Last updated 25 October 2026. Short version: we collect the least we can, we keep it on our own server and in our communications platform, we do not sell it, and there are no third-party trackers on this site. Our system uses some cookies on your browser to make sure things operate correctly and we provide an easy method to forget your information.
Your name and email, which of our access passwords you used, and what brought you here. You go onto our follow-up list, described below.
Your test answers, your score on each test, how many tries you used and when you sent each one, and your final grade. Our team grades each short answer under its own random six-digit code, without your name. This is what produces your grade and, when you pass, your certificate and the employer scorecard.
A password, stored scrambled so nobody can read it, us included. It goes with the name and email you started with.
A payment for an extension or full enrollment goes through a payment link on our communications platform. Card details go to the payment processor and never reach our server. Our server keeps what you bought, the amount, the date, and your name and email, so it can unlock what you paid for.
Anything you type into a form, such as a quote request, a scorecard request or a drawings inquiry, plus the email address you gave us. For the DBB Digital Black Box waiting list and build inquiries we also keep the internet address the request came from, which shows roughly where you are, and send you a monthly update about what you asked about. Scorecard requests are kept without it, and the email you give goes on our list for shop training news. Every message has an unsubscribe link.
Requests to the server, for security and to keep the site working. The end of every address is cut off before it's written, browser details aren't kept, and starting the training, leaving the list or asking for a scorecard isn't logged at all. Kept short-term.
We use two things in your browser, and neither of them tracks you across other websites:
shandoka_learner keeps the training open on this browser, and keeps
you signed in once you have an account. It holds a signed reference to your entry,
and your name and email aren't in it. The additional shandoka_reviewer
cookie may be used as a marker during a promotional access period, such as press
credentials or a prospective customer looking at the course. It lets in the course
content but not the tests.
Your progress, including the scores the server sends back after each test, is kept in your own browser so the site remembers where you were. Your name, email and answers aren't kept there. Forget me clears this too.
We count page views, using our own software on our own server. There is still no third-party analytics package, no advertising pixel and no social tracker on this site, and nothing about your visit is sent to another company.
The page you opened, the site that linked you (the domain only, because a full address can contain a search you typed), roughly how wide your screen is, and which language the page was in.
Your address and browser are combined with a secret that we generate fresh each day, and the result is stored as an unreadable code. The previous day's secret is deleted, so the same person cannot be followed from one day to the next. We do not store your IP address.
Whether someone pressed enroll, switched language, reported a broken link, or reached the end of a module. It tells us which parts of the course lose people. It is not tied to a person.
We honor Global Privacy Control and Do Not Track: if your browser sends either, nothing is recorded at all. Our analytics sets no cookie either way, so it needs no cookie banner.
While we're in development, starting the training puts you on our Beta Reviewer follow-up list. This is the notice you agree to when you press start:
Your name, your email, which access password you used, what brought you here, and the date you agreed to the notice. During the beta it also holds your test answers and grades, the dates that set your deadlines, and your account password (scrambled) if you make one.
Keeping the training open to you while we're in development, evaluating the effectiveness of our teaching methods and material, learning the difficulty level of the questions, grading your tests, sending you your deadlines, your grade and the offers that go with them, and one email when the full version launches. We don't use it for anything else.
We'll show you the new wording and ask you to agree before the course opens for you again. You can leave the list at that point instead.
The violet Forget me button at the bottom of every training page, the link in any email we send you, or a note to training@shandokacycles.com is all you need to do. We remove your entry, your tests and your grades, so it ends your access. If our communications platform first got your details from the course, that contact is deleted. If you were already in it for another reason, such as a DBB sign-up or an inquiry, the record stays and only the course's tags and fields come off, because those are separate requests you made. A record of each payment, with the name and email you paid under, stays in our books so we can settle any dispute about funds. Copies in our nightly backups are gone within 30 days.
Our communications platform sends you our emails and carries our payment links. It gets your name, your email, where you are in the course (joined, finished, passed), the dates that set your deadlines, and any password link you ask for. It never gets your test answers or your scores. Its payment processor handles your card. Emails sent through it record whether you opened them and which links you clicked, so we can see which ones help. Our hosting provider sees your details because the server runs there. Our team sees your short answers, each under its own random six-digit code and without your name or any location or portal details. Nobody else! We never sell or rent your details.
One deliberate exception you control: if you hand an employer your scorecard code, we send them your results when they ask. We tell you who asked, and you can have the code revoked. We do not provide any of your personal details to the viewer of your test results except your name and your email address, each shown only in part to protect your identity: the first and last character of the name, and the first and last character of the email before the @, plus the @domain. They also receive your overall test score and the date you passed each module.
Your certification record we keep indefinitely, because its whole value is that you can point an employer at it years later. The follow-up list we keep until you leave it, and at launch your entry carries over to the full version. Your test answers and grades stay with your entry until you leave it. Payment records stay in our books and that stores your name and your email after you've used Forget me so we can locate and prove or dis-prove any fund disputes. Inquiries we keep while they're useful and then delete. Server logs are short-term.
Ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete it at training@shandokacycles.com. Deleting your account means the certificate record goes too, so we will confirm that is what you want. Every email we send has a one-click unsubscribe, and the Forget me button takes you off the follow-up list without asking us.
16 and older can enroll on their own for free previews but must have a payment method in their name to purchase access. Otherwise, parental account payment and approval will be needed for individual account to be established.
13 to 15 can only take the course through a sponsored account held by a parent or guardian, or by a youth organization such as a school, scout troop or YMCA. The learner can't sign up alone. We collect only what the course needs from them: their name, their progress and their test results. The sponsor gives consent, can see that information, and can ask us to correct or delete it at any time. We don't send young learners marketing email, and their scorecard code is only shared with an employer if the sponsor or registered parent/guardian agrees.
Under 13: the course isn't offered, and we don't knowingly collect information from children under 13. If you believe we have, tell us and we'll delete it.
This policy describes what the site does today.
