Privacy Policy
Last Updated: February 15, 2025
At Xoralox, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our investment theory education platform. We're committed to transparency and giving you control over your data. If something here doesn't make sense, reach out—we're happy to clarify.
Information We Collect
We collect different types of information depending on how you use our services. Some information you provide directly, while other data is collected automatically through your interactions with our platform.
Personal Information You Provide
When you register for our learning programs or contact us, you might share:
- Full name and contact details (email address, phone number)
- Mailing address, particularly for Canadian residents in Ontario
- Educational background and professional experience
- Payment information when enrolling in courses
- Communication preferences and areas of interest in investment theory
Information Collected Automatically
Our systems automatically gather technical data to improve your experience:
- IP address and general location information
- Browser type, device information, and operating system
- Pages visited, time spent on our site, and navigation patterns
- Referral sources and search terms used to find us
- Course progress, assessment results, and learning activity
How We Use Your Information
We don't sell your information. Period. Everything we collect serves a specific purpose related to delivering quality education and improving our services.
Primary Uses:
We use your data to deliver course content, track your progress, communicate about programs, process payments, and respond to your inquiries. It also helps us understand which topics resonate most with our students.
- Providing access to educational materials and learning platforms
- Processing enrollment and managing your account
- Sending course updates, program announcements, and educational content
- Analyzing learning patterns to improve curriculum effectiveness
- Ensuring platform security and preventing unauthorized access
- Complying with Canadian privacy laws and educational regulations
- Responding to support requests and technical issues
Data Sharing and Third Parties
We work with carefully selected service providers to deliver our educational programs. These partners are contractually obligated to protect your information and use it only for specified purposes.
| Service Type | Purpose | Data Shared |
|---|---|---|
| Payment Processors | Handling course enrollment payments | Name, billing address, payment details |
| Email Service Providers | Sending course communications | Email address, name, enrollment status |
| Cloud Hosting Services | Storing course materials and data | All account and learning data |
| Analytics Platforms | Understanding site usage patterns | Anonymized usage statistics |
We may disclose information if required by Canadian law, court order, or government request. We'll notify you about such requests unless legally prohibited from doing so.
Your Privacy Rights
Under Canadian privacy legislation, including PIPEDA (Personal Information Protection and Electronic Documents Act), you have specific rights regarding your personal information.
Access Your Data
Request a copy of all personal information we hold about you. We'll provide this within 30 days of your request.
Correct Inaccuracies
Update or correct any incorrect or outdated information in your account at any time.
Request Deletion
Ask us to delete your personal data, subject to legal and contractual obligations.
Withdraw Consent
Opt out of marketing communications or withdraw consent for certain data processing activities.
Data Portability
Receive your data in a structured, commonly used format for transfer to another service.
File a Complaint
Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we've mishandled your data.
To exercise any of these rights, contact our privacy team at info@xoralox.pro. We'll respond promptly and guide you through the process.
Data Security and Protection
We employ industry-standard security measures to protect your information from unauthorized access, alteration, or destruction. However, no internet transmission is completely secure—we can't guarantee absolute security.
Security Measures Include:
Encrypted data transmission (SSL/TLS protocols), secure server infrastructure with regular security audits, restricted employee access to personal information, regular backup systems, and multi-factor authentication for sensitive accounts.
If a security breach affects your personal information, we'll notify you and relevant authorities as required by Canadian law, typically within 72 hours of discovering the breach.
Data Retention
We keep your information only as long as necessary to fulfill the purposes outlined in this policy or as required by law.
- Active student records: Retained during enrollment and for 7 years after course completion for educational records
- Marketing data: Kept until you unsubscribe or request deletion
- Payment records: Maintained for 7 years as required by Canadian tax law
- Website analytics: Anonymized after 26 months
- Support communications: Archived after 3 years
Once retention periods expire, we securely delete or anonymize your data so it can no longer identify you.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and understand how you interact with our content. You can control cookie settings through your browser preferences.
Types of Cookies We Use
- Essential cookies: Required for basic site functionality and security
- Performance cookies: Help us understand site usage and identify technical issues
- Functional cookies: Remember your preferences and settings
- Analytics cookies: Provide insights into learning patterns and content effectiveness
We don't use advertising cookies or share cookie data with advertising networks. Most browsers allow you to block cookies, though this may limit some site features.
International Students and Data Transfers
While our primary operations are in Canada, we welcome international students. If you're accessing our services from outside Canada, your information may be transferred to and processed on servers in Canada.
Canada is recognized by the European Commission as providing adequate data protection. We ensure all international data transfers comply with applicable privacy laws and use appropriate safeguards to protect your information.
Children's Privacy
Our educational programs are designed for adults aged 18 and older. We don't knowingly collect personal information from anyone under 18. If you're a parent or guardian and believe your child has provided us with personal information, contact us immediately so we can delete it.
Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website.
The "Last Updated" date at the top shows when the most recent changes were made. We encourage you to review this policy periodically to stay informed about how we protect your information.
Questions About Your Privacy?
If you have questions, concerns, or want to exercise your privacy rights, we're here to help.
We aim to respond to all privacy inquiries within 5 business days.