Consumer Health Data Privacy Policy

Last updated: October 12, 2026. This policy applies to residents of Washington, Nevada and any other state with a consumer health data law. It adds to our Privacy Policy, which applies to everyone and gives the full details.

Our courses are educational, not therapy, and we never ask about your health. But some state laws treat information that could suggest something about a person's mental or behavioral health as "consumer health data", even when it comes only from a purchase. Because the name of the course you buy (for example, "8-Hour Anger Management Course") could be read that way, we treat your enrollment as consumer health data under those laws.

• Your enrollment: which course you bought (anger management or impulse control and decision making), the number of hours, the dates, your enrollment ID and certificate ID.
• Your course progress connected to that enrollment: study time, lessons and exercises completed (only the fact of completion), quiz and final test results.

We do not collect diagnoses, treatment, medication, symptoms, the reason you enrolled, your case number, court or date of birth. Your journal entries and exercise answers stay on your device and never reach us.

From you, when you buy and take a course on goodstandingcourses.com, and from Stripe, our payment processor, which tells us which course was paid for.

Only to provide the course you asked for: give you access, count your study time, grade your tests, issue your enrollment letter and certificate, let the people you give your certificate ID to verify it, handle refunds, and keep the records Polish tax law requires. We do not use it for advertising, profiling or any other purpose.

• We never sell consumer health data, and we do not share it for advertising.
• We share it only with the service providers (processors) that run our service for us, under contracts that limit them to processing it on our behalf: Cloudflare, Inc. (hosting, database, service emails), Stripe (payments; it sees the course name on your receipt) and Google LLC (our support mailbox, Google Gmail, if you write to us).
• People you choose: anyone who has your certificate or enrollment ID and your last name can confirm your certificate on our verification page. You can hide it from verification in your dashboard at any time.
• We may disclose it when the law requires it (for example, a valid court order that applies to us). We do not send it to your court, officer or employer.

We have no affiliates that receive it.

Wherever you live, you can:

• Confirm and access: ask whether we hold consumer health data about you and get a copy, together with the list of every third party and processor we shared it with (and their contact details).
• Delete: ask us to delete it. We also pass the request on to our processors. We keep only what Polish tax law requires (order records) and, unless you ask us to remove it too, your certificate record so the court or agency you gave it to can still verify it.
• Withdraw consent: where we rely on consent, you can withdraw it at any time.

How to make a request. Email privacy@goodstandingcourses.com from the email address on your account. If you write from another address, we will confirm the request with your account email first. We answer within 45 days, free of charge. If we refuse a request, you can appeal by replying to our answer with the word "Appeal"; we answer the appeal within 45 days and, if we still refuse, tell you how to contact the Washington State Attorney General (atg.wa.gov) or the Nevada Attorney General (ag.nv.gov).

Access to this data is limited to the business owner. We keep it for the periods in section 8 of our Privacy Policy and then delete or anonymize it.

Dzmitry Pliachko, doing business as Good Standing Courses, ul. Stanisława Drabika 63/19, 52-131 Wrocław, Poland. privacy@goodstandingcourses.com.