1. Introduction

The Chameleon Group, Inc., a California corporation (“Chameleon,” “we,” “us,” or “our”), operates an online learning management system (“LMS” or “Platform”) providing security-related training courses, educational content, assessments, and certifications (the “Services”).

2. Information We Collect

We collect information you provide directly, including name, email address, login credentials, employer or organization (for corporate users), course enrollments, progress, assessment results, certifications, billing information processed by third-party providers, and communications with us. 
We also collect information automatically such as IP address, device and browser information, login activity, pages viewed, and cookies. 

3. How We Use Information

Information is used to provide and administer the Services, deliver training and certifications, fulfill contractual obligations, process payments, maintain security, improve functionality, communicate service notices, enforce legal rights, and comply with applicable laws.

4. Corporate Accounts

If you access the Services through an employer or organization, training progress and completion data may be shared with that organization. Access may also be governed by a separate contract.

5. Cookies and Tracking

Cookies and similar technologies are used to maintain sessions, enable functionality, enhance security, and analyze usage.

6. Sharing and Disclosure

We do not sell personal information. We may disclose information to service providers, legal authorities, to protect rights and safety, or in connection with corporate transactions.

7. International Data Transfers

Information may be transferred to and processed in the United States and other jurisdictions.

8. Data Retention

Personal information is retained only as long as necessary for business, contractual, and legal purposes.

9. Data Security

We use reasonable safeguards, but no system is completely secure.

10. Children’s Privacy

The Services are not intended for individuals under 18 years of age. 

11. Your Rights

Depending on your jurisdiction, you may request access, correction, or deletion of personal data by contacting info@chameleongroup.com.

12. Export Controls

Use of the Services must comply with U.S. export control and sanctions laws.

13. Changes

This Privacy Policy may be updated at any time.

14. Contact

The Chameleon Group, Inc. 
California, USA 
info@chameleongroup.com