1. Information covered by this policy

Personal information is information that identifies you or can reasonably be associated with you. The exact definition may differ depending on the privacy laws that apply in your location.

This policy covers personal information CDI receives directly from you, information generated through your use of CDI websites and services, and limited information received from service providers involved in operating the website or processing an order.

Information that has been aggregated or anonymized so that it cannot reasonably be connected to an identifiable person is not treated as personal information where applicable law permits.

2. Information CDI may collect

Information you provide directly

CDI may collect information that you voluntarily provide when you:

• Purchase a CDI Practical or another digital product
• Create or use a customer account
• Complete checkout or provide billing information
• Download or access purchased materials
• Submit a contact form or support request
• Request mentorship or guided support
• Subscribe to updates, where that option is available
• Communicate with CDI by email or another channel
• Exercise a privacy right or submit a data request

Depending on the interaction, this information may include:

• Your name and email address
• Billing address and country or region
• Customer-account information
• Products purchased and order history
• Payment status and transaction references
• Download, delivery, and product-access information
• Mentorship interests or professional-development goals
• Messages, inquiries, feedback, and support correspondence
• Any other information you choose to provide

Information collected automatically

When you access a CDI website, the website and its service providers may automatically receive limited technical and usage information, such as:

• Internet Protocol address
• Browser type and browser settings
• Device type and operating system
• Date and time of access
• Pages or resources visited
• Referring and exit pages
• Approximate geographic region derived from an IP address
• Cookie, session, and security information
• Error logs and website-performance information

CDI may use this information to provide website functionality, maintain security, diagnose technical problems, understand general usage, and improve the website.

3. Orders, payments, and product delivery

CDI uses WooCommerce and related website technologies to manage products, orders, checkout, customer accounts, downloads, and access to digital materials.

When you place an order, CDI may process information including your name, email address, billing details, purchased product, order value, transaction status, order date, customer notes, and download or access history.

Payments may be processed by third-party payment providers. The payment provider may collect payment-card details, billing information, authentication information, and fraud-prevention data directly from you.

CDI does not intentionally store your complete payment-card number or card security code on its website. CDI may receive limited transaction information from the payment provider, such as payment status, transaction reference, payment method type, and limited card details such as the card brand or final digits.

Payment providers process information under their own privacy notices, security standards, and legal obligations.

4. How CDI uses personal information

CDI may use personal information to:

• Operate, maintain, and secure CDI websites
• Provide website, account, cart, and checkout functionality
• Process orders and confirm payment status
• Deliver CDI Practicals and other digital products
• Provide and maintain buyer-only product access
• Respond to contact, support, and mentorship inquiries
• Assess whether CDI can provide a requested service
• Communicate about orders, access, services, or inquiries
• Investigate failed downloads or technical problems
• Maintain accounting, tax, transaction, and business records
• Detect, investigate, and prevent fraud, abuse, or misuse
• Protect CDI users, systems, products, and intellectual property
• Understand general website use and improve CDI resources
• Comply with legal, regulatory, and contractual obligations
• Establish, exercise, or defend legal rights where necessary

CDI will not use personal information for purposes that are materially incompatible with those described in this policy without providing appropriate notice or obtaining consent where required.

5. Reasons for processing information

Depending on the interaction and applicable law, CDI may process personal information because:

• Processing is necessary to provide a product or service you requested or to take steps before providing that service
• Processing is necessary to comply with accounting, tax, consumer-protection, security, or other legal obligations
• CDI has a legitimate operational interest in maintaining, securing, supporting, and improving its websites and services
• You have given consent for a specific purpose, such as receiving optional communications or allowing non-essential cookies
• Processing is necessary to establish, exercise, or defend legal rights or to protect CDI and its users

Where processing depends on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

6. Contact forms, support, and mentorship inquiries

When you contact CDI, request support, or submit a mentorship inquiry, CDI may use the information you provide to understand your request, communicate with you, evaluate whether CDI can assist, and provide relevant next steps.

Information submitted through general inquiry forms is not intended to create a confidential professional, clinical, legal, financial, or advisory relationship.

Please do not send highly sensitive personal, medical, legal, financial, employment, research-participant, or confidential institutional information through a general contact form unless CDI has specifically requested it and an appropriate arrangement is in place.

If a mentorship or professional-support arrangement requires additional personal or confidential information, CDI may provide separate instructions or terms appropriate to that service.

7. Cookies and similar technologies

CDI websites may use cookies and similar technologies to support essential website functions, maintain sessions, remember cart contents, facilitate checkout, provide account access, prevent fraud, maintain security, measure website performance, and understand general site usage.

Cookies used by CDI or its service providers may include:

• Essential cookies: required for security, checkout, cart, account, session, or core website functions
• Preference cookies: used to remember settings or choices
• Analytics cookies: used, where enabled, to understand website traffic and improve performance

Where required by applicable law, CDI will request permission before placing non-essential cookies or similar tracking technologies.

You can manage or delete cookies through your browser settings and, where provided, CDI’s cookie-preference controls. Blocking essential cookies may prevent cart, checkout, account, download, or other website features from working correctly.

8. Email and service communications

CDI may send transactional or service-related messages needed to confirm orders, deliver products, provide account information, respond to inquiries, address security concerns, or communicate changes affecting a requested service.

These operational messages are different from optional marketing communications.

If CDI offers optional newsletters or promotional updates, CDI will provide an appropriate way to unsubscribe. Unsubscribing from promotional messages will not prevent necessary order, security, or service communications.

9. How CDI shares information

CDI does not sell personal information or share it with third parties for their independent direct-marketing purposes.

CDI may disclose limited personal information to service providers where reasonably necessary to operate its websites, process payments, deliver products, communicate with users, maintain security, or support business operations.

These service providers may include:

• Website-hosting and infrastructure providers
• WordPress and WooCommerce-related service providers
• Payment processors and financial-service providers
• Email-delivery and communication providers
• Security, spam-prevention, and fraud-detection providers
• Analytics and website-performance providers, where enabled
• Backup, storage, and technical-support providers
• Professional advisers such as accountants or legal advisers

CDI may also disclose information:

• When required by law, regulation, court order, or lawful process
• To investigate suspected fraud, misuse, or security incidents
• To protect CDI’s rights, users, systems, or property
• In connection with a legitimate reorganization, transfer, or succession of CDI operations, subject to appropriate safeguards
• When you have directed or authorized CDI to make the disclosure

10. Third-party services and external websites

CDI websites and guides may link to third-party websites, repositories, datasets, software tools, documentation, embedded content, payment services, or other external resources.

Third parties may collect information directly from you under their own terms and privacy policies. CDI does not control and is not responsible for the privacy, security, availability, or content practices of independent third-party services.

Following a link to an external service does not mean that CDI controls or endorses that service’s privacy practices. You should review the relevant third-party privacy notice before providing personal information.

11. International processing and transfers

CDI websites may be accessed internationally, and some service providers may operate or store information in countries other than the country where you live.

As a result, personal information may be processed in jurisdictions with privacy laws that differ from those in your location.

Where applicable law requires safeguards for an international transfer, CDI will take reasonable steps to use an appropriate transfer mechanism, contractual protection, or service provider commitment.

12. Data security

CDI uses reasonable technical and organizational safeguards intended to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.

These measures may include HTTPS/SSL encryption, reputable payment processing, access restrictions, authentication controls, website updates, backups, spam prevention, security monitoring, and limited administrative access.

No website, transmission method, storage system, or security control can guarantee absolute security. You are also responsible for protecting your devices, email account, customer account, passwords, and download links.

If you believe your CDI account, order information, or personal information may have been compromised, contact CDI promptly.

13. Data retention

CDI retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate operational, accounting, tax, security, dispute, contractual, and legal requirements.

Retention periods may vary according to the type of information. For example:

• Order and transaction records may be retained for accounting, tax, consumer-protection, fraud-prevention, and legal purposes
• Customer-account information may be retained while the account remains active and for an appropriate period afterward
• Product-access and download records may be retained to deliver purchases, investigate access problems, and protect restricted materials
• Contact and support correspondence may be retained while an inquiry is active and afterward where needed for reference, service history, or legal purposes
• Security and technical logs may be retained for a limited period needed to detect problems, prevent misuse, and protect systems

CDI may retain limited information after a deletion request where retention is required or permitted by law, needed to complete a transaction, necessary to resolve a dispute, or required to protect legal rights and website security.

When information is no longer reasonably required, CDI may delete, anonymize, or securely dispose of it.

14. Your privacy rights and choices

Depending on your location and the law that applies, you may have the right to:

• Ask whether CDI processes personal information about you
• Request access to certain personal information
• Request correction of inaccurate or incomplete information
• Request deletion of certain personal information
• Object to or restrict certain processing
• Request a portable copy of certain information where applicable
• Withdraw consent where processing is based on your consent
• Opt out of optional promotional communications
• Submit a complaint to an appropriate privacy or data-protection authority where that right applies

These rights are not absolute. CDI may need to retain or continue processing certain information where required or permitted by applicable law.

To protect personal information, CDI may ask you to verify your identity, email address, order details, or authority to act for another person before completing a request.

CDI will not discriminate against you for making a legitimate privacy request.

To submit a privacy request, email: info@complexdatainsights.com .

15. Automated decisions

CDI may use automated tools to support routine website functions such as spam prevention, fraud detection, payment verification, account security, and delivery of digital products.

CDI does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects for users. Where applicable law provides rights concerning such processing, CDI will respond to valid requests as required.

16. Children and young learners

CDI resources may be useful to students and young learners. However, CDI does not knowingly collect personal information from children in circumstances where parental, guardian, school, or other legally required authorization has not been provided.

A child or young learner should not independently submit payment information, create a paid contractual arrangement, or provide sensitive personal information through CDI websites unless they are legally permitted to do so or have appropriate involvement from a parent, guardian, school, or responsible adult.

If you believe that a child has provided personal information to CDI without appropriate authorization, contact CDI so the matter can be reviewed and appropriate action taken.

17. Sensitive and confidential information

CDI does not request sensitive personal information through ordinary website browsing, product checkout, or general contact forms unless it is necessary and appropriate for a specific service.

Do not submit patient-identifiable data, protected health information, research-participant data, passwords, complete payment-card details, government identification numbers, confidential employer data, or unpublished sensitive datasets through a general CDI form or email.

CDI learning materials may explain how to work with clinical, medical, research, or biological data. This does not mean that users are authorized to upload real confidential or identifiable data to CDI systems or third-party learning tools.

Users remain responsible for following applicable privacy, ethical, institutional, contractual, and research-governance requirements when working with their own data.

18. Changes to this Privacy Policy

CDI may update this Privacy Policy when its websites, products, service providers, data practices, or legal obligations change.

The revised policy will be posted on this page with an updated effective date. Material changes may also be communicated through the website or another appropriate channel where required.

The version in effect when information is processed will govern that processing, subject to applicable law.

19. Related CDI terms

Use of CDI websites, products, open resources, and mentorship pathways is also governed by the CDI Terms of Service and any applicable product or licensing terms.

Information about reuse, attribution, CDI Practicals, open resources, and protected materials is available on the CDI Licensing and Attribution page.