Privacy Policy

1. Who processes your data

IARCOR INTERNATIONAL is responsible for the processing of personal information managed through iarcor.org. Its institutional headquarters are located in Apopka, Florida, United States.

For privacy inquiries or requests related to your data, please write to info@iarcor.org or contact us at +593 96 181 1505.

This policy applies to the new iarcor.org website. It describes the available features and, where expressly stated, the treatment associated with services that may be enabled later. The publication of this policy does not imply that sales or the official issuance of certificates are now open.

2. What information do we use and for what purpose?

The information is incorporated into the site's databases of accounts, memberships, events, documents, and transactions. Depending on the service you use, we may record, query, update, retain, and share the following data:

• Account and access: Email address, username, profile information, password protection, and email verification status. These allow you to create your account, log in, recover access, and submit requests.
• Membership: plan, status, expiration dates, renewals, and related history. These are used to manage your benefits and verify access to resources.
• Events and certificates: Registration, participant identification, attendance records, verification of requirements, and associated documents. These serve to organize participation and maintain traceability of the right to a certificate, where applicable.
• Orders and payments, when enabled: Contact and billing information, description, amount, date, order status, and transaction references. These are used to process purchases, renewals, support, and accounting obligations.
• Consultations and volunteering: Data and files that you send us through our contact channels are used to respond to you and manage your request.
• Functioning and safety: IP address, browser information, access logs, errors, and email delivery. These help maintain the service, diagnose problems, and prevent unauthorized access.

The data comes from you, your activity on the site, and the records the team keeps while managing the service. Where applicable, it may also come from payment provider confirmations or support provided by an activity organizer.

Required fields are identified on each form. Without a valid email address, we cannot verify your account or recover your access. Incomplete information may prevent us from providing the service; inaccurate data can lead to errors in notices, memberships, or documents. Do not send passwords or complete credit card details via email.

Basis of treatment

We manage the accounts and services you requested to fulfill your request and manage the corresponding relationship. We retain the information required to comply with legal obligations and process the records necessary for security and abuse prevention based on legitimate interest, subject to applicable regulations and your rights.

When a purpose requires your consent, it must be specifically requested. Creating an account does not, in itself, constitute authorization to receive advertising. Verification, recovery, account statement, and service management messages are operational communications.

Access checks and certificates

The system uses automated rules regarding membership validity, attendance, and payment dates to display access or determine eligibility. These checks may affect the availability of a benefit. If you encounter an incorrect result, you can request a review by a team member at info@iarcor.org and provide the necessary information to correct it.

Public registry of certifications and training

The public query allows you to check records by name, number, program, and country. It can display the holder's name, program and level, registration number, country, published dates, and credential status. It does not display email, phone number, purchases, grades, assessment attempts, or internal evidence.

Historical records are taken from the directory previously published on iarcor.com. We retain the numbers and dates as published; an incomplete date is not automatically filled in and does not, by itself, confirm current validity. Cases with missing data are reserved for review.

Professional certifications are valid for four years, and their status is determined by the issuance date or the date of the last approved renewal. They are displayed as being renewed three months prior to expiration and suspended upon expiration. The deadline for completing the renewal process is three months after expiration. After this period, the certifications remain publicly visible as suspended due to lack of renewal; their history is also retained for the holder and the administration.

To process a renewal, we handle the application, proof of payment, professional development hours, and any additional documents required by the program. These documents are private and available only to the holder and authorized administrative staff. Renewal requires human review. Six-month, three-month, and expiration notices are sent to the email address associated with the verified certification; email addresses are not derived from names in the historical record.

To facilitate searches, historical profiles group records with matching full names and countries. This grouping can be corrected and does not verify account ownership or the validity of credentials. Linking an account requires verifying the owner's identity and its correspondence with the profile credentials; a name match is not sufficient. You can request linking, a correction, or a review of public exposure by writing to info@iarcor.org; We will verify your identity and address your rights as required by applicable regulations.

Premium expiration does not remove acquired certifications. Professional certifications depend on the program's specific requirements, including assessments and practical approval where applicable. You can request a human review of an automated check. The query and its profiles are excluded from configured analytics.

3. Who can access the information

Authorized IARCOR personnel can access the information necessary to manage accounts, memberships, and activities, resolve issues, and manage documents. Technical providers are involved according to the service they provide:

• Hostinger: Website hosting, infrastructure, and email service. This may include data stored on the website, technical logs, and information necessary for transmitting messages. See your Privacy Policy.
• Stripe, when using integrated payment: IARCOR receives the necessary data to process the transaction and prevent fraud. IARCOR retains payment references and statuses; card fields are managed through the payment gateway. See the Stripe policy.
• Technical support providers: They may need limited access to resolve an issue or maintain the platform.
• Competent authorities: when there is a legal obligation to provide information.

Accommodation, mail, and payment services may involve data processing outside your country. The entities, locations, and terms of these providers are described in their data processing policies and agreements. Transfers must comply with the legal basis and safeguards required by applicable regulations; you can request information about those that affect your data by contacting our privacy team.

If an activity requires communicating data to another organizing or certifying entity, its identity, purpose and conditions must be informed before that communication and consent must be obtained where appropriate.

4. How long can they be stored?

Your account details are retained for as long as you maintain a relationship with IARCOR and for any additional time necessary to fulfill applicable requests or obligations. Order and payment records are retained in accordance with applicable accounting, tax, and claims handling requirements.

Membership history, attendance records, and certificates may still be required after a membership expires, to prove acquired rights, resolve issues, or allow document consultation. The expiration of a membership does not automatically delete the account or its history.

Technical logs, email records, and backups are retained according to their operational purpose and service cycles. When processing a deletion request, retention needs are also reviewed; if it is necessary to retain some information, the reason will be explained. Evidence required for a legal obligation or a pending claim will not be deleted solely due to account closure.

5. Cookies, links and security

This site uses technical cookies for session management, authentication, preferences, and, where applicable, shopping cart functionality. You can delete or block them through your browser; however, doing so may prevent access to your account or disrupt some features.

Optional analytics: Google Analytics

If you choose «Accept analytics,» we load Google Analytics to measure visits to public pages and clicks on the WhatsApp button. Google receives technical data such as cookie identifiers, browser and device information, and connection data. We do not send names, emails, form content, or website address parameters. Clicking on WhatsApp does not confirm that you have sent a message.

The configured measurement excludes the account area, shopping cart, checkout page, certification registration and profiles, and authenticated sessions. We do not activate Google Signals or ad personalization. The Meta pixel is not active on this site; future implementation will require informing users of its purpose and obtaining their consent.

Clicking «Only necessary» prevents Google Analytics from loading. You can change or withdraw your choice from «Cookie Preferences» in the footer. We store this choice in your browser's local storage for up to 180 days; if you clear that storage, we will ask you again. Withdrawing your choice stops future measurement and removes Analytics cookies from the site, without affecting the lawfulness of any prior processing.

When you accept, Analytics uses cookies such as _ga y _ga_… to distinguish browsers and sessions. You can see how Google uses this data and the associated international transfers at your privacy policy and in Information about partner sites. You can request information about applicable conservation by writing to info@iarcor.org.

If you access an external link or use embedded content from another provider, that provider may receive technical information about your connection and apply its own policy. Review their terms of service before providing them with any data.

We use HTTPS, authentication, and access controls to protect your information. No system completely eliminates risks. If you suspect unauthorized access to your account, change your password and notify us through our contact channel.

6. How to exercise your rights

Under applicable regulations, you can request access to your data, rectification or updating, erasure, objection, restriction or suspension of processing, and data portability. You can also withdraw your consent for purposes that depend on it, without affecting the lawfulness of processing carried out previously, and request a human review of automated checks that affect you.

1. Write to info@iarcor.org with the subject line «Request for personal data».
2. Please provide the email address associated with your account and explain which right you wish to exercise or what information you need to correct.
3. If necessary, we will only ask for additional information provided to verify your identity and protect your data.

We will process your request within the applicable legal timeframes and inform you of any relevant limitations. If you disagree, you may contact the competent data protection authority in accordance with the regulations applicable to your relationship with IARCOR. The international scope of our services does not limit any mandatory rights you may have in your jurisdiction.

The services are geared towards a community of training and professional development. If the participation of a minor requires data processing, it must be managed with the involvement of their legal representative and with the corresponding information and authorizations.

7. Updates to this policy

We will update this page when the purposes, services, or relevant providers change. The date in the header identifies the published version. When a change requires specific notice or new consent, this must be provided before the processing takes place.