1. Who we are
TestRight Academy ("we," "us," "our") provides DOT and non-DOT drug-testing training, free self-paced knowledge modules, qualification packets for DOT mock collections, and educational resources. This Privacy Policy applies to testrightacademy.com.
2. Information we collect
We collect only what we need to run the service.
From every visitor (automatically)
- Standard web logs — IP address, browser type, pages viewed, referrer, timestamps. Used for diagnostics, security, and aggregated analytics.
- Strictly-necessary session cookies (only when you sign in).
When you contact us
- Name, email, message content. Submitted via Formspree from contact.html.
When you enroll
- Name, email, course selection, preferred Zoom day/time, role. Submitted via Formspree from enroll.html.
- Payment is processed by a third-party payment processor — we do not see or store credit card numbers.
When you create a trainee account
- Email, name, employer (optional), password (hashed with bcrypt — we never see your plain-text password).
- Module progress — which sections you've completed, knowledge-check passes, final-test scores, certificates earned.
3. How we use it
- To deliver training, generate certificates, and let you resume where you left off.
- To respond to inquiries.
- To improve our content and quiz questions.
- For security, fraud prevention, and to honor legal obligations.
We do not sell your personal information. We do not use behavioral advertising. We do not share trainee data with third parties for marketing.
4. Service providers we use
- DigitalOcean — cloud hosting and storage of trainee accounts, progress, and certificates.
- Formspree — handles contact and enrollment form submissions.
- Google Fonts — fonts used on certificates.
- cdnjs.cloudflare.com — JavaScript libraries used to render PDF certificates client-side.
Each of the above receives only what's necessary to perform its function.
5. Cookies
We use only strictly-necessary cookies for session management when you sign in (admin or trainee). No analytics cookies. No advertising cookies. You can sign out at any time to clear your session cookie.
6. Retention
- Trainee accounts and progress: kept while the account is active. You can request deletion by emailing info@osegroupusa.com.
- Certificates of Completion and qualification packets: retained while your account exists; certificates may be referenced for verification.
- Web logs: typically rotated within 90 days.
7. Your rights
Depending on your jurisdiction (CCPA, GDPR, others), you may have the right to:
- Access a copy of your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data
- Opt out of any future marketing (we do not currently send marketing emails)
To exercise these rights, email info@osegroupusa.com. We'll respond within 30 days.
8. Children
The Service is intended for adults working in drug-testing roles. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it.
9. Security
We use HTTPS site-wide, bcrypt password hashing, CSRF tokens, rate limiting on login, and session-cookie security flags. No system is perfectly secure, however. If you suspect unauthorized access to your account, contact us immediately.
10. Changes
We may update this policy. Material changes will be announced on this page; the "Effective" date at the top reflects the most recent revision.
11. Contact
Questions about this policy or your data: info@osegroupusa.com or the contact form.