Privacy Policy — ITSL Blueprint

01The short version

We collect what you type into our forms, plus the ordinary technical information any website receives. We use it to reply to you and to deliver what you bought. We store it in our own database and we send ourselves an email about it. A small number of named service providers handle it on our behalf. We do not sell it, we do not share it for advertising, and we do not run ad-tracking on this site. Email contact@itslbp.com at any time and we will tell you what we hold or delete it.

The rest of this page is the detail behind that paragraph.

02Who we are

ITSL Blueprint is a brand of TDSW Inc. We are the business responsible for the personal information described here — in privacy law language, the "business" or "controller".

This policy covers itslbp.com and the emails we send you. It does not cover other websites we link to, and it does not cover our instructor's separate housing operations, which are a different business.

03What we collect

Information you give us in a form

Our inquiry and registration forms ask for:

your name;
your email address;
your phone number — optional;
your area of interest — which program or topic you are asking about;
a message — optional, and it contains whatever you choose to write.

Every submission is written to our database first and emailed to our team second. We do that deliberately: an email can fail silently, and we do not want to lose your message.

Purchase information

If you buy something, we record what you bought, when, the amount, the order reference and whether it was refunded. Your card details go directly to our third-party payment processor. We never see or store your full card number. We may see the card brand, the last four digits, the billing name and the billing postal code, because our processor shows us those to help us identify a transaction.

Technical information

Like every website, ours receives standard request data — your IP address, browser and device type, the page you asked for, the page that referred you, and the date and time. Our hosting and CDN provider logs this to serve the site, keep it up and block attacks.

Email information

When we send you email, our email provider records delivery events — whether the message was delivered, bounced or was reported as spam, and, where available, whether it was opened or a link was clicked. We use this to tell whether our mail is reaching people and to stop mailing addresses that bounce.

Bot-protection signals

Our forms are protected by Cloudflare Turnstile, which looks at limited technical signals from your browser to decide whether you are a person or an automated script. See Cookies and Turnstile.

04What we do not collect

We do not ask for your Social Security number, driver's licence, date of birth, financial account numbers, precise location, race, religion, political views, union membership, sexual orientation, biometrics or health information. We do not want them, and we have no use for them.

Please never send us resident information

Do not put the name, contact details, medical information, treatment history or any other personal information of a resident, applicant or client into our forms or emails. Remove identifying details before you describe a real situation. If we receive that kind of information we will delete it.

05Why we use it, and on what basis

Plainly, purpose by purpose:

What we do	Why we are allowed to
Reply to your inquiry and send you the information you asked for	You asked us to. You gave us the details for exactly this purpose.
Deliver what you bought — access, receipts, session details, support	We need to, to perform the contract you entered into with us.
Register you for a webinar or event and send you the joining details and reminders	You signed up for it.
Keep the site working and secure — logging, rate limiting, blocking bots and abuse	Our legitimate interest in running a site that is not overwhelmed by spam and attacks.
Send you information about our training after you have contacted us or bought from us	Your consent, or our legitimate interest in telling our own customers about our own related training. Every message has an unsubscribe link.
Keep records — orders, refunds, tax and accounting	We are legally required to.
Handle a dispute, a chargeback or a legal claim	Our legitimate interest in defending the business, and our legal obligations.

Scroll the table sideways to read it all.

We do not use your information to make automated decisions that produce legal effects, and we do not profile you for advertising.

06How long we keep it

Form submissions and inquiries — [RETENTION — CONFIRM: suggested 24 months from your last contact], then deleted or anonymised.
Customer and transaction records — [RETENTION — CONFIRM: suggested 7 years], because tax and accounting rules require us to keep them.
Server and security logs — short term, in line with our hosting provider's own retention, which is measured in days rather than years.
Email records — for as long as we correspond with you, plus a reasonable period afterwards.
Unsubscribe and suppression list — indefinitely. This is the record of who has told us not to email them, and deleting it would defeat its purpose.

If you ask us to delete your information, we will, except for the parts we are required to keep — see Your choices and rights.

07Who else handles it

We keep this list short on purpose. These are the service providers who process personal information on our behalf, under contract, and only to do the job we hired them for:

Provider	What it does for us	What it handles
Cloudflare	Hosting, content delivery, DNS, security, our database, and the Turnstile bot check on our forms	Everything you submit, plus standard request and security data
Resend	Sends our transactional and notification email — confirmations, access details, replies, and the internal alert when a form comes in	Your name, email address and the content of the message being sent
Our payment processor	Takes card payments, issues receipts and refunds, and runs fraud checks. It is a third-party processor; we do not handle card data ourselves	Your card details, billing information and transaction history

Scroll the table sideways to read it all.

Beyond those, we may disclose information:

to our accountants, bookkeepers, insurers or lawyers, where they need it to advise us;
where the law requires it — a subpoena, court order, tax authority or lawful government request;
to protect our rights, our safety, or the safety of others, or to investigate fraud or abuse;
to a buyer or successor if the business is sold or reorganised, in which case we will tell you and this policy will continue to apply until it is replaced.

Each of these providers has its own privacy policy. We chose them partly because they do not build advertising profiles from our visitors.

08Cookies and Turnstile

This site does not run advertising cookies, retargeting pixels or cross-site tracking. We do not sit on an ad network and we do not follow you around the internet.

What may be set:

Cloudflare Turnstile — our forms use Turnstile to tell people from bots. It loads a small script from Cloudflare and may read limited technical signals from your browser and set a short-lived token or cookie for the challenge. It is a privacy-preserving alternative to a traditional CAPTCHA: it does not track you across other websites, and there are no puzzles to solve.
Security and load-balancing cookies set by our hosting provider to keep the site available and to block malicious traffic.
[ANALYTICS — CONFIRM: if Cloudflare Web Analytics is switched on, note here that it is cookieless and collects no personal identifiers]

Because these are essential and security cookies rather than advertising ones, we do not show a consent banner. You can block cookies in your browser settings, but blocking Turnstile will stop our forms from working.

We do not currently respond to browser "Do Not Track" signals, because there is no agreed standard for them. We honour Global Privacy Control signals where the law requires it — though there is nothing for it to opt you out of here, since we do not sell or share personal information.

09We do not sell your information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the last twelve months and we have no plans to. We do not rent, trade or hand our inquiry list to anyone. We do not sell leads to other operators, lenders, insurers or training companies.

10Security

The site is served over HTTPS, so what you submit is encrypted in transit. Submissions are stored in a managed database with access limited to the people who need it. Our forms are protected by Turnstile. We keep the number of systems holding your information deliberately small.

No website or database is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your information ever happens, we will notify you and the relevant authorities as the law requires.

11Your choices and rights

Wherever you live, you can ask us to:

tell you what we hold about you, and where it came from;
give you a copy in a portable format;
correct anything inaccurate;
delete your information;
stop emailing you — click unsubscribe in any message, or just tell us.

How to ask

Email contact@itslbp.com with "Privacy request" in the subject line and tell us what you want. Send it from the email address you used with us if you can — that is the simplest way for us to confirm it is you. If you cannot, we will ask you for a couple of details that match what we already hold. We will not ask you for a government ID or any sensitive document to process an ordinary request.

What happens next

We will confirm we received your request within 10 business days and complete it within 45 days. If it is genuinely complicated we may take up to another 45 days, and we will tell you why before we do. This is free. We will not treat you differently, refuse service or change your price because you exercised a privacy right.

If we cannot delete something — an order record we must keep for tax, for example — we will tell you exactly what we kept and why.

An authorised agent may make a request for you. We will ask for written proof that you authorised them, and we may still contact you directly to confirm.

12California residents

If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights. Here is the required detail.

What we collect, in CCPA categories

Identifiers — name, email address, phone number, IP address. Source: you, and your browser. Purpose: to reply to you, deliver what you bought, and secure the site.
Commercial information — what you bought, when, for how much, and whether it was refunded. Source: you and our payment processor. Purpose: to deliver your purchase and keep required records.
Internet or network activity — pages requested, referring page, browser and device type, timestamps. Source: your browser, via our hosting provider. Purpose: to run and secure the site.
Inferences — none. We do not build profiles.
Sensitive personal information — none. We do not collect any of the categories that CCPA defines as sensitive.

We disclosed personal information for a business purpose in the last twelve months only to the service providers listed in Who else handles it.

Your California rights

Right to know what we collect, use, disclose and why, including the specific pieces of information we hold.
Right to delete what we hold, subject to the exceptions the law allows.
Right to correct inaccurate information.
Right to portability — a copy in a usable format.
Right to opt out of the sale or sharing of personal information.
Right to limit the use of sensitive personal information.
Right to non-discrimination for exercising any of these.

Do not sell or share my personal information

We do not sell your personal information and we do not share it for cross-context behavioural advertising — so there is nothing for you to opt out of, and we do not need a "Do Not Sell or Share My Personal Information" link. We also do not collect sensitive personal information, so there is nothing to limit. If that ever changes, we will update this page and provide the required opt-out before the change takes effect. We do not knowingly sell or share the personal information of anyone under 16.

Shine the Light. California Civil Code section 1798.83 lets California residents ask about personal information disclosed to third parties for those parties' own direct marketing. We do not make disclosures of that kind.

To exercise any of these rights, email contact@itslbp.com — see How to ask.

13Residents of other US states

Several other states — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana, among others — give residents comparable rights to access, correct, delete and port their information, and to opt out of targeted advertising and sale. Rather than track each statute separately, we extend the same rights to everyone, whichever state you live in. Use the same contact route.

If we deny a request and your state provides a right to appeal, tell us and we will reconsider it and give you a written answer.

14Children's privacy

This site is for adults running or planning a business. It is not directed at children, and you must be 18 or over to buy from us or register for a session.

We do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it promptly. If you are a parent or guardian and believe your child has given us information, email contact@itslbp.com and we will remove it.

15Third-party links

We link to other sites — agencies, associations, funding sources, tools. Once you click through, you are on their site and their privacy policy applies, not ours. We are not responsible for what they collect.

16Visitors outside the United States

We are a US business and our service providers process information in the United States. If you visit or contact us from another country, your information will be transferred to and stored in the US, where privacy laws may differ from your own. By using the site you understand that. Our training is written for the United States market.

17Changes to this policy

When we change this policy we update the "Last updated" date at the top and publish the new version here. If a change is material — a new category of information, a new provider, or a new purpose — we will make a reasonable effort to tell customers and subscribers by email before or when it takes effect.

We recommend checking this page when you buy something new. Continuing to use the site after a change means you accept the updated policy.

18Contact

For anything on this page, including a privacy request:

Email contact@itslbp.com
ITSL Blueprint, a brand of TDSW Inc
[BUSINESS MAILING ADDRESS — CONFIRM]

A real person reads that inbox.