1. Who We Are (Data Controller)

Alpha Training & Consulting ("we," "our," or "us") is the data controller for personal information collected through this website.

Alpha Training & Consulting
8634 Acorn Lane, Sandy, Utah, USA
Email: [email protected]
Phone: 801-599-1579

2. Information We Collect

We collect information you give us directly:

Name, email address, phone number, and billing address
Professional information (employer, job title)
Payment information (processed by our third-party payment processor; we do not store raw card data)
Training preferences, enrolment history, and course progress
Communications you send us

We also collect information automatically when you visit our site:

IP address, browser type, operating system
Pages visited, time and date, referring URL
Analytics data via Google Analytics (GA4) — only when you have given consent

3. Legal Bases for Processing (GDPR Art. 6)

Where the GDPR applies, we rely on the following legal bases:

Contract (Art. 6(1)(b)): Processing your name, contact details, and payment information to deliver the training services you have purchased.
Legitimate Interests (Art. 6(1)(f)): Improving our website, preventing fraud, and sending administrative communications. We have assessed that these interests are not overridden by your rights.
Consent (Art. 6(1)(a)): Placing analytics cookies and sending optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Legal Obligation (Art. 6(1)(c)): Retaining transaction records to comply with tax and accounting laws.

4. How We Use Your Information

Delivering and administering your training enrolment
Processing payments and issuing receipts
Responding to inquiries and providing support
Sending service-related notifications (e.g. schedule changes)
Analysing website usage to improve content and user experience (analytics, consent-gated)
Complying with legal obligations

5. Google Consent Mode v2 & Analytics

We use Google Analytics 4 (property ID: G-7M4M91K9VT) under Google Consent Mode v2. When you first visit the site, analytics cookies are denied by default — no identifiable data is sent to Google before you give consent. If you choose "Essential Only" or "Reject All Optional," Google receives only aggregated, cookieless signals (modelled data) with no user-level identifiers. If you grant analytics consent, standard GA4 cookies (_ga, _ga_*, _gid) are set and a page view is fired. You can withdraw consent at any time via the .

6. International Transfers

We are based in the United States. If you access our site from the European Economic Area (EEA) or United Kingdom, your personal data may be transferred to and processed in the US. Where required, we rely on:

The EU–US Data Privacy Framework (DPF) for transfers to participating US entities (including Google LLC).
Standard Contractual Clauses (SCCs) approved by the European Commission as a supplemental transfer mechanism.

7. Disclosure of Your Information

Service Providers: Payment processors, email delivery providers, and analytics vendors who act as data processors on our behalf under written agreements.
Legal Requirements: When required by law, court order, or to protect the rights and safety of our users or the public.
Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred; we will provide notice before it becomes subject to a different privacy policy.
With Your Consent: For any purpose you have expressly agreed to.

8. Data Retention

We retain personal data only as long as necessary: enrolment records for 7 years (tax compliance); contact and support communications for 3 years; analytics data as configured in Google Analytics (default 26 months). Cookie consent preferences are stored in your browser's localStorage until you clear them.

9. Your Rights

Depending on your jurisdiction, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Ask us to correct inaccurate or incomplete data.
Erasure ("right to be forgotten"): Request deletion of your personal data where there is no overriding lawful basis to retain it.
Restriction: Ask us to limit processing in certain circumstances (e.g. while accuracy is contested).
Data Portability: Receive your data in a structured, machine-readable format.
Object: Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent: Withdraw any consent you have given at any time. This does not affect the lawfulness of processing carried out before withdrawal.
Lodge a Complaint: File a complaint with your local supervisory authority (e.g. the relevant EU Data Protection Authority or the UK ICO).

We will respond to requests within 30 days. Where a request is complex or we receive multiple requests from you, we may extend this by a further 60 days and will inform you of the extension within the initial 30-day period.

To exercise any right, contact us at [email protected].

10. California Residents — CCPA / CPRA

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. California residents have the right to:

Know what personal information is collected, used, disclosed, or sold about them.
Delete personal information we hold (subject to legal exceptions).
Correct inaccurate personal information.
Opt out of the sharing of personal information for cross-context behavioral advertising. You may exercise this right at any time via the or the "Do Not Sell or Share My Personal Information" link in our footer.
Non-discrimination for exercising any of the above rights.

The analytics opt-out described in Section 5 satisfies the right to limit sharing. We will respond to verifiable consumer requests within 45 days (extendable by a further 45 days with notice).

11. Cookies

For a full list of cookies in use, how to manage them, and how to withdraw consent, please see our Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites. We have no control over those sites and are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any personal information.

13. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly.

14. Security

We use appropriate technical and organisational measures (encryption in transit, access controls, regular security reviews) to protect your personal information. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted. Where changes are material, we will provide prominent notice (e.g. a banner on the website or email notification). We encourage you to review this policy periodically.

16. Contact Us

For questions, requests, or complaints relating to this Privacy Policy:

Alpha Training & Consulting
8634 Acorn Lane, Sandy, Utah, USA
Email: [email protected]
Phone: 801-599-1579