Privacy policy

How we collect, use, and protect your personal data

Effective Date: June 2026
Version: 1.0

1. Introduction

PCI Global Standards is operated by Skill Up LLC ("we," "us," "our"), a limited liability company incorporated in New Jersey, USA (Company Number: 0450466060), registered address: 971 US Highway 202 N, Suite N, Branchburg, NJ 08876, USA.

This Privacy Policy describes how we collect, use, disclose, and protect personal data when you visit www.pcidssglobal.com or use our services.

We are committed to protecting your privacy and processing your data in accordance with applicable laws, including:

  • The General Data Protection Regulation (GDPR) — for individuals in the European Economic Area (EEA)
  • The UK General Data Protection Regulation (UK GDPR) — for individuals in the United Kingdom
  • The California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) — for California residents
  • The CAN-SPAM Act — for email communications to US residents
  • Other applicable data protection laws in relevant jurisdictions

2. Data We Collect

2.1 Information You Provide Directly

  • Full name and email address (account registration)
  • Billing name and address (purchase)
  • Payment information (processed securely by Shopify, PayPal, Apple Pay, Google Pay, and more — we do not store full card details)
  • Course completion and assessment data
  • Communications you send us

2.2 Information Collected Automatically

  • IP address and approximate location
  • Browser type, operating system, and device information
  • Pages visited, time spent, and clickstream data
  • Referral source
  • Cookie identifiers (see our Cookies Policy)

2.3 Information from Third Parties

  • Payment confirmation and transaction records from Shopify, PayPal, Apple Pay, and Google Pay
  • Analytics data from Google Analytics

3. How We Use Your Data

We use your personal data for the following purposes:

  • To process your enrolment and deliver course content (contract performance)
  • To issue Certificates of Completion (contract performance)
  • To process payments and manage your account (contract performance)
  • To send essential service communications, including purchase confirmations and course access details (contract performance)
  • To send marketing communications where you have provided consent or where permitted by law (legitimate interests / consent)
  • To improve our platform through analytics (legitimate interests)
  • To comply with legal obligations (legal obligation)
  • To detect and prevent fraud and security incidents (legitimate interests)

4. Legal Bases for Processing (GDPR / UK GDPR)

For users in the EEA and UK, we process personal data under the following legal bases:

  • Contract: Processing necessary to perform our contract with you (course delivery, payment)
  • Legal Obligation: Processing required by applicable law
  • Legitimate Interests: Analytics, fraud prevention, and platform improvement
  • Consent: Marketing communications and non-essential cookies

5. Data Sharing and Disclosure

We do not sell your personal data.

We may share your data with:

  • Shopify Inc. (e-commerce platform and payment processing)
  • PayPal Holdings Inc. (payment processing)
  • Apple Inc. (Apple Pay)
  • Google LLC (Google Pay and Analytics)
  • Email service providers (for transactional and marketing communications)
  • Regulatory authorities, law enforcement, or courts where legally required
  • Professional advisers (lawyers, accountants) under confidentiality obligations

All third-party processors are required to handle your data in accordance with applicable data protection laws.

6. International Data Transfers

As a global platform, your data may be transferred to and processed in countries outside your country of residence, including the United States.

Where we transfer data from the EEA or UK to countries not deemed adequate by the European Commission or UK ICO, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) or rely on the UK's International Data Transfer Agreement (IDTA).

7. Data Retention

  • Account data: For the duration of your account plus 3 years after closure
  • Purchase and transaction records: 7 years (for tax and legal compliance)
  • Certificate of Completion records: 5 years
  • Marketing preferences: Until you unsubscribe or withdraw consent
  • Analytics data: As per the analytics provider's retention settings

8. Your Rights

EEA and UK Users (GDPR / UK GDPR)

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your supervisory authority

For UK users, please visit: ico.org.uk

California Residents (CCPA / CPRA)

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt out of the sale or sharing of personal information (we do not sell data)
  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your rights

To submit a CCPA/CPRA request, contact us at [email protected] with "Privacy Request" in the subject line.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data, including SSL/TLS encryption, access controls, and secure payment processing.

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our platform is not directed at individuals under the age of 18.

We do not knowingly collect personal data from children.

If you believe a child has provided us with personal data, please contact us at [email protected] and we will take prompt steps to delete it.

11. Marketing Communications

We may send you marketing emails about our courses and services where you have opted in or where permitted by applicable law.

You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or contacting us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify you of material changes by email or by posting a notice on the platform.

The updated policy will always be available at www.pcidssglobal.com/privacy-policy .

13. Contact and Data Controller Details

Data Controller: Skill Up LLC
Trading as: PCI Global Standards
Address: 971 US Highway 202 N, Suite N, Branchburg, NJ 08876, USA
Email: [email protected]
Website: www.pcidssglobal.com

For EEA users wishing to lodge a complaint, a list of supervisory authorities is available at: edpb.europa.eu/about-edpb/board/members_en

For UK users, Information Commissioner's Office (ICO): ico.org.uk