Privacy Policy

Last updated: 3 November 2026

This Privacy Policy explains what personal information Certs4Sale collects when you use certs4sale.com, why we collect it, who we share it with, and the choices you have. It applies to visitors, registered account holders and customers worldwide.

Who we are

Certs4Sale operates certs4sale.com from 128 City Road, London, EC1V 2NX, United Kingdom. For the purposes of the UK and EU General Data Protection Regulation we are the data controller for the information described below.

If you have any question about this policy, or want to exercise any of the rights set out in it, write to us at [email protected]. We answer privacy requests within 30 days.

What we collect

Information you give us

• Account details — your name and email address when you register, and a password which we store only as a one-way cryptographic hash.
• Profile details — if you choose to add them: billing address, city, state, country, postcode, VAT number and phone number.
• Order history — which exam preparation files you bought, when, the amount charged, and any discount code used.
• Free demo requests — the email address you give us to download a sample file, so we can send you the file and, where you have agreed, occasional product updates.
• Messages — anything you send us through the contact form, live chat or email, including the content of your message.

Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, language and referring page.
• Usage data — pages viewed, searches run on the site, items added to the cart, and files downloaded from your account.
• Cookies and similar technologies — see Cookies below.

Payment information we do not collect

We do not see, receive or store your card number, CVV or bank details. Payments are taken by our payment provider on a hosted checkout. We receive only a confirmation that payment succeeded, the amount, the currency and a transaction reference.

Why we use it, and our legal basis

Who we share it with

We do not sell your personal information, and we do not share it for anyone else's advertising. We share it only with the service providers we need to run the business:

• Paddle.com Market Ltd — our payment provider and Merchant of Record. Paddle collects your payment details and billing information directly, acting as its own data controller. See the Paddle Privacy Policy.
• PayPal and Stripe — where those checkout options are offered, under their own privacy policies.
• Google — Google Analytics and Google Ads conversion tracking, to measure traffic and advertising performance.
• Yandex — Yandex Metrica, for site usage analytics.
• Tawk.to — the live chat widget, which processes the messages you send in chat.
• Cloudflare — content delivery and protection against attacks and abuse.
• Our hosting and email providers — to run the site and send transactional email.

We may also disclose information where we are required to by law, by a court or by a regulator, or where it is necessary to establish, exercise or defend legal claims. If our business is sold or merged, account and order records may transfer to the buyer, who will remain bound by this policy.

International transfers

Our providers operate in several countries, including the United States. Where personal information leaves the UK or European Economic Area we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision covering the receiving country.

How long we keep it

• Account and order records — for as long as your account is open, and then for up to 7 years after your last purchase, because tax and accounting law requires us to retain transaction records.
• Demo request emails — 24 months from your last interaction, unless you unsubscribe sooner.
• Support messages and chat transcripts — 24 months.
• Analytics data — as set by each provider; Google Analytics is configured to retain user-level data for 14 months.

Your rights

Wherever you live, you may ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong or out of date;
• delete your information, where we are not required to keep it;
• restrict or object to how we use it;
• send your information to another provider in a portable format;
• withdraw consent you have given, at any time, without affecting what we did before.

You can edit most of your details yourself under My Account, and unsubscribe from marketing email using the link at the foot of any such email. For anything else, email [email protected]. We will not charge you or treat you differently for exercising these rights.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You may also complain to a regulator: in the UK that is the Information Commissioner's Office, and in the EEA it is the data protection authority for the country where you live. If you are in California, you may exercise the rights described above, and we confirm we have not sold or shared personal information in the preceding 12 months.

Cookies

We use the following kinds of cookie:

• Strictly necessary — your session, sign-in state and shopping cart. The site cannot work without these.
• Analytics — Google Analytics and Yandex Metrica, which tell us which pages are used and where visitors come from.
• Advertising — Google Ads conversion tracking, which tells us when a visit that began with one of our adverts ended in a purchase.
• Live chat — Tawk.to, to keep your chat session open as you move between pages.

You can block or delete cookies in your browser settings. If you block strictly necessary cookies, sign-in and checkout will not work. You can also opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on.

Security

The site is served over HTTPS, passwords are stored as salted one-way hashes, and access to customer records is limited to staff who need it. Purchased files are delivered from your account rather than by public link. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you believe your account has been accessed by someone else.

Children

The site is intended for working professionals and students aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has given us their information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and material changes will be announced on this page. Continuing to use the site after a change means you accept the updated policy.

Contact

Certs4Sale
128 City Road, London, EC1V 2NX, United Kingdom
Email: [email protected]
Web: certs4sale.com