This Privacy Policy explains how REIT Modeling (“we”, “us”) collects, uses, and protects your personal data when you use reitmodeling.com (the “Site”) or our courses and services. It applies to all users — visitors, newsletter subscribers, and registered course members.
1. Who we are
We are the operator of reitmodeling.com. For privacy matters, contact: privacy@reitmodeling.com.
We process personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. EU users are also covered by the EU GDPR equivalents.
2. Data we collect
When you visit the Site: Browser type, device, operating system, IP address (for abuse detection and aggregate analytics — not used to identify you personally). Pages viewed and time spent (via cookies; see §6).
When you sign up for our newsletter: Email address, optional first name.
When you register for a course: Name, email, hashed password (we cannot read it), optional university/employer, country (for VAT compliance).
When you make a purchase: Billing name and address. Payment is processed by Stripe (or PayPal if selected). We do not see, store, or have access to your full payment card details.
During and after the course: Course progress (lessons completed, exam attempts and scores), any messages you send us, any feedback you submit.
3. How we use your data
We use your personal data only for the following purposes:
- To provide course access and administer your account
- To process payments and issue invoices
- To issue certificates of completion (Pro tier)
- To send course-related communications (welcome emails, password resets, exam results)
- To send marketing emails — only if you have opted in. You can unsubscribe at any time via any email’s footer link.
- To improve the Site, courses, and services (anonymized analytics)
- To comply with legal obligations (tax records, fraud prevention)
We do not sell your data to anyone. We do not share your data with advertisers.
4. Legal basis for processing
- Contract: to deliver the course you’ve purchased
- Consent: for marketing emails and non-essential cookies
- Legitimate interests: to detect site abuse, prevent fraud, and improve our services
- Legal obligation: to keep tax records and respond to lawful requests
5. Third-party processors
| Processor | Purpose | Location |
|---|---|---|
| Stripe / PayPal | Payment processing | US/IE |
| Vimeo | Video hosting | US |
| InMotion Hosting | Web hosting | US |
| Accredible | Certificate issuance (Pro tier) | US/UK |
| FluentCRM (self-hosted) | Transactional and marketing emails | UK |
We do not transfer data outside the UK / EU / US to jurisdictions without an adequacy decision or appropriate safeguards.
6. Cookies and tracking
- Essential cookies — required for the Site to function (login session, shopping cart). No consent needed.
- Analytics cookies — Google Analytics 4 (anonymized IPs). Only set if you accept the cookie banner.
- Marketing cookies — none currently. If we add ad-retargeting in the future, we will request your consent.
7. Data retention
- Account data: retained while your account is active, plus 7 years after closure (UK tax record requirement)
- Course progress: retained while your account is active
- Marketing email lists: retained until you unsubscribe
- Payment records: 7 years (UK tax record requirement)
- Anonymous analytics: 26 months
8. Your rights
Under UK GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: correct any inaccurate data
- Erasure: request deletion of your data (subject to legal retention obligations)
- Restriction: ask us to limit how we process your data
- Portability: receive your data in a machine-readable format
- Object: opt out of marketing or any processing based on legitimate interests
- Lodge a complaint: with the UK Information Commissioner’s Office (ICO) at
ico.org.uk
To exercise any right, email privacy@reitmodeling.com. We will respond within 30 days.
9. Data security
We protect your data with industry-standard measures: HTTPS/TLS encryption for all Site traffic; bcrypt-hashed passwords; access controls on admin systems; regular software updates and security patches; encrypted database backups.
In the unlikely event of a data breach affecting your personal data, we will notify you and the ICO within 72 hours of becoming aware, as required by UK GDPR.
10. Children
The Site is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has registered, contact privacy@reitmodeling.com and we will delete the account.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated via email to registered users.
12. Contact
For privacy-related questions or to exercise any UK GDPR right: privacy@reitmodeling.com.