Privacy Policy

1. Introduction

Welcome to CDL Study Buddy ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cdlstudybuddy.com and use our services, including our CDL practice tests, Entry-Level Driver Training (ELDT) courses, and related educational materials.

By accessing or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Name, email address, phone number, mailing address, date of birth
• Enroll in ELDT courses: Commercial Driver's License (CDL) number, state of issuance, license class, endorsements sought
• Complete training: Training records, test scores, course completion dates, certificate information
• Contact us: Any information you include in correspondence with us
• Make payments: Payment card information (processed securely through third-party payment processors)

2.2 Information Automatically Collected

When you access our website, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, course progress
• Location Data: General geographic location based on IP address
• Log Data: Access times, referring URLs, error logs

2.3 Information from Third Parties

We may receive information about you from:

• Identity verification services
• Payment processors
• Analytics providers

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: Deliver CDL practice tests, ELDT training courses, and educational content
• Account Management: Create and manage your user account, track your progress
• FMCSA Compliance: Report training completion to the FMCSA Training Provider Registry (TPR) as required by federal regulations
• Issue Certificates: Generate and provide training completion certificates
• Communication: Send service-related notifications, updates, and promotional materials (with your consent)
• Improve Services: Analyze usage patterns to enhance our platform and content
• Security: Detect and prevent fraud, unauthorized access, and other security issues
• Legal Compliance: Comply with applicable laws and regulations

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 FMCSA Training Provider Registry

Important: As a registered ELDT training provider, we are legally required to report your training completion information to the Federal Motor Carrier Safety Administration (FMCSA) Training Provider Registry. This includes:

• Your name and date of birth
• CDL number and state of issuance
• Training type and completion date
• Unique training certificate number

4.2 Service Providers

We share information with third-party vendors who provide services on our behalf, including:

• Cloud hosting providers
• Payment processors
• Email service providers
• Analytics services

4.3 Legal Requirements

We may disclose your information when required by law, subpoena, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

5.1 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality and security
• Performance Cookies: Help us understand how visitors use our site
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Collect anonymous data for site improvement

5.2 Third-Party Tracking

We use the following third-party services that may place cookies:

• Google Analytics: Website analytics and usage tracking
• Google reCAPTCHA: Spam and bot protection

5.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect site functionality. Most browsers allow you to:

• View what cookies are stored
• Delete individual or all cookies
• Block third-party cookies
• Block all cookies from specific sites

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption: SSL/TLS encryption for data in transit
• Secure Storage: Encrypted databases and secure server infrastructure
• Access Controls: Limited access to personal data on a need-to-know basis
• Password Protection: Secure password hashing (bcrypt)
• Regular Audits: Periodic security assessments and updates

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (including FMCSA record-keeping requirements)
• Resolve disputes and enforce our agreements

FMCSA Requirements: Federal regulations require us to maintain ELDT training records for a minimum of 3 years after course completion.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided in Section 15.

Note: Certain information submitted to the FMCSA cannot be deleted or modified through us, as it is maintained by federal systems.

9. Third-Party Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you access.

Third-party services we integrate with include:

• Google Analytics: Google Privacy Policy
• Payment Processors: Secure payment processing with PCI-DSS compliant providers

10. Children's Privacy (COPPA)

Our services are intended for individuals who are at least 18 years of age (or the minimum age to obtain a CDL in their jurisdiction). We do not knowingly collect personal information from children under 13 years of age in compliance with the Children's Online Privacy Protection Act (COPPA).

If we discover that we have collected personal information from a child under 13, we will promptly delete that information. If you believe we have collected information from a child under 13, please contact us immediately.

11. GDPR Compliance (European Union Users)

If you are located in the European Union (EU) or European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on consent, contract performance, legal obligations, and legitimate interests
• Data Transfers: Your data may be transferred to and stored in the United States
• Right to Lodge Complaint: You have the right to lodge a complaint with your local data protection authority
• Right to Object: You may object to processing based on legitimate interests
• Automated Decision-Making: We do not use automated decision-making or profiling that produces legal effects

12. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" or "sharing" of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: Request correction of inaccurate personal information

To exercise these rights, contact us at the information provided in Section 15 or submit a request through your account settings.

13. FMCSA Data Reporting

As a registered Entry-Level Driver Training (ELDT) provider with the Federal Motor Carrier Safety Administration (FMCSA), we have specific data reporting obligations:

• We must report training completion to the FMCSA Training Provider Registry (TPR)
• This reporting is required by 49 CFR Part 380
• Information reported becomes part of federal records
• You cannot opt-out of this reporting if you wish to receive ELDT certification

For questions about data held by the FMCSA, please visit www.fmcsa.dot.gov.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will provide notice through email or a prominent notice on our website
• Your continued use of our services after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: