Privacy Policy

Last updated September 11, 2026

This policy explains what personal information Gentle Solutions Training, Inc. collects when you use our training platform at gentlesolutionstraining.com, why we collect it, who we share it with, and what control you have over it.

Gentle Solutions Training, Inc. is an Alabama corporation and is the controller of the information described here.

Who this applies to

Our platform is available by invitation only. You will normally receive an invitation from a Gentle Solutions trainer or from your employer. This policy applies to students, trainers, and administrators who use the platform, and to anyone who contacts us through the website.

Our training is for adults. We do not knowingly collect information from anyone under 18. If you believe a person under 18 has created an account, contact us and we will remove it.

What we collect

Account information

• Your first and last name
• Your email address
• Your role on the platform, and which trainer invited you
• An encrypted version of your password. We never store, and cannot see, your actual password.

Training records

• Which exams you have taken, when, and your score
• The individual answers you gave on each exam
• Certificates issued to you, including the certificate number and issue date

Your signed waiver

Everyone who trains with us signs a Waiver and Training Agreement. Because that document has to stand up as a legal record, we keep more detail than we do elsewhere:

• The signature you drew or the name you typed, stored as an image
• If you drew it, the path your finger, stylus, or mouse traced
• Your name, email address, and role at the moment you signed
• The date and time, and the IP address you signed from
• A digital fingerprint of the exact wording you agreed to

Payment information

Payments are processed by Stripe. Your card details never reach our servers. We receive and store only a record that a payment succeeded, the amount, any discount code used, and Stripe's own reference numbers so the payment can be traced.

Security and technical information

• The date, time, and IP address of each sign-in attempt, successful or not
• Your browser's user-agent string
• A temporary record of failed sign-ins and form submissions, used to block automated attacks

We keep failed sign-in records specifically so we can detect someone trying to break into your account.

If you contact us

Our contact form collects your name, email address, optional phone number and subject, your message, and the IP address it was sent from.

Certificate verification is public

Why we collect it

Information	Why
Name, email, password	To create your account and let you sign in securely
Training records	To deliver the course, mark your exam, and issue your certificate
Signed waiver	To hold a legal record that you accepted the terms of training
Payment records	To take payment, provide receipts, and handle refunds
Sign-in and security logs	To protect accounts from unauthorised access
Contact form	To answer your enquiry

Who we share it with

We do not sell your personal information. We do not share it for advertising. We share it only with the following, and only as far as each needs to do its job:

Who	What they receive
Postmark	Your name and email address, so we can send invitations, password resets, and certificates
Stripe	Your email address and payment details, to process payment. Stripe is the payment processor and handles card data directly.
Google reCAPTCHA	Technical signals from your browser on our contact form, to tell people apart from bots
Our web host	Stores the site and its database on our behalf

Your trainer and your employer

The trainer who invited you can see that you have an account, whether you have signed the waiver, and whether you have paid or been enrolled. This is so they can run their training session.

If your employer or an institution is paying for your training in whole or in part, they may know that you were enrolled. We do not give employers your exam answers.

We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.

Cookies

We use a single essential cookie to keep you signed in. It is not used for advertising or tracking, and it is not set at all until you sign in.

Google reCAPTCHA sets its own cookies on our contact page as part of distinguishing people from automated abuse. That is governed by Google's privacy policy, linked above.

How long we keep it

What	How long
Signed waivers	At least 7 years after signing
Certificates and exam records	Kept indefinitely, so a certificate can always be verified
Payment records	As required for tax and accounting
Sign-in and security logs	Retained while useful for security, then removed
Contact form messages	Kept while we deal with your enquiry and for a reasonable period after

Waivers and certificates are deliberately kept even if you close your account. A waiver is a legal record of an agreement you made, and a certificate is something an employer may need to verify years later.

How we protect it

• The whole site is served over an encrypted connection
• Passwords are stored using one-way encryption and cannot be read by us or recovered
• Password reset links are stored only as a fingerprint, so they are useless even to someone with database access
• Sign-in attempts are rate limited to slow down attacks on your account
• Course materials, waivers, and certificates are stored outside the public web directory and served only after checking who you are

No system is perfectly secure, but we take this seriously and the platform has been reviewed specifically for these issues.

Your choices

You can ask us to:

• Tell you what information we hold about you
• Correct anything that is wrong, such as a misspelled name on a certificate
• Delete your account

If you ask us to delete your account, we will remove your login and personal profile, but we will keep your signed waiver and your certificate record for the periods described above. We will tell you exactly what has been kept and why.

Depending on where you live you may have additional rights, and we will honour those where they apply.

Changes to this policy

If we change this policy we will update the date at the top. If the change is significant, we will tell you by email.

Contact us

For any question about this policy, or to make a request about your information, email info@gentlesolutionstraining.com or use our contact page.

Gentle Solutions Training, Inc.
An Alabama corporation