contact page.
7. International transfers
Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
8. Security
We protect your data with encryption in transit (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you and the relevant authorities of a breach as required by law.
9. Children
Fourth Tech is intended for adults and is not directed to children under 16. We do not knowingly collect data from children.
10. Changes & contact
We may update this policy and will revise the date above when we do. Questions or requests? Reach us through our Contact page.
