Privacy

Who is responsible

From No to Yes (ABN 22 767 904 430) is responsible for the personal information described here. We handle it in line with the Australian Privacy Principles and, where it applies to you, the European and UK General Data Protection Regulation.

What we collect

Your email address, and your name if you give it. A record of what you have bought and what you paid. Your progress, written exercises, drill recordings and assessment answers. Your answers to the course’s entry diagnostic, and the kind of selling you do if you tell us, so the course can suggest where to start. For security, a one-way hash of the IP addresses and browser descriptions your account is used from: we never store them in readable form.

If you ask for the free diagnostic, your email address and whether you confirmed it.

We do not collect card details. Payments are taken by our payment processor, and we receive a confirmation of payment, not your card number.

Why we use it

To provide the course you bought, to keep your account secure, to issue and verify credentials, to send the emails you asked for, and to meet our legal and tax obligations.

We do not sell personal information and we do not use advertising trackers.

Cookies and analytics

We set cookies only to keep you signed in. They are essential to the service and are not used for tracking.

Your browser also keeps a few things on your own device: lesson work not yet saved to your account, and, if you choose a kind of selling on the home page, that choice, so the course can fill it in for you later. None of it is sent to us until you submit it.

We measure visits with a cookieless analytics service that does not identify you or follow you across sites. We also record, on our own server, steps such as a sign-up or a purchase, so that we know which pages are useful.

Who processes it for us

Cloudflare hosts the site and stores account data, course work and recordings. Stripe processes payments. Postmark sends our emails. Each acts on our instructions and only for these purposes. Some of them store data outside Australia, including in the United States; we rely on their contractual commitments to protect it.

Credentials and the public register

Each credential has a public verification page showing the holder’s name, the tier, the issue date and its status. That is what makes a credential checkable. The public register of holders lists only people who choose to appear on it, and shows name and tier only.

How long we keep it

Account information and course work are kept while your account exists, except drill recordings: each one you upload is kept for 90 days and then deleted. Your scores for it, and the drill it completed, are kept. You can delete a recording sooner, at any time, from its drill. Our backups, kept only to recover the site from a fault, hold a copy of everything for 30 days: anything deleted, a recording or a whole account, is gone from them within 30 days of being deleted. Financial records are kept for as long as tax law requires. Subscribers to the free diagnostic who unsubscribe are kept only as a record that they unsubscribed, so that we do not email them again.

Your rights, and deleting your account

You can ask to see, correct or delete your personal information. You can delete your account yourself, on your account page. Deleting it removes your personal information, your course work and your recordings, withdraws your credentials, keeps only the minimum financial record the law requires, and is confirmed by email.

To make a request, or to complain about how we have handled your information, contact us by email to hello@fromnotoyes.com. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner or to the data protection authority where you live.