Privacy Policy
Effective Date: October 19, 2026 · Last Updated: October 20, 2026
This Privacy Policy explains how EHS Technologies LLC ("EHSTEC," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use EHSTEC University, EHSTEC LMS, and EHSTEC Safety and related services, and when you contact us through our public forms (collectively, the "Services"). By using our Services, you consent to the practices described in this Privacy Policy. This Privacy Policy is referenced by our Terms of Service; acknowledging this Privacy Policy is not the same contractual act as accepting the Terms of Service.
1. Information We Collect
We collect various types of information to provide and improve our Services, including:
1.1 Personal Information
- Name, email address, phone number, and company details.
- Payment information for subscription and billing purposes.
- Login credentials and authentication details.
- Optional details you choose to provide when creating a free EHSTEC University account — your company or organization, your role, and what brings you to EHSTEC. These fields are optional, are never required to create an account, and never affect your access to free courses.
- Business contact details you submit through an employer-interest enquiry form — your name, business email, and company, and optionally your team size, phone number, and a message — which we use solely to respond to your enquiry.
- Where an employer asks us to give its team access to free EHSTEC University training, any employee email addresses the employer provides for that purpose, or an email domain the employer asks us to permit. This may include a list of employees — names and email addresses — that an employer uploads to us so we can issue invitations in bulk. We use these details only to send and manage one-time invitations to create a free individual University account; a name provided this way is used only to address the invitation and is never a substitute for the name you choose when you set up your own account. When you accept an invitation, we collect the name, email address, and password you choose for your account.
1.2 Usage Data
- Information about how you interact with our Services, such as login times, page views, and system logs.
- Device information, including IP address, browser type, and operating system.
- When you submit one of our public forms, we use your IP address to prevent abuse and spam. For employer enquiries we store only a one-way (hashed) representation of your IP address in the enquiry record — not the address itself. For free-account signup your IP address is used only momentarily to rate-limit submissions and is not stored with your account.
1.3 Cookies and Tracking Technologies
- We use cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and improve service functionality.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing and Improving Services: To deliver, maintain, and enhance our Services.
- User Account Management: To create and manage user accounts and preferences.
- Security and Compliance: To detect fraud, enforce security measures, and comply with legal obligations.
- Service and Enquiry Communications: To send service-related messages (such as email verification and account notices) and to respond to enquiries and provide customer support. These communications are not promotional and do not require marketing consent.
- Understanding Demand: To understand who is interested in EHSTEC and to tailor our Services, using the optional account-qualification details above. Providing these details is optional and never affects access.
- University Invitations: When an employer requests EHSTEC University access for its team, we use the employee email addresses or permitted email domain the employer provides solely to send and manage one-time invitations to create a free individual University account. An EHSTEC University account belongs to the individual learner: the employer does not receive access to, and we do not report to the employer, that individual's learning activity, course progress, scores, or completion records — this activity is private to the learner.
- Marketing (opt-in only): If — and only if — you affirmatively opt in, we send occasional product updates and training tips. We keep a record of your consent, including the date and the version of the consent wording you agreed to. Opting in is separate from accepting our Terms of Service, is never required to create an account or to receive a response to an enquiry, and you can withdraw it at any time.
3. How We Share Your Information
We do not sell or rent your personal information. However, we may share it with:
- Service Providers: Third-party vendors who assist with payment processing, analytics, email delivery, and security.
- Legal Authorities: When required by law or in response to valid legal requests.
- Business Transfers: In the event of a merger, acquisition, or sale of company assets.
4. Data Security
We implement industry-standard security measures to protect your information from unauthorized access, alteration, or disclosure. However, no online transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention
We keep personal information only as long as needed for the purposes described in this Policy, unless a longer period is required by law or to establish, exercise, or defend legal claims.
- Employer-enquiry information: retained for up to 24 months from your last interaction with us about the enquiry, after which inactive enquiry records are deleted.
- Optional account-qualification details: retained for the life of your account and removed when your account is deleted.
- Marketing-consent records: retained while your opt-in is active and for a reasonable period afterward as a record that consent was given and, where applicable, withdrawn.
- University invitation records: when an employer-approved University invitation is issued, we keep a record of it — the recipient email or permitted email domain, and the invitation's status and expiry. We never store the usable invitation link itself; it is kept only as a one-way (hashed) value that cannot be reversed. An invitation record is retained while the invitation is outstanding and for a short period after it expires, is used, or is revoked, after which it is automatically deleted. A legal hold may extend retention of a specific record where required to establish, exercise, or defend legal claims. Deleting an invitation record does not affect any University account that was already created from it.
- Employer-provided import files: when an employer uploads a list of employees so we can issue University invitations in bulk, we keep the raw uploaded rows (names and email addresses) only as long as needed to review, issue, and send those invitations, and we remove them within 30 days of the upload whether or not the upload is ever used to issue invitations — keeping only non-identifying summary information, such as the number of rows and, where invitations were issued, how many were issued and sent. This is a shorter, separate retention period from the invitation records above. A legal hold may extend retention of a specific upload where required.
You may request deletion of this information at any time (see "Your Rights and Choices" below), subject to our legal obligations.
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access and Correction: You can review and update your personal information.
- Data Deletion: You can request the deletion of your personal data, subject to legal obligations.
- Marketing Preferences: Marketing emails are opt-in. You can decline them at signup and withdraw your consent at any time by contacting us; any marketing email we send also includes an unsubscribe link. Withdrawing marketing consent does not affect service or enquiry communications.
- Cookies Management: You can modify your browser settings to control cookies usage.
7. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites.
8. Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of our Services after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, or to make a privacy request, please contact us at:
(774) 269 8581
info@ehstec.com