Privacy Policy

This policy applies to personal information collected through this website, through the registration process, and in the course of study at the Institute. It should be read alongside the Participant Records & Privacy policy (RG-08) in the policy register.

Information you provide: the contents of a study program application (including uploaded documents), inquiry correspondence, a newsletter address where you subscribe, your email address when you ask us to send a scholarship code or start checkout, and, when you buy a course, your name, email address, phone number if given, and billing country and postal code.

Payments are processed by Stripe. We receive confirmation of the payment and the billing details above, never your full card number.

Information recorded when you visit: your IP address and the approximate location it indicates, your browser and device type, the pages you view, and first-party cookies that recognise your browser on return visits. These cookies last up to 13 months.

We advertise on Facebook and Instagram. To measure those ads and to show them to people likely to find our courses useful, we use the Meta Pixel and Meta's Conversions API. They send Meta Platforms, Inc. the pages you view and actions such as starting a checkout, buying a course or applying, with your IP address and the approximate location it indicates, your browser details and the cookie identifiers. When you give us your email for a scholarship code or checkout, buy, apply or are signed in, they can also send its hashed value with these events, subject to your privacy choices. For purchases and applications they also send your name and, where you gave one, your phone number. Names, contact details and location are hashed (SHA-256) before they leave our systems. The IP address and browser details are not, because Meta needs them to recognise visits.

When ad measurement is allowed, a signed cookie remembers the hash of an email you submitted for up to 30 days, so later visits can be matched. It contains no readable email address and does not sign you in or grant access to an account. We clear it when you turn off ad measurement and do not use it when your browser sends Global Privacy Control.

Under California and other US state laws, this can count as "sharing" personal information for cross-context behavioral advertising, or as targeted advertising. How to say no, and where we ask first, is set out under Cookies and your privacy choices below. You can also manage the ads you see in your Meta account settings.

Essential cookies keep you signed in, protect forms and payments, and remember your privacy choice. They are always on. Advertising measurement (the Meta Pixel, its cookies and the matching Conversions API events described above) is optional.

Where the law requires permission first, including the European Economic Area, the United Kingdom, Switzerland, Brazil, Quebec, South Africa, South Korea, Turkey, India and Thailand, it stays off until you accept, and declining is as easy as accepting.

In US states with consumer privacy laws (California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia) and in the rest of Canada, you have the right to opt out of this sharing and of targeted advertising. Use Your privacy choices, at the foot of every page or below, or write to the Office of the Registrar. We honor Global Privacy Control: when your browser sends it, we treat it as an opt-out and send Meta information only under Limited Data Use, which restricts Meta to acting as our service provider. We do not sell personal information for money.

Your choice is kept in a cookie for six months; after that, where the law requires, we ask again. You can change it at any time, and an opt-out applies wherever you are.

Submission information is used solely to assess the inquiry, to communicate decisions, and — for registered candidates — to establish the participant record.

Purchase information is used to give you access to the course, to send your receipt and sign-in link, and to handle refunds and payment disputes.

Inquiry correspondence is used to answer the inquiry. Newsletter addresses are used only to send the material subscribed to, and every message contains a means of unsubscribing.

Submission materials of unsuccessful candidates are retained for one registration cycle and then destroyed. Completion records are retained indefinitely. Other correspondence is retained no longer than three years.

You may request a copy of the personal information we hold about you, ask for corrections, or — where the law provides — ask for deletion. Requests are made in writing to the Office of the Registrar and are answered within 30 days.

Questions about this policy are directed to the Office of the Registrar, California Business Institute, 1 Embarcadero Center, San Francisco, CA 94111, or registrar@californiabusinessinstitute.com.