Privacy Policy
Last updated: March 3, 2026
This Privacy Policy complies with GDPR (Europe), LGPD (Brazil), and CCPA (California/USA).
1. Introduction
At CertLand, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website certland.net and use our services.
By using our service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Personal Data
We collect information that you provide directly to us, including:
- Name and email address when you create an account
- Payment information when you subscribe to premium services (processed by secure third-party providers)
- Exam results and study progress
- Communications with our support team
- Profile preferences (language, theme)
Automatically Collected Data
- Device information (browser type, operating system)
- IP address and approximate location
- Usage data (pages visited, time spent, clicks)
- Cookies and similar tracking technologies
3. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
Types of Cookies We Use:
- Essential Cookies: Required for the operation of our website (authentication, security, preferences)
- Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics)
- Advertising Cookies: Used to serve relevant advertisements (Google Ads)
4. Google Analytics and Google Ads
Google Analytics
We use Google Analytics to understand how users interact with our website. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to this site.
Google Analytics uses cookies to collect this information. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on .
Google Ads (AdSense)
We use Google AdSense to display advertisements on our website. Google, as a third-party vendor, uses cookies to serve ads based on your prior visits to our website or other websites.
Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our sites and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings .
For more information about Google's privacy practices, please visit the Google Privacy Policy .
5. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our services
- To process your subscription payments and manage your account
- To send you updates, security alerts, and support messages
- To respond to your comments, questions, and customer service requests
- To analyze usage patterns and improve user experience
- To detect, prevent, and address technical issues and fraud
- To serve relevant advertisements (only for non-premium users)
- To comply with legal obligations
6. Legal Basis for Processing (GDPR)
If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it:
- You have given us permission to do so (consent)
- The processing is necessary to perform a contract with you (service provision)
- The processing is in our legitimate interests and not overridden by your rights (analytics, improvements)
- We need to comply with the law (legal obligations)
7. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With service providers who help us operate our platform (hosting, payment processing, email services)
- With Google Analytics and Google Ads for analytics and advertising purposes
- When required by law or to respond to legal process
- To protect our rights, property, or safety, or that of our users or the public
- With your explicit consent or at your direction
- In connection with a merger, acquisition, or sale of assets (you will be notified)
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (HTTPS/TLS)
- Secure password hashing (PBKDF2)
- Regular security audits and updates
- Access controls and authentication
- Secure backup procedures
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
9. Your Privacy Rights
Depending on your location, you have the following rights regarding your personal data:
GDPR Rights (EEA/UK):
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ('right to be forgotten')
- Right to Restriction: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
- Right to Lodge a Complaint: File a complaint with your data protection authority
LGPD Rights (Brazil):
- Confirmation of data processing
- Access to your data
- Correction of incomplete, inaccurate, or outdated data
- Anonymization, blocking, or deletion of unnecessary or excessive data
- Data portability to another service provider
- Information about public and private entities with which we share data
- Information about the possibility of denying consent and its consequences
- Revocation of consent
CCPA Rights (California):
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to say no to the sale of personal information (we do not sell data)
- Right to delete personal information
- Right to non-discrimination for exercising your rights
To exercise any of these rights, please contact us. We will respond to your request within 30 days.
10. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.
- Account data: Retained while your account is active and for 90 days after deletion request
- Exam results: Retained for the lifetime of your account
- Payment records: Retained for 7 years for tax and legal purposes
- Analytics data: Anonymized and retained for up to 26 months
11. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your country where data protection laws may differ. If you are located outside the United States and choose to provide information to us, we transfer the data to the United States and process it there.
We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy. For EEA users, we comply with GDPR requirements for international transfers through approved mechanisms such as Standard Contractual Clauses.
12. Children's Privacy
Our service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.
13. Do Not Track Signals
Some web browsers have a 'Do Not Track' feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, our website does not respond to Do Not Track signals. You can manage cookies through your browser settings or our cookie consent banner.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to read the privacy policies of any third-party sites you visit.
15. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the 'Last updated' date at the top of this policy
- Sending you an email notification (for significant changes)
Your continued use of the service after changes are posted constitutes your acceptance of the updated policy.
16. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us.
CertLand
Email: privacy@certland.net
Website: https://certland.net/privacy/