Last updated 25 September 2026. Short version: we collect the least we can, we keep it on our own server, we do not sell it, and there are no third-party trackers on this site.
Your name, email address and payment confirmation. Card details are handled by our payment processor and never reach our server.
Which modules you opened and your test results. This is what produces your certificate and the employer scorecard.
Which of our access passwords you used, so we know whether you came from Newlab, a partner, an event or a direct invitation. It identifies the group you arrived with, never anything about you personally.
Anything you type into a form — a quote request, a scorecard request, a reviewer signup, a drawings inquiry — plus the email address you gave us.
Requests to the server, including IP address, for security and to keep the site working. Kept short-term.
We use two things in your browser, and neither of them tracks you across other websites:
shandoka_session keeps you signed in. shandoka_reviewer
marks this browser as having free reviewer access and holds only a reference number.
No personal data sits in either.
Your progress, your last test attempt and your reviewer details are kept in your own browser so the site remembers where you were. You can clear it at any time, and the reviewer page has a button that does exactly that.
We count page views, using our own software on our own server. There is still no third-party analytics package, no advertising pixel and no social tracker on this site, and nothing about your visit is sent to another company.
The page you opened, the site that linked you (the domain only — never the full address, which can contain a search you typed), roughly how wide your screen is, and which language the page was in.
Your address and browser are combined with a secret that we generate fresh each day, and the result is stored as an unreadable code. The previous day's secret is deleted, so the same person cannot be followed from one day to the next. We do not store your IP address.
Whether someone pressed enroll, switched language, reported a broken link, or reached the end of a module. It tells us which parts of the course lose people. It is not tied to a person.
We honour Global Privacy Control and Do Not Track: if your browser sends either, nothing is recorded at all. No cookie is set either way — which is also why this site has no cookie banner.
Our payment processor, for payments. Our email provider, to send you mail. Our hosting provider, because the server runs there. Nobody else — we do not sell or rent your details, ever.
One deliberate exception you control: if you hand an employer your scorecard code, we send them your results when they ask. We tell you who asked, and you can have the code revoked.
Your certification record we keep indefinitely, because its whole value is that you can point an employer at it years later. Inquiries and reviewer signups we keep while they are useful and then delete. Server logs are short-term.
Ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete it — training@shandokacycles.com. Deleting your account means the certificate record goes too, so we will confirm that is what you want. Every email we send has a one-click unsubscribe.
This course is intended for adults and for supervised apprentices aged 16 and over. We do not knowingly collect information from children under 13.
This describes what the site actually does today. It has not been reviewed by a lawyer, and it does not yet address state-specific privacy rights that may apply to your customers. Both should happen before enrollment opens.
