Who We Are

Karma Seminars is the data controller responsible for the processing of personal data described in this Privacy Policy.

Data Controller: Karma Seminars
Email: info@karmaseminars.com
Address: 1346 The Alameda, Suite 7-360, San Jose, CA 95126
Tax ID: 58-2554149

What Data We Collect

We collect personal data that is necessary to sell and deliver continuing education courses for pest control licensing (our services are intended for adults who are at least 18 years old). The types of personal data we collect include:

Cookie consent preferences (your choices about which non-essential cookies you allow), recorded through our consent management system (Trustwards).
Device and technical information, such as IP address, browser type, device identifiers, and information about how your device interacts with our website (for example, pages accessed and the date/time of access).
Account and course-related information, such as information you provide when creating and using a student account, enrolling in courses, completing course content, taking quizzes, and obtaining certificates.
Order, payment, and billing information needed to process purchases, such as purchase details and billing details; payment card details are handled by our payment processor rather than stored by us.
Contact information, such as your name and email address, including when you contact us or when you sign up to receive marketing emails.
Usage data collected through analytics technologies (such as Google Analytics) when you consent to analytics cookies, which may use pseudonymous identifiers to understand how visitors use our website.
Advertising and marketing tracking data collected through advertising technologies when you consent to advertising cookies, which may use pseudonymous identifiers to measure and deliver advertising and to understand the effectiveness of campaigns.

Sources of personal data:
We collect data directly from you when you create an account, enroll in courses, make a purchase, sign up for marketing emails, or contact us.
We collect some data automatically when you use our website (such as IP address and basic technical logs).
We collect data from cookies and similar technologies; non-essential cookies (such as analytics and advertising cookies) are used only when you choose to allow them through our cookie settings.

Providing certain data is required to purchase and access courses (for example, account, course, and transaction information). Providing data for analytics, advertising, and marketing emails is optional and depends on your consent.

How We Use Your Data

We use your personal data for the purposes below. Each purpose is linked to a legal basis under GDPR.

Providing our courses and student services, including creating and managing student accounts, delivering course content, tracking course progress, administering quizzes, and issuing certificates (legal basis: contract).
Processing orders and payments and providing purchase-related support (legal basis: contract).
Responding to your inquiries and providing customer support (legal basis: contract).
Sending marketing emails to you (legal basis: consent). You can unsubscribe at any time using the link in the email or by contacting us.
Measuring and understanding website usage through analytics technologies that require cookies or similar identifiers (legal basis: consent).
Delivering and measuring advertising using advertising networks and related tracking technologies that require cookies or similar identifiers (legal basis: consent).
Protecting our website, users, and business against fraud, abuse, and security threats, and maintaining the security of our systems (legal basis: legitimate interests).

Who We Share Your Data With

We share personal data only as needed to operate our services, process payments, provide customer support, and run analytics and advertising when you consent. Where we use service providers, they process personal data under their own privacy policies and, where applicable, under contractual terms with us.

Stripe (payment processing): We share transaction and payment-related information with Stripe to process payments securely and to handle payment authentication and fraud prevention related to transactions.

WooCommerce (e-commerce platform functionality): We use WooCommerce to manage purchases and order processing on our website, which involves processing order and billing details needed to complete transactions.

Google Analytics (analytics): When you consent to analytics cookies, we use Google Analytics to understand how visitors use our website and to improve our services.

Google (advertising and tag management): When you consent to advertising cookies, we use Google services that support advertising measurement and delivery. We also use Google Tag Manager to manage website tags; where tags involve non-essential cookies, they are controlled by your consent choices.

Microsoft (analytics/behavioral measurement): When you consent to analytics cookies, we use Microsoft Clarity to better understand how users interact with our website and to improve usability.

Tawk.to (live chat): If you use our chat features, Tawk.to processes the information you submit through the chat and related technical data to provide the chat service.

Spotlightr (video hosting/streaming): We use Spotlightr to host and deliver video content. When video content is played, Spotlightr may process technical and usage data to deliver the video and measure performance.

Brevo (Sendinblue) (email service provider): If you sign up for marketing emails, we use Brevo (Sendinblue) to manage email distribution, unsubscribes, and related email delivery metrics.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of our service providers are located outside the EU/EEA, specifically in the United States, and we also use a provider in France. Where personal data is transferred internationally, we use appropriate safeguards under GDPR.

United States transfers:
Google Analytics, Google Tag Manager, and other Google services: transfers to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).
Microsoft Clarity: transfers to Microsoft Corporation in the United States. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework (DPF).
Stripe: transfers to Stripe, Inc. in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for these transfers.
Tawk.to: transfers to Tawk.to, Inc. in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for these transfers.
Spotlightr: transfers to Spotlightr in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for these transfers.

France transfers:
Brevo (Sendinblue): processing in France (within the EU), so this does not involve an international transfer outside the EU/EEA.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Student accounts, course progress, quiz logs, and certificate histories are retained within our online learning management platform to ensure continuous user access and to verify historical educational records.
Commercial transaction data and billing records processed via WooCommerce are securely retained for a minimum of 7 years to fulfill United States federal and state regulatory tax, legal, and accounting obligations.
Necessary student completion details and earned Continuing Education Units (CEUs) are transmitted securely to required state licensing boards, regulatory bodies, and mandated credentialing entities (including the DPR, SPCB, and other required reporting agencies) solely to verify compliance with professional licensing requirements.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.
Tax and accounting records: 10 years (legal requirement).

Analytics data: until consent is withdrawn or according to the analytics tool retention settings.
Advertising/marketing tracking data: until consent is withdrawn.
Marketing email data: until consent is withdrawn or you unsubscribe.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the following rights in relation to your personal data:

You can request access to your personal data.
You can ask us to correct inaccurate or incomplete data.
You can request deletion of your personal data.
You can request that we restrict the processing of your personal data.
You can request a copy of certain personal data you provided to us in a structured, commonly used format, and ask us to transfer it to another provider where technically feasible.
You can object to our processing of your personal data in certain situations.
Where we rely on consent, you can withdraw your consent at any time (this will not affect processing carried out before you withdrew consent).
You have the right not to be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.

To exercise your rights, contact us at info@karmaseminars.com. We will respond within one month.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. Our notification will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue, please contact us at info@karmaseminars.com.

How to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection authority in your jurisdiction. We encourage you to contact us first at info@karmaseminars.com so we can try to resolve your concerns directly.

Updates to This Policy

We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy shows when it was last changed. If we make significant changes, we will provide a notice on our website or notify you by email where appropriate. Changes take effect from the date indicated at the top of this policy. Where processing is based on your consent, we will request new consent when required.

Contact Us

Tax ID: 58-2554149
Email: info@karmaseminars.com
Address: 1346 The Alameda, Suite 7-360, San Jose, CA 95126
Data Controller: Karma Seminars