Skip to main content

Privacy Policy

At HestiNellia, we believe transparency builds trust—and that starts with being honest about how we handle your information. This policy explains what data we collect when you use our educational platform, why we need it, and the steps we take to keep it safe. We've written this in plain language because privacy policies shouldn't require a law degree to understand.

Information We Collect

When you create an account with us, we gather several types of information that help us deliver a personalized learning experience. Some of this data you provide directly—like your name, username, and profile preferences. Other information gets collected automatically as you navigate through courses, complete exercises, and interact with our platform's features.

Information You Provide Directly

The most straightforward category includes details you consciously share with us. This encompasses registration data, payment information for premium courses, responses to surveys or feedback forms, and any content you create within the platform. When you customize your learning dashboard or set fitness goals, that information becomes part of your profile too.

  • Account credentials: We need your chosen username and password to secure your account and verify your identity each time you log in. Password recovery options require additional verification details.
  • Educational progress data: Every quiz you take, video you watch, and module you complete gets tracked so we can show you where you left off and recommend what to study next. This creates your personalized learning pathway.
  • Profile customization: Your chosen display name, profile picture, fitness level indicators, and learning preferences help us tailor content recommendations. You control how much of this information other learners can see.
  • Communication records: Messages you send through our support system, community forums, or instructor Q&A sections are stored to maintain conversation history and improve our services.

Automatically Collected Technical Data

Our platform collects certain technical information to function properly and provide you with a smooth experience. This includes device identifiers, browser types, operating systems, and IP addresses—standard web data that most online services gather. We also track how you move through the platform: which courses you browse, how long you spend on different pages, and which features you use most often.

  • Usage analytics: We monitor patterns like session duration, feature engagement rates, and navigation paths to understand how students interact with our content. This helps us identify confusing interfaces or underperforming courses.
  • Performance metrics: Load times, error reports, and system crashes get logged automatically so our technical team can address issues before they affect your learning experience.
  • Device information: Screen resolution, language settings, and accessibility features you've enabled help us deliver content formatted correctly for your specific setup.

Information From Third-Party Sources

Sometimes we receive data about you from external services you've chosen to connect with your HestiNellia account. If you sign up using a social media account, we get basic profile information from that platform. Payment processors share transaction confirmations but not your full financial details.

Data Usage Purposes

Every piece of information we collect serves a specific purpose—we don't gather data just to have it sitting in a database somewhere. The primary reason is delivering the educational service you signed up for, but the data also powers improvements to our platform and keeps your account secure.

Core Educational Services

Your learning data creates a personalized education journey. We use progress tracking to unlock new modules at the right time, recommend courses aligned with your interests, and adjust difficulty levels based on your performance. Without this information, everyone would see the same generic experience regardless of their skill level or learning pace.

  • Content personalization: Your past course selections, completed workouts, and stated fitness goals inform our recommendation algorithm. This ensures you see relevant new courses and won't waste time on content that's too basic or too advanced.
  • Progress assessment: Quiz scores and completion rates help both you and our instructors understand which concepts need more reinforcement. Instructors can spot trends and adjust their teaching approaches accordingly.
  • Certification issuance: When you complete qualifying courses, we verify your identity and learning history before issuing certificates—this maintains the credibility of our credentials.

Platform Enhancement and Research

Aggregate usage patterns reveal opportunities for improvement. If analytics show that students consistently drop off at a particular video in a course, our content team investigates whether that material needs better explanation or different pacing. We analyze this data in aggregated form—looking at trends across thousands of users rather than examining individual behaviors.

Security and Fraud Prevention

Login patterns, IP addresses, and device fingerprints help us detect suspicious activity. If someone tries accessing your account from an unusual location or device, we might ask for additional verification. Transaction data gets monitored for signs of payment fraud or account sharing violations.

  • Account protection: Unusual login attempts trigger security checks. Multiple failed password attempts temporarily lock accounts to prevent brute force attacks.
  • Platform integrity: We watch for behaviors that violate our terms—like bot accounts, content scraping, or attempts to share single accounts among multiple users.

Communication and Support

Your contact information lets us send important updates about courses you're enrolled in, respond to support requests, and notify you about new features or content in areas you've shown interest in. We segment these communications based on your preferences and activity so you're not bombarded with irrelevant messages.

Information Collected by Third Parties

Running a modern educational platform means integrating with external services that handle specialized functions better than we could build in-house. These third parties collect certain information when you use their embedded features within our site. We carefully select partners who meet our privacy standards, but each has their own policies governing how they handle data.

Payment Processing Services

When you purchase a course or subscription, payment processors handle your financial information directly—we never see your full credit card number or banking details. They return transaction confirmations to us, which we store to maintain your purchase history and manage subscriptions. These processors comply with strict financial industry security standards.

Video Hosting and Streaming

Our educational videos are hosted on specialized platforms that deliver content efficiently across different devices and connection speeds. These services collect viewing data like playback quality, buffering events, and watch time. This technical information helps them adjust streaming quality automatically and helps us identify videos that need optimization.

Analytics and Performance Tools

Third-party analytics services track how visitors navigate our platform, which pages load slowly, and where users encounter errors. They aggregate this data to generate reports showing usage trends and technical issues. We've configured these tools to anonymize IP addresses and respect do-not-track signals where possible.

  • Web analytics platforms: These track page views, session durations, and conversion rates across our site. The data helps us understand which marketing campaigns work and which features students value most.
  • Error monitoring services: When something breaks, these tools capture technical details about what went wrong so our developers can fix it. They might collect browser version, error messages, and the sequence of actions leading to the problem.

Social Media Integration

If you choose to share your course progress or achievements on social networks, those platforms receive information about what you shared. Social login options pull basic profile data from your existing accounts to speed up registration—but you can always create a standalone HestiNellia account instead.

We recommend reviewing the privacy policies of any third-party services you interact with through our platform. While we choose partners carefully, we can't control their data practices beyond the interfaces they provide us.

Data Security and Privacy

Protecting your information isn't just about meeting legal requirements—it's about maintaining the trust you place in us when you share personal details and learning histories. We employ multiple layers of security controls, both technical and procedural, to safeguard data throughout its lifecycle on our systems.

Technical Safeguards

All data transmitted between your device and our servers travels through encrypted connections. Passwords are hashed using industry-standard algorithms, meaning even our own staff can't view them. We store sensitive information in encrypted databases with access restricted to authorized personnel who need it for their specific job functions.

  • Encryption protocols: We enforce strong encryption standards for data in transit and at rest. Financial information receives additional protection through tokenization—we store references rather than actual payment card numbers.
  • Access controls: Staff members receive minimum necessary access to systems containing user data. Authentication requires multiple factors, and we log all data access for audit purposes.
  • Regular security testing: Our systems undergo vulnerability assessments and penetration testing to identify potential weaknesses before attackers can exploit them.

Data Retention and Deletion

We keep your information only as long as necessary to provide services, comply with legal obligations, or resolve disputes. Active account data remains accessible indefinitely while you use our platform, but we'll delete or anonymize information upon request unless we have legitimate reasons to retain it. Course completion records might need preservation for certification validity, for instance.

Internal Policies and Training

Every team member receives privacy and security training during onboarding and through annual refresher courses. We maintain strict confidentiality agreements and data handling procedures that govern how staff interact with user information. Violations result in disciplinary action up to termination.

Despite our best efforts, no system is completely impenetrable. If we detect a security incident that affects your data, we'll notify you promptly and explain what happened, what information was involved, and what steps we're taking in response.

Links to Third-Party Websites

Our educational content occasionally references external resources, research studies, or supplementary materials hosted on other websites. These links exist for your convenience and educational benefit, but clicking them takes you outside our platform and its privacy protections. We don't control these external sites, can't vouch for their content accuracy, and aren't responsible for their data practices.

Each website maintains its own privacy policy and terms of service. Before sharing personal information on a linked site, we recommend checking their policies to understand how they'll handle your data. The fact that we link to a resource doesn't constitute an endorsement of that site's privacy practices or business model.

Cookie Technologies

Like most modern websites, we use cookies and similar tracking technologies to make our platform work properly and remember your preferences between sessions. Some cookies are essential—without them, you couldn't log in or maintain items in your course cart. Others help us understand how you use the site so we can make improvements.

Types of Cookies We Use

  • Essential cookies: These maintain your login session, remember your language preference, and keep track of items you've added to your cart. Disabling them would break core functionality.
  • Analytics cookies: These collect aggregated information about site usage patterns, helping us identify popular courses and confusing navigation flows. The data is typically anonymized and used only for internal analysis.
  • Preference cookies: When you customize your dashboard layout or set video playback preferences, these cookies remember those choices for your next visit.
  • Marketing cookies: If you've consented, these track your interests across our site to show relevant course recommendations. They might also measure the effectiveness of advertising campaigns.

Most browsers let you control cookie behavior through their settings. You can block all cookies, accept only first-party cookies, or receive notifications before cookies are set. Just remember that restricting cookies might limit certain platform features or require you to re-enter preferences each visit.

Supplementary Guidelines

Certain areas of our platform or user groups have additional privacy considerations beyond this main policy. Corporate accounts with multiple team members, for instance, allow administrators to view learning progress for their organization's users. Instructor accounts access different types of data about enrolled students than regular learners see.

If you participate in beta programs or research studies, you might be asked to provide additional consent for data collection specific to those activities. We'll always explain what extra information we need and why before you agree to participate. Special programs for minors or educational institutions may involve parent or guardian consent requirements and additional data protection measures.

  • Corporate learning programs: Company administrators can monitor employee progress through assigned training modules. We disclose this visibility during the enrollment process so users understand who can view their data.
  • Community features: Forum posts and public profile information become visible to other users. You control what appears publicly versus what remains private on your profile.
  • Instructor data access: Course creators see aggregated performance metrics for their classes and can identify students who might need additional support, but they don't access your data outside courses you're enrolled in.

Data Protection Compliance

We stay current with evolving privacy regulations around the world and adjust our practices to meet or exceed legal requirements. This means implementing rights-respecting processes for data access, correction, and deletion regardless of where you're located. While specific laws vary by jurisdiction, we aim for a consistently high standard of data protection across our entire user base.

You have fundamental rights regarding your personal information. You can request copies of data we hold about you, ask us to correct inaccuracies, object to certain processing activities, or request deletion of your information when it's no longer necessary. We've built tools into your account dashboard for exercising many of these rights directly, and our support team can help with more complex requests.

  • Right to access: You can download a complete archive of your account data, including learning history, profile information, and communications. This process typically completes within a few business days.
  • Right to rectification: Spot an error in your profile or learning records? You can update most information directly through your account settings or contact us to correct data you can't change yourself.
  • Right to deletion: Request full account deletion and we'll remove or anonymize your personal information, subject to legitimate retention needs like preventing fraud or complying with legal obligations.
  • Right to portability: Export your data in structured, machine-readable formats if you want to move your learning history to another platform or keep personal archives.

We process data based on legitimate grounds—usually to fulfill our contract with you, comply with legal obligations, or pursue legitimate business interests that don't override your privacy rights. Where we need consent for specific activities, we'll ask for it explicitly and respect your right to withdraw that consent later.

Policy Updates and Changes

Privacy practices evolve as technology advances and regulations change. When we update this policy, we'll notify active users through the platform and give you time to review changes before they take effect. Material changes that significantly alter how we handle your data will prompt more prominent notifications—we won't quietly slip in major revisions.

The effective date at the top of this document shows when the current version took effect. Continuing to use HestiNellia after updates indicates your acceptance of the revised terms. If you disagree with changes, you can close your account before they take effect—we'd rather see you leave on good terms than stay under policies you're uncomfortable with.