Privacy Policy

This Privacy Policy describes how Double Digital Sp. z o.o. ("we", "us" or "our"), the operator of the HTA Course website and online learning platform, collects, uses and protects your personal information when you visit our website or use our services.

Data Controller

The data controller responsible for your personal data is Double Digital Sp. z o.o., with registered office at ul. Grzybowska 87, 00-844 Warszawa, Poland, NIP: 5273008411, VAT EU: 5273008411, KRS: 0000979253. You can contact us at info@htacourse.com regarding any privacy matters.

Information We Collect

We collect information that you provide directly to us, including your name, email address, organization, role and country when you submit forms on our website, and the billing details you enter at checkout (billing address, company name, VAT identification number). We also automatically collect usage data through cookies and analytics tools, such as your IP address, browser type and pages visited.

Payment data. Purchases are handled by Stripe. Your full card number, expiry date and CVC are entered on Stripe's own systems — we never receive or store them. From Stripe we receive only transaction data such as the payment status, amount, currency, the last four digits and brand of the card, the billing email and the customer and subscription identifiers, which we use to grant access, issue invoices and handle refunds or disputes.

Course access and security data. When you use the learning platform, we process login records, session data, IP address, device and browser information, lesson progress and access patterns. We use this to provide the course, to issue certificates, and to detect and prevent account sharing, automated content extraction and other unauthorised use of our protected materials, on the basis of our legitimate interest in protecting our intellectual property and the security of the Service.

Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a)) — when you submit a form or accept cookies;
• Contract (Art. 6(1)(b)) — to process enrollment requests and provide course access;
• Legal obligation (Art. 6(1)(c)) — to comply with accounting, tax and other legal requirements;
• Legitimate interests (Art. 6(1)(f)) — to improve our platform, ensure security and communicate with you about our services.

How We Use Your Information

We use the information we collect to communicate with you about our courses and services, to process enrollment requests and payments, to issue invoices, to provide and maintain course access, to improve our platform and to comply with legal obligations.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your course access and any subsequent renewal periods. Accounting and tax-related data is retained for the period required by applicable law. Data collected on the basis of consent is retained until you withdraw that consent.

Sharing of Data and Processors

We do not sell your personal data. We engage the following service providers who process personal data on our behalf, under written agreements and only on our instructions:

• Base44 — our platform provider, hosting the website, application, database and user authentication. Base44 acts as a processor under a data processing agreement.
• Google Ireland Limited — providing Google Analytics 4 (traffic and usage analytics) and Google Fonts (font delivery). Google processes data in accordance with the GDPR and under Standard Contractual Clauses where data is transferred outside the EEA.
• Stripe Payments Europe, Ltd. (Dublin, Ireland) — processing payments, subscriptions and related fraud prevention. Stripe acts as an independent controller for parts of this processing and handles card data under the PCI-DSS standard; see Stripe's own privacy policy for details.
• Resend — delivering transactional emails such as purchase confirmations, access instructions and renewal reminders.

We may also share your data where required by law. All processors are bound by confidentiality obligations and process data only under our instructions.

International Data Transfers

Some of our processors may process personal data outside the European Economic Area. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with the GDPR.

Data Protection

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction.

Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict the processing of, and port your personal data, as well as the right to object to processing and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, contact us at info@htacourse.com.

You also have the right to lodge a complaint with the supervisory authority competent for data protection, in Poland the President of the Personal Data Protection Office (UODO), if you believe that the processing of your personal data infringes applicable law.

Cookies

We use cookies and similar technologies to operate our website, analyze traffic and improve user experience. You can manage your cookie preferences at any time through the cookie consent banner or your browser settings. For details, see our cookie consent notice.

Time-limited campaign offers. For eligible advertising visits, we store a random browser identifier and an offer reference in local storage to remember the original 24-hour deadline and prevent the same browser from claiming the offer again. Stripe stores the offer source, expiry and redemption status; we retain checkout references to enforce expiry. These identifiers are not used by this offer feature for cross-site tracking and remain until you clear your browser storage; clearing storage or using a different browser removes this browser-level restriction.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the latest update indicated below.

Last updated: September 2026

Contact

If you have questions about this Privacy Policy, please contact us at info@htacourse.com.