Privacy Policy

Last Updated: October 9, 2026

Purpose and Scope

MB Academy respects your privacy and is committed to handling personal information responsibly and in accordance with applicable privacy and data-protection laws.

This Privacy Policy explains how MB Academy, as a subsidiary of MB Engineered Consulting Inc., collects, uses, discloses, retains, and protects personal information when you visit our website; create an account; purchase or take a Course; submit an assessment; attend a webinar or virtual classroom; communicate with us; subscribe to communications; or otherwise interact with MB Academy.

Where required by applicable law, MB Engineered Consulting Inc., operating through MB Academy, is the controller or organization responsible for the personal information described in this Policy.

Personal Information We Collect

Depending on your interaction with us, we may collect the following categories.

Identity and Contact Information

• name
• username
• email address
• telephone number
• billing and mailing address
• country, province, state, and time zone
• employer or organization
• professional title
• age or confirmation of legal eligibility where required

Account Information

• login credentials in protected form
• account identifiers
• account preferences
• communication preferences
• security questions or multi-factor authentication data
• account status

Transaction Information

• Course purchased
• order number
• payment date
• amount
• currency
• discount or promotional code
• billing status
• tax-related information
• limited payment details received from payment processors

We generally do not store complete payment-card numbers when payments are processed by an external payment provider.

Learning and Academic Information

• Course enrollment and access dates
• progress and lesson completion
• attendance
• assessment answers and scores
• assignments and projects
• instructor feedback
• certificate status
• communications with instructors or support personnel
• discussion or forum submissions
• academic-integrity information
• accommodation requests

Technical and Usage Information

• IP address
• browser and device type
• operating system
• language
• login and session information
• pages, lessons, and videos accessed
• video-viewing and Course-progress events
• referring pages
• approximate geographic region derived from technical information
• error and diagnostic data
• cookie and similar-technology identifiers
• security and access-control records

Communications

We may collect information contained in emails, support requests, surveys, complaints, reviews, feedback, telephone calls, webinar chat, or other communications.

If calls or virtual sessions are recorded, we will provide notice or obtain consent where required.

Information from Organizations

If an employer, professional association, educational institution, sponsor, or other organization enrolls you, it may provide information such as your name, contact details, Course assignment, and organizational affiliation.

Subject to applicable law and the relevant agreement, we may report enrollment, participation, progress, completion, or certificate status to the sponsoring organization.

Information from Third Parties

We may receive information from payment processors, identity or fraud-prevention providers, learning-management and hosting providers, webinar or communication platforms, analytics and advertising providers, referring partners, and publicly available or lawfully authorized sources.

How We Collect Information

We collect personal information directly from you; automatically through the Platform; from an organization that enrolls or sponsors you; from service providers acting on our behalf; through cookies and similar technologies; and from other sources permitted by law.

Purposes for Using Personal Information

We may use personal information to:

• create and administer accounts
• process enrollment and payment
• provide Course access and educational services
• track attendance, progress, and completion
• grade assessments and issue certificates
• provide technical, administrative, and learning support
• communicate about Courses, purchases, security, and policy changes
• authenticate users and prevent credential sharing
• protect Proprietary Class 1 Course Materials
• detect fraud, plagiarism, misconduct, and security incidents
• maintain and improve the Platform and Course content
• conduct analytics and understand service performance
• provide accommodations and accessibility support
• administer surveys and feedback
• send marketing communications where permitted
• comply with tax, accounting, recordkeeping, legal, and regulatory obligations
• establish, exercise, or defend legal claims
• enforce our Terms and Conditions
• complete a corporate transaction, subject to applicable safeguards

Legal Bases for Processing

Depending on your location and applicable law, we may process personal information on one or more of the following bases: your consent; performance of a contract with you; steps taken at your request before entering a contract; compliance with a legal obligation; our legitimate interests in operating, securing, improving, and protecting MB Academy; protection of the vital interests of an individual; or another basis permitted by applicable law.

Where processing is based on consent, you may withdraw consent, subject to legal and contractual restrictions and reasonable notice. Withdrawal does not affect processing already lawfully completed.

Certain information is necessary to provide a Course. If you decline to provide it, we may be unable to enroll you, process payment, verify completion, provide support, or issue a certificate.

Disclosure of Personal Information

We may disclose personal information to the categories below.

MBEC and Corporate Affiliates

Information may be shared with MB Engineered Consulting Inc. and affiliated companies for administration, finance, legal compliance, security, support, and business operations.

Service Providers

We may engage providers for payment processing, cloud hosting, learning-management systems, video delivery, email and communications, customer support, analytics, assessment, cybersecurity, identity verification, document and certificate services, accounting, and professional advice.

Service providers are authorized to process information for specified purposes and are expected to protect it under contractual or legal obligations.

Instructors and Course Administrators

Information may be provided to instructors, graders, proctors, and Course administrators to provide education, assessment, feedback, support, and academic-integrity review.

Sponsoring Organizations

Where an employer or another organization pays for or administers enrollment, we may provide information permitted by the enrollment arrangement and applicable law, such as participation, progress, completion, or certificate status.

We will not ordinarily provide detailed assessment responses or unrelated account information unless authorized or legally permitted.

Legal and Safety Disclosures

We may disclose information if reasonably necessary to comply with law, court orders, subpoenas, or lawful government requests; prevent fraud or security threats; protect the rights and safety of MB Academy, MBEC, Students, or others; investigate a breach of the Terms; or establish, exercise, or defend legal claims.

Business Transactions

Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, sale of assets, insolvency proceeding, or other corporate transaction. Appropriate confidentiality and privacy safeguards will be applied where required.

Sale and Sharing of Personal Information

MB Academy does not sell personal information for money.

Some privacy laws use “sale” or “sharing” more broadly, particularly in relation to targeted or cross-context behavioural advertising. If MB Academy begins engaging in an activity that constitutes a sale or sharing under applicable law, it will provide the required notice and opt-out mechanism.

MB Academy does not knowingly sell or share the personal information of minors for targeted advertising.

Cookies and Similar Technologies

The Platform may use cookies, pixels, local storage, software development kits, and similar technologies to keep you signed in; remember preferences; maintain security; operate Course features; measure performance; diagnose errors; understand Platform use; and support advertising where permitted.

Where required, non-essential technologies will be used only after obtaining consent.

You may adjust cookie choices through [Cookie Settings Link] and your browser settings. Disabling essential cookies may prevent some Platform functions from working.

Marketing Communications

We may send marketing communications where we have consent or another lawful basis.

Canadian commercial electronic communications will be managed in accordance with applicable anti-spam requirements, including consent, sender identification, contact information, and an unsubscribe mechanism where required.

You may unsubscribe using the link in a marketing message or by contacting us. Unsubscribing from marketing does not prevent us from sending Course, transaction, safety, legal, or account-related communications.

International Storage and Transfers

MB Academy is based in Ontario, Canada, but may use instructors and service providers located in Canada or other countries.

As a result, personal information may be processed outside your province, state, or country and may be subject to the lawful access requirements of the jurisdiction where it is processed.

Where required, MB Academy will use an appropriate transfer mechanism or safeguard, which may include contractual privacy and security obligations, standard contractual clauses, adequacy decisions, vendor assessments, or another legally recognized transfer mechanism.

Information about applicable transfer safeguards may be requested from the Privacy Officer, subject to legal and confidentiality restrictions.

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including Course delivery, certificate verification, accounting, tax, dispute resolution, security, enforcement, and legal compliance.

Retention periods may vary according to the type of information. For example:

• account information may be retained while the account is active and for a reasonable period afterward
• transaction and tax records may be retained for legally required accounting periods
• Course completion and certificate records may be retained longer to support verification
• support and complaint records may be retained until the matter and applicable limitation periods have concluded
• security logs may be retained for a period proportionate to fraud and cybersecurity needs
• marketing information may be retained until consent is withdrawn or the information is no longer needed

Information may be anonymized so that it can no longer reasonably identify an individual. Anonymized information may be retained and used where permitted by law.

Security

MB Academy uses administrative, technical, contractual, and physical safeguards appropriate to the sensitivity of the information.

Safeguards may include role-based access restrictions, authentication controls, encryption where appropriate, secure hosting, backups, employee and contractor confidentiality obligations, vendor assessments, activity logging, incident-response procedures, and review of suspected unauthorized access.

No internet-based service can guarantee absolute security. You are responsible for protecting your password, device, and account and for notifying us promptly of suspected unauthorized use.

Privacy and Security Incidents

If we discover a privacy or security incident, we will investigate and take reasonable steps to contain and remediate it.

We will notify affected individuals, privacy regulators, or other authorities when notification is required by applicable law.

Your Privacy Choices and Rights

Depending on your location and the law that applies, you may have a right to obtain information about our processing; access personal information; correct inaccurate or incomplete information; request deletion; withdraw consent; restrict or object to certain processing; request portability; opt out of certain targeted advertising, sale, or sharing; limit certain uses of sensitive personal information; object to direct marketing; request human review of certain automated decisions; complain to a privacy regulator; and receive equal service and pricing when exercising privacy rights, subject to lawful exceptions.

These rights are not absolute. A request may be limited by identity-verification requirements, legal obligations, contractual requirements, another person’s rights, security considerations, or legally permitted exemptions.

European Economic Area, United Kingdom, and Similar Jurisdictions

Where applicable, rights may include information, access, correction, erasure, restriction, portability, objection, and protections relating to decisions based solely on automated processing.

California

Where MB Academy is subject to the CCPA, California residents may have rights to know, access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive information, and receive non-discriminatory treatment for exercising covered rights.

Canada

Individuals may request access to personal information and correction of inaccuracies, subject to applicable exceptions. MB Academy will also maintain a process for privacy questions and complaints consistent with applicable Canadian privacy principles.

Submitting a Privacy Request

To submit a request, contact:

MB Academy Privacy Officer

Email: [email protected]

Address:
76 Chillico Drive
Guelph Ontario N1K0B8
Canada

Include your full name, account email, country and province or state of residence, the right you wish to exercise, and enough information to locate the relevant records.

We may request reasonable information to verify your identity and authority. We will use verification information only for the request and related security purposes.

An authorized agent may submit a request where permitted by law, subject to evidence of authority and identity verification.

We will respond within the period required by applicable law. If we deny or limit a request, we will provide an explanation where required and identify any available appeal or complaint process.

Children and Minors

MB Academy’s Courses are intended primarily for adults and professionals.

We do not knowingly collect personal information from a child below the minimum legal age applicable in the child’s location without legally sufficient parental or guardian authorization.

If you believe a child has provided information without appropriate authorization, contact the Privacy Officer. We will investigate and take appropriate action.

Automated Decision-Making

MB Academy may use limited automated tools for functions such as fraud detection, login-risk assessment, Course recommendations, spam filtering, progress calculations, or preliminary assessment scoring.

MB Academy does not intend to make a decision producing legal or similarly significant effects based solely on automated processing unless the processing is permitted by applicable law and required notices and rights are provided.

Public Forums and Virtual Sessions

Information posted to a Course forum, discussion board, group chat, or interactive virtual session may be visible to other participants.

Do not post confidential, sensitive, proprietary, or unnecessary personal information in shared areas.

Students must not record another participant, instructor, or session without express permission from MB Academy and all additional consent required by law.

Third-Party Links

The Platform may link to websites or services not controlled by MB Academy. This Policy does not govern those third parties.

You should review the third party’s privacy policy before submitting information.

Changes to This Privacy Policy

We may update this Policy to reflect changes in law, technology, services, vendors, or business practices.

The current version will be posted with its “Last Updated” date. We will provide additional notice or seek consent if required for a material change.

Complaints and Regulatory Authorities

Please direct privacy complaints first to the MB Academy Privacy Officer. We will review and respond in accordance with applicable law.

You may also have the right to complain to the privacy or data-protection authority in your province, state, country, or habitual place of residence.