PRIVACY

Privacy Policy

Effective date: 2026-09-02

This policy explains how CMEPath collects, uses, discloses, protects, and retains personal data when you use the website, accounts, trials, courses, and payment services.

1. Data controller

SYNERGY6 PTY LTD
Trading as: CMEPath
17 Joyhurst Street, Durban, 4091
Registration country: South Africa
[email protected]

Privacy questions and rights requests may be sent to [email protected].

2. Data we collect

  • Account and contact data: name, email address, country, telephone number, and sign-in information.
  • Study data: courses, trials, sessions, answers, scores, confidence, bookmarks, goals, progress, and content reports.
  • Order data: product, term, price, order status, and PayPal transaction identifiers. We do not store complete card numbers.
  • Technical and security data: IP address, device and browser details, logs, and essential cookies needed for sign-in, security, carts, language, and progress.
  • Communications: support messages, complaints, and content reports.

3. How we use data

We use data to create accounts, operate trials and paid access, save progress, score answers, prevent fraud and misuse, process orders and refunds, provide support, secure the service, comply with law, and improve reliability. We do not sell personal data.

4. Legal bases

We process data where necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and service improvement, and obtain consent where required. Consent may be withdrawn without affecting earlier lawful processing.

5. Recipients and service providers

We may disclose the minimum necessary data to hosting and infrastructure providers, Cloudflare for security and delivery, WordPress, WooCommerce, and LearnDash to operate the platform, PayPal for payment and fraud prevention, email and support providers, professional advisers, and competent authorities where legally required. Providers must handle data for their services and protect it.

6. International transfers

Data may be processed outside your country because the seller and service providers operate internationally. We use appropriate contractual and organizational safeguards where required and preserve mandatory rights in your country.

7. Retention

Account and progress data is kept while the account is active and as needed to deliver the service. Anonymous trials are normally retained for 30 days after last activity. Order, accounting, fraud, and dispute records are kept for applicable legal or evidential periods. Data is deleted or anonymized when no longer needed.

8. Cookies and analytics

We use essential cookies for sign-in, security, cart operation, language, and session continuity. Behavioral analytics and personalized advertising are not enabled at launch. If non-essential technologies are introduced, we will provide notice and consent choices where required.

9. Security

We use encryption in transit, access controls, role separation, backups, logging, updates, and reasonable monitoring. No system is completely secure; contact us promptly if you suspect that your account has been compromised.

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy; withdraw consent; and complain to the competent supervisory authority. We may verify identity and retain records where law requires it.

11. Children

The service is intended for professional examination candidates and is not directed to children under 18. A minor may use it only with guardian permission and supervision where lawful.

12. Changes

We may update this policy when the service, providers, or law changes. We will display a new effective date and give additional notice when required.

AI tutor privacy

When you use the tutor, your questions, selected course passages and limited conversation context are sent through OpenRouter to the Google Gemini model provider. We do not send account or payment details. Requests exclude providers that collect data for training. Provider processing and retention policies vary, and processing may occur outside your country. Local conversations are retained for 30 days and can be deleted in the tutor. Minimal usage and cost records remain for accounting and are disassociated from your account when it is deleted.

OpenRouter privacy · Google Gemini API terms

Employer enquiries

When you submit an employer enquiry, we store your name, organization, email address, team size, pathway, preferred language and message, together with your consent time. These details are used to review and respond to the enquiry, not to add you to marketing. They are held in a private administrator inbox. When alerts are enabled, the site administrator receives an email linking to that inbox, without the submitted details. A keyed hash of the connection address is used for up to an hour to limit abusive requests; the raw address is not stored with the enquiry. We retain the enquiry while needed to handle it. You can request access or removal through the contact method in this policy. Please do not submit employee records, client information or sensitive details in the form.