Privacy Policy

Last updated: 24 October 2026

This policy explains what personal data QuadraEdge collects, why, how long it is kept and what rights you have. QuadraEdge (quadraedgelms.com) is operated by ACS LLC, registered in Montenegro (registration number 50054381, tax ID 02192373), which is the controller of the personal data described here.

1. Data we collect

Account data: name, username, email address, organisation, role and a securely hashed password. Learning data: enrolments, Learning Pass and Team Pass membership, lesson progress, time spent on lessons, saved SCORM activity data, quiz answers and scores, and certificates. Enquiry data: what you send through the contact or pilot forms (name, email, organisation, message and any file or link you attach), together with the IP address and browser type of the submission. Technical data: IP addresses used for sign-in attempts and other security limits, a record of administrative actions, and visit statistics (pages viewed, referring page, browser, device type and country, plus the IP address on some public pages).

2. Why we use it

To create and run your account and give you access to courses (performance of a contract); to record progress and to issue and verify certificates (contract, and our legitimate interest in reliable certificates); to answer enquiries and prepare proposals (steps you ask for before a contract); to keep the platform secure and prevent abuse (legitimate interest); and to understand, in aggregate, how the public site is used (legitimate interest). We do not sell personal data and do not use it for advertising.

3. Certificates and verification

Each certificate has a verification code and a QR code. Anyone who has the code can confirm the certificate on our verification page, which shows the learner's name, the course, the organisation, the issue date and whether the certificate is still valid. Share the code only with people you want to be able to check it.

4. Cookies

We use two first-party cookies: a session cookie that keeps you signed in and protects forms (removed when you sign out or close the browser), and a qe_lang cookie that remembers your chosen language for up to one year. We do not use advertising cookies or third-party tracking cookies.

5. Service providers

We share data only with providers that help us run the service: our web hosting provider, which stores the platform and its database; email delivery for account and enquiry messages; Google Fonts, which serves the site's typefaces and therefore receives your IP address when a page loads; and YouTube (privacy-enhanced mode, youtube-nocookie.com) when a lesson contains an embedded video. Course authors may use OpenAI to draft course content from material they supply; learner data is not sent to OpenAI. If you contact us through WhatsApp, WhatsApp's own terms apply.

6. International transfers

Some providers (Google, YouTube) may process data outside Montenegro and the European Economic Area. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

7. How long we keep it

Account and learning data: while your account is active, and after that only as long as needed for certificates, reporting to the organisation that enrolled you, or legal obligations. Issued certificate records are kept so they can still be verified. Enquiries: as long as needed to handle the request and any work that follows. Sign-in and security records: one to two days. Visit statistics: a rolling log of the most recent visits.

8. Your rights

You may ask for access to your data, a copy of it, its correction or deletion, or restriction of its processing, and you may object to processing based on our legitimate interests. If your account was created by your organisation, we may refer some requests to that organisation. You also have the right to complain to the Agency for Personal Data Protection and Free Access to Information of Montenegro, or to the data protection authority where you live.

9. Security

Passwords are stored as hashes, connections use HTTPS, access to personal data is limited to authorised administrators, and administrative actions are logged.

10. Contact and changes

For privacy questions or requests, write to hello@quadraedgelms.com. We reply within one month. If this policy changes, the new version will be published on this page with a new date.