Privacy Policy
Last Updated: February 2025
At Rymbron, we understand that your personal information matters. This isn't one of those policies written by lawyers for lawyers. We've tried to make this straightforward because we think you deserve to know exactly what we do with your data.
We're a Canadian company based in Toronto, so we follow Canadian privacy laws including PIPEDA (Personal Information Protection and Electronic Documents Act). If you're in Ontario, CASL (Canada's Anti-Spam Legislation) also applies. We take these obligations seriously.
When you use our investing education services, we collect some information about you. Some of it you give us directly. Other bits we gather as you interact with our platform. Here's the full picture.
What Information We Collect
Information You Provide Directly
When you sign up for our learning programs or contact us, you share certain details with us. This usually includes your name, email address, phone number, and sometimes your mailing address if you're registering for specific programs.
If you enroll in paid courses, we'll also collect payment information. Though honestly, we don't store your full credit card details ourselves. That's handled by our payment processor, which is certified to handle financial data securely.
Education-Related Information
As you work through our investing education materials, we track your progress. This includes which lessons you've completed, quiz scores, course completion rates, and any questions you ask our instructors.
We use this to personalize your learning experience and to understand where students typically struggle. If a particular concept trips up most learners, that tells us we need to improve how we teach it.
Information We Collect Automatically
Like most websites, we automatically gather some technical information when you visit rymbron.vip. This includes your IP address, browser type, device information, and how you navigate through our site.
We use cookies and similar technologies. Some are essential for the site to function properly. Others help us understand how people use our platform so we can make improvements. You can control non-essential cookies through your browser settings, though some features might not work as smoothly if you disable them.
| Data Type | Purpose | Retention Period |
|---|---|---|
| Account Information | Service delivery, account management | Duration of relationship plus 2 years |
| Learning Progress | Course completion, personalization | Duration of relationship plus 3 years |
| Payment Records | Billing, financial reporting | 7 years (tax compliance) |
| Technical Logs | Security, troubleshooting | 90 days |
| Communications | Support, service improvement | 3 years |
How We Use Your Information
The main reason we collect information is pretty obvious: to provide you with investing education. But let's break down the specifics.
Delivering Our Services
We use your contact information to communicate with you about your courses, send login credentials, and notify you about updates to programs you've enrolled in. Your learning progress data helps us pick up where you left off and recommend relevant next steps.
When you reach out with questions, we reference your account history to provide better support. It's frustrating to explain your situation repeatedly to different people, so we keep notes about previous interactions.
Improving What We Offer
We analyze how students engage with our materials to figure out what's working and what isn't. If everyone's breezing through a particular module in five minutes, maybe it's too simple. If completion rates drop off at a specific point, we investigate why.
When we use data for improvement purposes, we typically look at aggregated, anonymized information rather than individual behavior. We care about patterns across all users, not what any single person is doing.
Marketing and Communications
If you've given us permission, we'll send you information about new courses, educational resources, and occasionally special offers. These emails include investing tips and market education content, not just sales pitches.
You can unsubscribe anytime by clicking the link at the bottom of any marketing email. We'll still send you important account-related messages like password resets or changes to our terms, but the promotional stuff stops immediately.
Legal and Security Purposes
Sometimes we need to use your information to comply with legal obligations, respond to valid legal requests, or protect our rights and the safety of our users. We don't do this lightly, but there are situations where it's necessary.
Who We Share Information With
We don't sell your personal information to anyone. That's not our business model, and frankly, it would be a terrible way to build trust with people we're trying to educate about making smart financial decisions.
That said, we do share information with certain third parties who help us operate our platform:
Service Providers
We work with companies that provide essential services like payment processing, email delivery, cloud hosting, and customer support tools. These providers only get access to the information they need to do their job, and they're contractually obligated to protect it.
For example, our email service provider can see your email address and name so they can send you course materials. But they're not allowed to use that information for their own purposes or share it with others.
Business Partners
If you sign up through a corporate education program, we share relevant progress information with your employer's learning administrator. This is usually limited to completion status and assessment scores.
For students who come to us through partner organizations, we might share basic enrollment and completion data with those partners. We always disclose these arrangements upfront when you register.
Legal Requirements
We'll disclose information if required by Canadian law or in response to valid legal processes like subpoenas or court orders. We may also share information when we believe it's necessary to prevent fraud, protect someone's safety, or defend our legal rights.
Where legally permitted, we try to notify users before disclosing their information to authorities. But there are situations where providing notice could interfere with a legal investigation, so we can't guarantee advance warning.
Your Privacy Rights
Under Canadian privacy law, you have several rights regarding your personal information. We've built tools into our platform to make exercising these rights straightforward.
Access Your Data
You can request a copy of the personal information we hold about you. We'll provide this in a commonly used format within 30 days of your request.
Correct Information
If any information we have about you is inaccurate or incomplete, you can ask us to correct it. Most basic details can be updated directly in your account settings.
Delete Your Account
You can request deletion of your account and associated personal information. We'll remove it within 30 days, though we might retain some records to comply with legal obligations.
Withdraw Consent
Where we process information based on your consent, you can withdraw that consent at any time. This won't affect the lawfulness of processing that happened before you withdrew consent.
Object to Processing
You can object to certain types of processing, particularly for marketing purposes. We'll honor these requests unless we have compelling legitimate grounds to continue.
Data Portability
You can request a copy of your data in a structured, machine-readable format. This makes it easier to transfer your information to another service if you choose.
How to Exercise Your Rights
To make any of these requests, email us at help@rymbron.vip with "Privacy Request" in the subject line. We'll verify your identity and respond within 30 days.
If you're not satisfied with how we handle your request, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.
How We Protect Your Information
Security isn't something we tack on at the end. It's built into how we design and operate our platform from the ground up.
Technical Safeguards
We use industry-standard encryption to protect data in transit and at rest. When you access your account, we use HTTPS to encrypt communication between your browser and our servers. Stored data is encrypted using AES-256 encryption.
Our systems are hosted on secure cloud infrastructure with regular security audits. We implement firewalls, intrusion detection systems, and regular security monitoring to detect and respond to potential threats.
Access Controls
Not everyone at Rymbron can access all user data. We follow the principle of least privilege, meaning employees only have access to the information they need to do their jobs. Access is logged and regularly reviewed.
We require strong passwords and offer two-factor authentication for user accounts. Our staff uses hardware security keys for accessing sensitive systems.
Regular Security Reviews
We conduct quarterly security assessments to identify and address vulnerabilities. Our code undergoes security reviews before deployment, and we maintain an incident response plan in case something does go wrong.
No security system is perfect. While we implement strong protections, we can't guarantee absolute security. If we detect a data breach that affects your information, we'll notify you as required by Canadian law and explain what happened and what we're doing about it.
International Data Transfers
Rymbron operates primarily in Canada, and we store most data on Canadian servers. However, some of our service providers use infrastructure located outside Canada, including in the United States.
When we transfer data internationally, we ensure appropriate safeguards are in place. This includes using providers that comply with recognized data protection frameworks and entering into data processing agreements that require them to protect your information.
Canadian privacy law recognizes that international transfers sometimes happen but requires us to ensure your data receives adequate protection regardless of where it's processed. We take this obligation seriously.
Children's Privacy
Our services aren't designed for anyone under 16. We don't knowingly collect information from children. If you're under 16, please don't register for our programs or provide us with any personal information.
If we discover we've inadvertently collected information from someone under 16, we'll delete it promptly. If you're a parent and believe your child has provided us with information, contact us at help@rymbron.vip.
Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active users by email and post a notice on our website.
The "Last Updated" date at the top of this policy tells you when we last revised it. We encourage you to review this policy periodically, especially before providing us with new types of information.
Continued use of our services after we post changes constitutes your acceptance of the updated policy. If you disagree with changes, you can close your account, though we'd prefer you reach out to discuss your concerns first.
Cookie Policy Details
Since cookies deserve special attention, here's a more detailed breakdown of what we use and why.
Essential Cookies
These are necessary for our website to function. They enable basic features like page navigation, secure area access, and remembering your login state. You can't opt out of these because the site won't work properly without them.
Analytics Cookies
We use analytics tools to understand how visitors interact with our site. This helps us identify popular content, spot navigation issues, and measure the effectiveness of our educational materials. These cookies don't identify you personally.
Functional Cookies
These remember your preferences like language settings or display preferences. They make your experience more personalized and convenient. You can disable these, but you'll need to reset preferences each time you visit.
Managing Cookie Preferences
Most browsers allow you to control cookies through their settings. You can typically choose to block all cookies, accept only first-party cookies, or receive alerts when sites try to set cookies. Keep in mind that blocking cookies might limit functionality.
Questions About This Policy?
We know privacy policies can be dense. If something isn't clear or you have specific questions about how we handle your information, we're here to help.