Privacy Policy

Overview

At Oratorix, we respect your privacy and are committed to processing personal data responsibly. This policy explains what we collect, how we use it, the rights you have, and how to contact us. It applies to our website, learning platform, and related services.

Effective date: 02 Feb 2026

Data we collect

We collect information that you provide to us, information generated when you use our services, and limited information from third parties as needed to operate and improve Oratorix.

Information you provide

• Account details such as name, email address, password (hashed), and profile preferences.
• Communication content you send to us (support requests, feedback, survey responses).
• Enrollment details, selected courses, and optional demographic data you choose to share.

Information we collect automatically

• Usage and learning data, including modules viewed, progress, assessments, and time spent.
• Device and technical data such as IP address, browser type, settings, and approximate location derived from IP.
• Server logs, error reports, and diagnostic information to maintain service reliability.
• Cookie identifiers and similar technologies used for essential functions and preferences.

Information from third parties

• Payment confirmation details from payment processors (no full card numbers stored by Oratorix).
• Single sign-on profile basics when you log in with supported identity providers, where available.

How we use data

We process personal data to deliver, secure, and improve Oratorix, and to communicate with you. We do not sell personal data.

• Provide and personalize course experiences, track progress, and award certificates.
• Operate, maintain, troubleshoot, and secure our platform and infrastructure.
• Analyze aggregated usage to enhance content, features, and accessibility.
• Send service notifications, account alerts, and important policy updates.
• Comply with legal obligations, enforce terms, and prevent fraud or abuse.

Legal basis

Where applicable (e.g., EEA, UK), we rely on the following lawful bases for processing:

• Contract: to provide the services you requested and to fulfill our agreements with you.
• Legitimate interests: to improve our services, ensure security, and prevent abuse, balanced against your rights.
• Consent: for optional communications or functionality where required; you may withdraw consent at any time.
• Legal obligation: to meet record-keeping, tax, and compliance requirements.

Cookies

We use strictly necessary and functional cookies to remember settings (for example, theme and accessibility preferences) and to maintain session security.

Types of cookies we use

• Essential: required for authentication, security, and core platform features.
• Functional: remember user preferences, such as language or display settings.
• Limited analytics: aggregated metrics to understand feature performance and reliability; no personal profiles.

You can manage cookies through your browser settings and, where offered, in-product controls. Blocking some cookies may affect functionality.

Data retention & security

We keep personal data only as long as necessary for the purposes described above, to comply with legal obligations, or to resolve disputes. Retention periods vary by data type and context.

• Account and course records are retained while your account is active and for a limited period after closure.
• Technical logs are retained for a short period to support reliability, security, and auditing.
• Backups are encrypted and rotated on a defined schedule.

We use appropriate technical and organizational measures to protect data, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is 100% secure; we strive to continuously improve safeguards.

International transfers

Oratorix may process data on servers located in different countries. When transferring personal data internationally, we implement appropriate safeguards consistent with applicable law (such as standard contractual clauses) to protect your information.

Third parties

We share personal data only as needed to operate the service, comply with the law, or with your consent.

• Service providers: cloud hosting, content delivery, analytics (aggregated), and customer support tools under strict contracts.
• Payment processors: to handle payments securely; Oratorix does not store full payment card details.
• Legal and safety: to respond to lawful requests, enforce terms, or protect rights, property, or safety.
• Business transfers: if we engage in a merger, acquisition, or asset sale, we will disclose data only as permitted by law.

Your rights

Your privacy rights may include the ability to access, correct, delete, or export your personal data, as well as to object to or restrict certain processing.

• Access: request a copy of your personal data we hold.
• Correction: update inaccurate or incomplete information.
• Deletion: request deletion where no longer necessary, subject to legal exceptions.
• Portability: receive your data in a portable format where technically feasible.
• Objection and restriction: object to processing based on legitimate interests or restrict processing in certain cases.
• Consent withdrawal: withdraw consent for optional processing at any time.

To exercise rights, see the Contact section below. We will verify your request and respond in accordance with applicable law.

Your choices

You can manage communications and certain settings at any time. If you disable essential cookies or certain preferences, parts of the service may not function as intended.

• Email preferences: unsubscribe using in-message links or by contacting us.
• Browser controls: manage cookies, Do Not Track, and permissions in your browser.
• Account controls: update profile details or request account deletion via support.

Children’s privacy

Oratorix is intended for individuals 16 years of age and older, or the minimum age required in your jurisdiction. We do not knowingly collect personal data from children under the applicable age threshold. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to remove the information.

Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. If changes are material, we will provide additional notice as required (for example, via email or in-product notifications). The “Effective date” at the top indicates when this policy last changed.

Contact

Email: [email protected] • Phone: +1 (202) 555-0147

If you have questions about this Privacy Policy or our data practices, please reach out using the contact methods above. We will respond promptly.