📄 Privacy Policy of Back2Skills LLC

Effective Date: August 24, 2026 🇺🇸 🇪🇺 🇮🇳

Last Updated: August 24, 2026 🇺🇸 🇪🇺 🇮🇳

 Back2Skills LLC (“Back2Skills,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://back2skills.com, create an account, enroll in or access a course, communicate with us, or otherwise use our websites, learning platform, checkout pages, and related services (collectively, the “Platform”).

This Policy is intended to provide one clear privacy framework for our users in the United States, the European Union and European Economic Area (“EU/EEA”), and India. Additional rights may apply depending on where you live.

Privacy at a Glance

• We collect information needed to operate accounts, provide course access, process transactions, respond to requests, secure the Platform, measure performance, and—where permitted—advertise Back2Skills.
• Full payment card details are collected and processed directly by Stripe and are not stored on Back2Skills servers.
• We do not sell personal information for money.
• Google Analytics 4 and Google Ads may process limited device, usage, campaign, and conversion information. Where required, these technologies are activated only after consent.
• You can manage non-essential cookies through the Manage Consent tool available on the Platform.
• Privacy questions and requests may be sent to info@back2skills.com.

1. Who We Are

Back2Skills LLC is a Delaware limited liability company providing online education and training in cybersecurity, ethical hacking, artificial intelligence, and related technical subjects.

Back2Skills LLC
2093 Philadelphia Pike #6109
Claymont, DE 19703
United States
Email: info@back2skills.com

Back2Skills LLC acts as the data controller, business, or data fiduciary—depending on the terminology used by applicable law—when it determines why and how personal information is processed. Certain providers, such as payment processors, may act as independent controllers for their own processing activities.

2. Scope of This Policy

This Policy applies to personal information processed through the Platform. It does not apply to third-party websites, services, or platforms that have their own privacy policies, even when they are linked from Back2Skills.

The Platform is operated from the United States and may be accessed internationally. We process personal information in accordance with privacy laws that apply to our activities and to the relevant user, including applicable U.S. state privacy laws, the EU General Data Protection Regulation (“GDPR”), and India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), where applicable.

3. Personal Information We Collect

The information we collect depends on how you use the Platform.

3.1 Information You Provide

We may collect:

• Account information, such as your name, email address, username, password or authentication credentials, country, and account preferences.
• Enrollment and learning information, such as courses purchased or enrolled in, lesson and module progress, quiz results, completion status, certificates, and course activity.
• Transaction and billing information, such as the product purchased, amount, currency, transaction date, payment status, billing country, receipt information, and limited card information made available by Stripe, such as card brand and the last four digits. Back2Skills does not receive or store your full payment card number or CVV.
• Communications, including messages, support requests, feedback, and information you choose to include when contacting us.
• Marketing preferences, including whether you have subscribed to or unsubscribed from promotional communications.
• Age or eligibility information, where reasonably necessary to determine whether you meet applicable age and consent requirements.
• Other information you voluntarily provide through the Platform.

Please do not send us sensitive personal information unless it is specifically requested and necessary for a legitimate purpose.

3.2 Information Collected Automatically

When you use the Platform, we and our service providers may automatically collect:

• IP address and approximate location derived from the IP address;
• browser type, operating system, device type, and language;
• pages viewed, links and buttons clicked, referring and exit pages, session duration, and timestamps;
• course and checkout interactions;
• campaign, referral, and attribution information, including UTM parameters and Google Ads identifiers;
• cookie identifiers, consent status, and similar technical information;
• security, diagnostic, and error information; and
• purchase and conversion events used to measure Platform and advertising performance.

3.3 Information From Service Providers

We may receive information from providers that help us operate the Platform. For example:

• Stripe may provide payment status, transaction identifiers, billing country, card brand, and limited payment details.
• Google Analytics 4 and Google Ads may provide aggregated or event-level information about sessions, traffic sources, campaign interactions, and conversions, subject to your consent where required.
• Website, hosting, learning-management, email-delivery, security, and technical-support providers may provide information necessary to operate, protect, and troubleshoot the Platform.

4. How and Why We Use Personal Information

We may use personal information to:

• create, authenticate, and manage accounts;
• enroll learners and provide access to purchased or free courses;
• record course progress, quiz results, completions, and certificates;
• process transactions, issue receipts, manage refunds, and prevent payment fraud;
• provide customer support and respond to questions or requests;
• send essential account, course, transaction, security, and service communications;
• send promotional communications where permitted and allow recipients to unsubscribe;
• personalize and improve the Platform and learning experience;
• understand traffic, usage, course engagement, checkout behavior, and conversions;
• measure and improve Google Ads campaigns;
• maintain security, prevent abuse, diagnose technical problems, and enforce our Terms;
• comply with legal, accounting, tax, regulatory, and contractual obligations; and
• establish, exercise, or defend legal claims.

5. Legal Bases for Processing in the EU/EEA

Where the GDPR applies, we rely on one or more of the following legal bases:

• Performance of a contract: to create your account, provide course access, process your enrollment, maintain your learning record, and deliver services you request.
• Consent: for non-essential cookies, personalized advertising, certain analytics activities, and marketing communications where consent is required. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
• Legitimate interests: to secure and improve the Platform, prevent fraud, understand service performance, provide customer support, and manage our business, where those interests are not overridden by your rights and interests.
• Legal obligation: to comply with tax, accounting, regulatory, law-enforcement, and other legal requirements.

When consent relates to a learner under the age established by the learner’s EU Member State, we may require consent or authorization from a parent or legal guardian and may take reasonable steps to verify it.

6. Cookies, Google Analytics 4, and Google Ads

The Platform uses cookies and similar technologies for the following purposes:

• Strictly necessary technologies: account authentication, checkout operation, security, fraud prevention, consent management, and core Platform functions.
• Analytics: Google Analytics 4 helps us understand how visitors find and use the Platform and how learners interact with our content.
• Advertising and measurement: Google Ads helps us measure campaign performance, attribute conversions, and, where enabled and permitted, show or personalize advertising.

Non-essential analytics and advertising technologies are used only with consent where required by applicable law. You can accept, reject, or manage non-essential cookies through the Manage Consent tool on the Platform. You may withdraw consent at any time. You may also manage certain settings through your browser or Google account.

Rejecting non-essential cookies will not prevent access to the core Platform, but some optional features, personalization, attribution, or measurement may be limited.

Google may process information in accordance with its own privacy terms. For additional information, visit:

• Google Privacy Policy: https://policies.google.com/privacy
• Google advertising controls: https://myadcenter.google.com/

7. How We Disclose Personal Information

We may disclose personal information only as reasonably necessary to:

• Payment processors, including Stripe, to process payments, refunds, disputes, and fraud checks;
• Platform and service providers, including hosting, website, learning-management, email-delivery, analytics, advertising, security, and technical-support providers;
• Professional advisers, such as accountants, auditors, insurers, or legal advisers, when necessary;
• Government authorities or law enforcement, when disclosure is required by law or reasonably necessary to protect rights, safety, and security;
• Business transaction participants, in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards; and
• Other parties at your direction or with your consent.

Service providers that process information on our behalf are expected to use it only for authorized purposes and to apply appropriate confidentiality and security measures.

8. Sale, Sharing, and Targeted Advertising

Back2Skills does not sell personal information for money.

Our use of Google Ads, advertising cookies, and related identifiers may be considered “sharing,” “targeted advertising,” or “cross-context behavioral advertising” under certain U.S. state privacy laws, even when no money is exchanged. Where applicable, you may opt out by rejecting advertising cookies through the Manage Consent tool.

Where legally required and technically supported, we also recognize browser-based opt-out preference signals, such as the Global Privacy Control (GPC), for the browser or device from which the signal is sent.

We do not knowingly sell or share for targeted advertising the personal information of users we know are under 18.

9. Payment Processing

Payments are processed directly by Stripe. Full payment card details are entered into Stripe’s secure payment environment and are not stored on Back2Skills servers. Back2Skills may receive limited transaction information needed to confirm payment, provide access, issue receipts, process refunds, manage disputes, and maintain accounting records.

Stripe processes information under its own privacy policy, available at https://stripe.com/privacy.

10. International Data Transfers

Back2Skills is based in the United States. Personal information may therefore be transferred to or processed in the United States and in other countries where our service providers operate. These countries may have data-protection laws that differ from those in your country.

Where required, we use recognized safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission, contractual protections, or other lawful transfer mechanisms.

Users may contact info@back2skills.com for additional information about the safeguards relevant to their personal information.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing lifetime course access, maintaining business and transaction records, resolving disputes, enforcing agreements, and complying with legal obligations.

Typical retention periods are:

When information is no longer required, we delete, anonymize, or securely dispose of it, subject to technical limitations and legal retention obligations. Anonymized information that no longer identifies an individual may be retained for analytics and business purposes.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• request a portable copy of certain information;
• restrict or object to certain processing;
• withdraw consent at any time;
• opt out of certain targeted advertising, sale, or sharing activities;
• unsubscribe from marketing communications;
• appeal a decision concerning a privacy request, where applicable; and
• lodge a complaint with an appropriate privacy or data-protection authority.

Rights are not absolute. We may retain or continue processing information when permitted or required by law, including to complete transactions, provide requested services, protect security, maintain required records, or establish and defend legal claims.

12.1 United States

Depending on your state of residence and where applicable, you may request access, correction, deletion, or a copy of personal information and may opt out of certain targeted advertising, sale, or sharing activities. You may also have the right to use an authorized agent, appeal our response, and receive equal service without unlawful discrimination for exercising a privacy right.

California residents may exercise rights available under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), where applicable. In the preceding 12 months, the categories we may have collected include identifiers, customer records information, commercial information, internet or electronic activity, approximate geolocation derived from IP address, and related inferences concerning Platform or course interests. The sources, purposes, recipients, and retention practices for these categories are described throughout this Policy.

We do not use or disclose sensitive personal information for purposes that require a right to limit under California law.

12.2 EU/EEA

Where the GDPR applies, you may have the right to access, rectify, erase, restrict, or object to processing; receive certain information in a portable format; withdraw consent; and lodge a complaint with your local supervisory authority.

You also have the right to object at any time to processing of personal information for direct marketing. Back2Skills does not use solely automated decision-making that produces legal or similarly significant effects concerning learners.

12.3 India

Where the DPDP Act applies, you may have rights to access information about the processing of your personal data, request correction or erasure, withdraw consent, submit a grievance, and nominate another individual to exercise your rights in the event of death or incapacity, subject to applicable law.

Back2Skills acts as a Data Fiduciary for processing activities within the scope of the DPDP Act. We will respond to verified requests and grievances within the timeframe required by applicable law.

12.4 Exercising Your Rights

To submit a privacy request, email info@back2skills.com with the subject line Privacy Request and describe the right you wish to exercise.

We may need to verify your identity before completing a request. Verification information will be used only for that purpose. If an authorized agent submits a request, we may require proof of authorization and may also verify the user’s identity directly where permitted.

If we deny or limit a request, we will explain the reason when required and provide information about any available appeal process. You may appeal by replying to our decision or emailing info@back2skills.com with the subject line Privacy Appeal.

13. Children’s and Teen Privacy

Back2Skills is not directed to children under 13 in the United States or the EU/EEA, and we do not knowingly collect personal information from children under 13.

Learners between 13 and 17 may use Back2Skills in the United States and the EU/EEA. Where required by applicable law, they must obtain consent or authorization from a parent or legal guardian before creating an account, enrolling in a course, making a purchase, or providing personal information.

In the EU/EEA, the age at which a learner may independently consent to certain processing varies by Member State and is generally between 13 and 16. Where parental consent is required, Back2Skills may request reasonable evidence that consent was provided by a parent or legal guardian.

In India, the Platform is available only to individuals who are at least 18 years old unless Back2Skills has implemented an appropriate verifiable parental-consent process for the relevant service.

We do not knowingly use the personal information of minors for targeted advertising. If we learn that personal information was collected from a user who did not meet the applicable age or consent requirements, we will take reasonable steps to delete the information and close or restrict the associated account, unless retention is required by law.

A parent or legal guardian may contact info@back2skills.com regarding a minor’s personal information.

14. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures may include encryption in transit, access controls, service-provider controls, account protections, monitoring, and procedures intended to prevent unauthorized access, alteration, disclosure, or destruction.

No online service, transmission method, or storage system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and should notify us promptly if they suspect unauthorized account access.

15. Marketing Communications

We may send service-related messages necessary to operate your account or provide purchased services. These messages are not promotional and may not offer an unsubscribe option while your account remains active.

Where permitted, we may also send course news, educational content, offers, or other promotional communications. You may unsubscribe at any time by using the link included in the message or by contacting info@back2skills.com. Unsubscribing from marketing does not prevent essential account, transaction, course-access, security, or legal communications.

16. Third-Party Links and Services

The Platform may contain links to websites or services operated by third parties. Back2Skills does not control and is not responsible for their content, security, or privacy practices. Review the relevant third party’s privacy policy before providing personal information.

17. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our services, technologies, legal obligations, or business practices. The revised version will be posted on this page with an updated Last Updated or Effective Date.

Where required, we will provide additional notice or obtain consent before materially changing how personal information is processed. Changes will not reduce mandatory privacy rights provided by applicable law.

18. Contact and Grievances

For privacy questions, rights requests, complaints, or grievances, contact:

Back2Skills Privacy Team
Back2Skills LLC
2093 Philadelphia Pike #6109
Claymont, DE 19703
United States
Email: info@back2skills.com

Please include sufficient information for us to understand and respond to your request, but do not send full payment card details, passwords, government identification numbers, or other unnecessary sensitive information by email.