Legal

Privacy Policy

Effective June 14, 2026. What information we collect, how we use it, and your rights.

1. Who we are

TestRight Academy ("we," "us," "our") provides DOT and non-DOT drug-testing training, free self-paced knowledge modules, qualification packets for DOT mock collections, and educational resources. This Privacy Policy applies to testrightacademy.com.

2. Information we collect

We collect only what we need to run the service.

From every visitor (automatically)

  • Standard web logs — IP address, browser type, pages viewed, referrer, timestamps. Used for diagnostics, security, and aggregated analytics.
  • Session cookies when you sign in; a 60-day analytics and redacted error/session telemetry.

When you contact us

  • Name, email, message content. Submitted via Formspree from contact.html.

When you enroll

  • Name, email, course selection, preferred Zoom day/time, role. Submitted via Formspree from enroll.html.
  • Payment is processed by a third-party payment processor — we do not see or store credit card numbers.

When you create a trainee account

  • Email, name, employer (optional), password (hashed with bcrypt — we never see your plain-text password).
  • Module progress — which sections you've completed, knowledge-check passes, final-test scores, certificates earned.

3. How we use it

  • To deliver training, generate certificates, and let you resume where you left off.
  • To respond to inquiries.
  • To improve our content and quiz questions.
  • For security, fraud prevention, and to honor legal obligations.

We do not sell your personal information. We do not use behavioral advertising. We do not share trainee data with third parties for marketing.

4. Service providers we use

  • DigitalOcean — cloud hosting and storage of trainee accounts, progress, and certificates.
  • Formspree — handles contact and enrollment form submissions.
  • Google Fonts — fonts used on certificates.
  • cdnjs.cloudflare.com — JavaScript libraries used to render PDF certificates client-side.

Each of the above receives only what's necessary to perform its function.

4a. Affiliate links (Amazon Associates)

Some pages — currently the Company ID Badge Generator — include clearly labelled links to products on Amazon. TestRight Academy is a participant in the Amazon Services LLC Associates Program. As an Amazon Associate we earn from qualifying purchases. If you follow one of these links and buy something, we may receive a commission at no additional cost to you.

These links carry a tracking identifier that tells Amazon the visit came from us. We do not send Amazon anything you type into our tools — no names, badge contents, employer details or email addresses. Once you are on Amazon's site, Amazon's own privacy policy and cookies apply, not ours.

We record that a recommendation link was clicked, together with the product category and our own tracking identifier, so we can see which recommendations are useful. That record contains no personal information and nothing you entered into a generator.

5. Cookies

We use strictly-necessary session cookies when you sign in (admin or trainee). Following an affiliate link means Amazon may set its own cookies on your device under their policy; we neither set nor read those. A device-recognition cookie may be set for promotional access, and a short-lived cookie is used for scheduling requests. We do not use advertising cookies and we do not sell your personal information. We also collect aggregate site analytics and redacted error/session telemetry to keep the service working. You can sign out at any time to clear your session cookie.

6. Retention

  • Trainee accounts and progress: kept while the account is active. You can request deletion by emailing info@osegroupusa.com.
  • Certificates of Completion and qualification packets: retained while your account exists; certificates may be referenced for verification.
  • Web logs: typically rotated within 90 days.

7. Your rights

Depending on your jurisdiction (CCPA, GDPR, others), you may have the right to:

  • Access a copy of your personal data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Export your data
  • Opt out of any future marketing (we do not currently send marketing emails)

To exercise these rights, email info@osegroupusa.com. We'll respond within 30 days.

8. Children

The Service is intended for adults working in drug-testing roles. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it.

9. Security

We use HTTPS site-wide, bcrypt password hashing, CSRF tokens, rate limiting on login, and session-cookie security flags. No system is perfectly secure, however. If you suspect unauthorized access to your account, contact us immediately.

10. Changes

We may update this policy. Material changes will be announced on this page; the "Effective" date at the top reflects the most recent revision.

11. Contact

Questions about this policy or your data: info@osegroupusa.com or the contact form.