Last updated: July 2026

Foundry Rock Learning (“we”, “us”) respects your privacy. This policy explains what we collect, why, and the choices you have.

What we collect

  • Account details — the email address you sign up with, and your password (stored only as a securely salted, hashed value, never in plain text).
  • Purchases — a record of which courses you have bought and the related payment reference. Card details are handled entirely by our payment processor; we never see or store them.
  • Technical data — a login session cookie and standard information your browser sends (such as IP address), used to keep the site secure and working.

How we use it

We use your information only to run your account, give you access to the courses you are entitled to, process payments, send essential account emails (verification and password resets), and keep the service secure. We do not sell your data, and the site carries no advertising.

Who processes it for us

We rely on a few trusted providers, each handling only what is needed:

  • Cloudflare — website hosting and our account database.
  • Resend — sending account emails (verification, password reset).
  • Stripe — processing payments. Stripe handles your card details under its own privacy policy; we receive only a confirmation and reference.

Cookies

We use a single essential cookie to keep you logged in. It is not used for advertising or cross-site tracking.

Retention

We keep your account information for as long as your account exists. You can ask us to delete your account and associated data at any time.

Your choices

You can request access to, correction of, or deletion of your personal data by emailing [email protected]. Account-critical messages (such as password resets) will still be sent while your account is active.

Children

The service is intended for adults in a workplace context and is not directed at children.

Changes

We may update this policy from time to time; the “last updated” date above changes when we do.

Contact

Questions or requests: [email protected].

This policy is general information, not legal advice. If you operate under regimes such as GDPR or CCPA, have it reviewed by a professional.