Privacy Policy

Introduction

DataWizard Online (“we,” “us,” or “our”) operates the website at https://datawizardonline.org and provides online data science education courses and related services (collectively, the “Services”). We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have. By creating an account or using our Services, you acknowledge that you have read and understood this Privacy Policy.

Business details:

• Business name: DataWizard Online
• Address: The L. Plaza, 367-375 Queen’s Road Central, Sheung Wan, Hong Kong
• Email: hello@datawizardonline.org

Information We Collect

Information You Provide Directly

• Account information: Your name, email address, and password when you register for an account.
• Billing information: Your name, billing address, and payment method details (such as card number, expiration date, and billing postal code) when you make a purchase. This information is collected and processed directly by our third-party payment processor, Stripe, Inc. We do not receive, access, or store your full card number, CVV/CVC code, or other sensitive authentication data on our servers.
• Profile information: Any additional details you voluntarily add to your profile, such as a display name or profile image.
• Communications: Information you provide when you contact us through our contact form, email, or customer support, including the content of your messages.
• Course activity: Your progress through purchased courses, quiz responses, assignment submissions, and completion records.

Information Collected Automatically

• Device and technical data: Your IP address, browser type and version, operating system, device type, screen resolution, and language preference.
• Usage data: Pages visited, time spent on pages, links clicked, referring and exit URLs, and general navigation patterns on our site.
• Cookies and similar technologies: We use cookies and similar tracking technologies as described in our Cookie Policy.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide our Services: Creating and managing your account, granting access to purchased courses, and tracking your learning progress.
• To process transactions: Facilitating purchases, processing payments through Stripe, issuing receipts, and managing refunds.
• To communicate with you: Sending order confirmations, course access details, account notifications, and responding to your enquiries and support requests.
• To send marketing communications: With your explicit consent, sending newsletters and promotional emails about new courses or features. You may opt out at any time by clicking “unsubscribe” in any marketing email or contacting us directly.
• To improve our Services: Analysing usage patterns to improve course content, website functionality, and user experience.
• To ensure security: Detecting and preventing fraud, abuse, and unauthorised access to accounts.
• To comply with legal obligations: Meeting applicable tax, accounting, regulatory, and legal requirements.

Payment Processing and Stripe

All payment transactions on DataWizard Online are processed by Stripe, Inc. (“Stripe”), a third-party payment processor. When you make a purchase:

• Your payment card details are collected and processed directly by Stripe in accordance with the Payment Card Industry Data Security Standards (PCI DSS).
• We do not receive, store, or have access to your full card number, CVV/CVC, or other sensitive authentication data.
• Stripe may collect and process your name, billing address, email address, payment card information, IP address, and browser information for the purpose of completing your transaction, preventing fraud, and complying with applicable law.
• Stripe’s use of your personal data is governed by Stripe’s Privacy Policy.
• “DataWizard Online” or an abbreviated form may appear on your bank or card statement as the transaction descriptor.

Third-Party Service Providers

We share your personal information with the following categories of third parties only as necessary to provide and improve our Services:

• Stripe (payment processing): Processes payment transactions. Receives billing information and transaction details. See Stripe’s Privacy Policy.
• WooCommerce (e-commerce platform): Manages orders, product catalogue, and customer records on our website. Data is stored on our servers.
• Hosting provider: Our website is hosted on servers that store all site data including account information and course progress.
• Analytics providers: We may use third-party analytics services (such as Google Analytics) to understand how visitors use our site. These services collect anonymised or pseudonymised usage data.
• Email service providers: We may use third-party services to send transactional emails (order confirmations, password resets) and, with your consent, marketing emails.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption (HTTPS) for all data transmitted between your browser and our servers.
• Payment processing handled entirely by Stripe, which is PCI DSS Level 1 certified — the highest level of security certification in the payments industry.
• We never store, log, or have access to sensitive authentication data such as full card numbers or CVV/CVC codes.
• Access controls limiting staff access to personal data on a need-to-know basis.
• Regular security reviews and software updates.

No method of electronic transmission or storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

Data Retention

• Account data: Retained while your account is active. If you request deletion, we will remove your personal data within 30 days, except where retention is required by law.
• Transaction and payment records: Retained for a minimum of 7 years to comply with tax, accounting, and regulatory requirements.
• Course progress data: Retained while your account is active.
• Communication records: Retained for up to 2 years from the date of the communication.
• Analytics data: Retained in anonymised or aggregated form; individual-level data is deleted after 26 months.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we limit how we process your data in certain circumstances.
• Portability: Receive your data in a structured, commonly used, machine-readable format.
• Objection: Object to processing of your data for direct marketing purposes.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at hello@datawizardonline.org. We will respond within 30 days.

Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal data, please contact us immediately at hello@datawizardonline.org and we will take steps to delete the information.

International Data Transfers

Our servers are located in accordance with our hosting provider’s infrastructure. Your data may be transferred to, stored, and processed in jurisdictions outside your country of residence. By using our Services, you consent to such transfers. We ensure that appropriate safeguards are in place and that all transfers comply with applicable data protection law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where required, notify you by email. We encourage you to review this policy periodically. Your continued use of our Services after changes are posted constitutes your acknowledgement of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: hello@datawizardonline.org
• Address: DataWizard Online, The L. Plaza, 367-375 Queen’s Road Central, Sheung Wan, Hong Kong