1. Introduction
ENVSN Studios (“we”, “us”, “our”) operates Accreditation Suite™ and provides executive consulting and accreditation services. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and your rights. It applies to data collected via envsn.xyz, the Accreditation Suite™ intake portal, and related communications.
2. Data we collect
- Contact and identity data: name, organization, role, email, phone, mailing address
- Program materials and documents: curriculum, syllabi, assessment materials, governance documents, and other files you upload for evaluation
- Payment data: payment method, transaction reference, billing name and address. We do not store full card numbers; card processing is handled by the intake/payment provider
- Usage data: pages visited, interaction events, IP address, browser and device information, and analytics for site performance
- Communications: emails, support requests, and notes exchanged during the engagement
3. How we use your data
We use personal data to:
- Provide and manage Accreditation Suite™ services and consulting engagements
- Verify payments and reconcile manual transfers
- Communicate about your project, deliverables, and support
- Improve our services, perform analytics, and maintain security
- Comply with legal obligations
4. Legal basis for processing (where applicable)
We process personal data based on:
- Contractual necessity — to perform the services you request
- Legitimate interests — for fraud prevention, service improvement, and recordkeeping
- Consent — where we ask for explicit consent (e.g., marketing communications)
- Legal obligations — to comply with applicable laws
5. Sharing and disclosure
We do not sell personal data. We may share data with:
- Service providers (payment processors, cloud storage, analytics) under contract and confidentiality obligations
- Professional advisors (legal, accounting) when necessary
- Third parties only with your consent or as required by law
6. Data retention and deletion
Project data retention: Uploaded program materials and project files are retained only as long as necessary to complete the engagement and for verification. By default, we delete uploaded course materials and files 30 days after project completion or final verification, unless you request earlier deletion or opt into archival storage.
Account and transactional records: We retain transactional records and minimal project metadata for legal, tax, and audit purposes for a reasonable period as required by law.
7. Security
We use administrative, technical, and physical safeguards to protect data, including encryption in transit and at rest, access controls, and secure storage. Access to uploaded materials is limited to assigned project staff and authorized reviewers.
8. Your rights
Depending on your jurisdiction, you may have rights to: access, correct, delete, or restrict processing of your personal data; object to processing; and request portability. To exercise rights, contact info@envsn.xyz. We will respond within applicable legal timeframes.
9. Cookies and tracking
We use cookies and analytics to operate the site and measure performance. You can manage cookie preferences via your browser or the site’s cookie controls.
10. International transfers
Data may be processed in jurisdictions outside your country. We take steps to ensure appropriate safeguards for international transfers.
11. Children
Our services are for organizations and professionals. We do not knowingly collect personal data from children under 16.
12. Changes to this policy
We may update this policy; material changes will be posted with an updated effective date.
13. Contact
Questions or requests: info@envsn.xyz