Privacy Policy

This Privacy Policy explains how Knight Squad Academy (“Knight Squad Academy”, “we”, “us”, or “our”) handles personal information when you:

• visit or use our websites, checkout pages, learner portals, or credential services;
• enroll in or attend a training program;
• register for or sit a certification exam;
• purchase, receive, or redeem a voucher;
• contact us for support, sponsorship, workshops, or another enquiry.

Training and certification are independent Services, but this Policy applies to the information handled through both. We process personal information under applicable data-protection law, including Bangladesh law and, where relevant, laws that apply in a user’s location.

The information we collect depends on how you interact with us. We aim to collect what is reasonably necessary to deliver the requested Service, protect it, and meet our obligations.

• Identity and contact data: name, email address, phone number, country, and organization where provided.
• Account data: login identifier, profile details, account status, and authentication or security records.
• Order and billing data: billing address, postcode, purchased item, amount, currency, coupon information, invoice ID, and order status.
• Payment metadata: transaction ID, payment method, status, and limited details returned by the payment provider.
• Training data: enrollment, attendance, progress, completion, submissions, lab access, and related communications.
• Certification data: voucher status, exam registration, attempts, results, integrity checks, certificates, and credential-verification records.
• Technical data: IP address, device and browser information, operating system, timestamps, log records, and approximate location inferred from an IP address.
• Communications: messages, attachments, feedback, and information needed to respond to an enquiry or resolve an issue.

We use personal information for the following purposes:

• Service delivery: creating accounts, processing enrollment, providing platform access, administering exams, and issuing credentials.
• Orders and payments: completing transactions, applying vouchers or coupons, issuing invoices, and managing payment enquiries or disputes.
• Communication: sending confirmations, access details, schedules, exam information, security messages, and policy notices.
• Support: responding to requests, diagnosing issues, and maintaining a record of the resolution.
• Quality and improvement: understanding how Services perform and improving content, delivery, usability, and learner experience.
• Security and integrity: detecting fraud, preventing unauthorized access, protecting exams, investigating abuse, and enforcing applicable rules.
• Compliance: maintaining accounting and operational records and responding to valid legal requests.
• Marketing: sending relevant updates where you have opted in or where applicable law otherwise permits, with an option to unsubscribe.

Where applicable law requires a legal basis for processing, we rely on one or more of the following:

• Contract: processing needed to provide a Service you request or take steps before entering into that agreement.
• Legitimate interests: operating, protecting, supporting, and improving our Services where those interests are not overridden by your rights.
• Legal obligation: processing needed to comply with applicable tax, accounting, regulatory, or lawful disclosure requirements.
• Consent: processing based on clear permission, such as optional marketing or non-essential cookies where consent is required.

If we rely on consent, you may withdraw it at any time. Withdrawal does not make earlier processing unlawful.

We retain personal information only for as long as reasonably needed for the purpose for which it was collected, including:

• while your account remains active and for a reasonable period afterward;
• while needed to provide, verify, or defend training, examination, voucher, and credential records;
• while needed to handle enquiries, disputes, fraud prevention, and security investigations;
• for periods required by tax, accounting, contractual, or other applicable legal obligations.

Retention periods vary by record type. When information is no longer required, we delete, anonymize, or securely isolate it unless continued retention is permitted or required by law.

We use administrative and technical safeguards designed to protect personal information against unauthorized access, alteration, loss, misuse, and disclosure. Depending on the system, these measures may include access restrictions, secure configuration, monitoring, backups, and encryption in transit.

No internet transmission or storage system is completely secure. We work to maintain and improve our controls, but cannot guarantee absolute security. If you believe your account or information is at risk, contact us promptly.

We do not sell personal information. We share information only when needed to operate the Services, complete a requested transaction, comply with law, or protect legitimate rights and security.

• Payment providers: such as Stripe and bKash, for transaction processing and payment support.
• Hosting and infrastructure providers: for applications, databases, storage, security, and service delivery.
• Email and communication providers: for transactional messages, notifications, and permitted marketing.
• Analytics and performance providers: to understand traffic, diagnose issues, and improve reliability and content.
• Training venues and delivery partners: where necessary to arrange an in-person program or provide a clearly identified partner-supported Service.
• Professional advisers and authorities: where reasonably necessary for legal advice, accounting, audit, compliance, or a valid legal request.
• Business transactions: where information is involved in a merger, acquisition, financing, reorganization, or transfer of assets, subject to appropriate safeguards.

We expect providers processing information for us to protect it, use it only for authorized purposes, and comply with applicable contractual and legal requirements.

Knight Squad Academy is based in Bangladesh, while some infrastructure, payment, communication, or support providers may process information in other countries. Those countries may have privacy rules different from those in your location.

Where required, we use contractual, technical, organizational, or other safeguards appropriate to the transfer and applicable law.

Depending on applicable law and your location, you may have rights concerning your personal information, including:

• Access: ask whether we process your information and request a copy.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: request deletion where the law provides that right.
• Restriction: ask us to limit certain processing in qualifying circumstances.
• Objection: object to certain processing, including direct marketing.
• Portability: request eligible information in a structured, commonly used format where applicable.
• Withdraw consent: withdraw consent for future processing where consent is the legal basis.
• Complaint: raise a concern with us or an appropriate data-protection authority where available.

Rights are not absolute and may be limited by legal, security, examination-integrity, fraud prevention, accounting, or recordkeeping requirements. We may verify your identity before completing a request.

We use cookies and similar technologies to operate the website, protect sessions, remember preferences, and understand how pages and Services are used.

• Strictly necessary: required for core functions such as security, authentication, checkout, and session management.
• Functional: used to remember settings or provide requested features.
• Analytics: used to understand visits, performance, and content engagement so we can improve the Services.

You can manage cookies through your browser and, where available, our consent controls. Disabling necessary cookies may prevent parts of the Services from working. We request consent before using non-essential cookies where applicable law requires it.

The Services are not directed to children under 13 or a higher minimum age required by local law. We do not knowingly collect personal information from a child below the applicable age without valid authorization.

If you believe a child has provided personal information without appropriate permission, contact us. We will review the matter and take appropriate action, which may include deletion.

We may update this Policy when our Services, providers, practices, or legal obligations change. We will revise the “Last reviewed” date and, where appropriate, provide additional notice of a material change.

Contact us to ask a privacy question, exercise an available right, or report a concern about how personal information is handled.