Privacy Policy

Effective date: September 5, 2026. This policy explains what TrainBeyond LLC ("TrainBeyond", "we", "us") collects when you use www.trainbeyond.com (the "Site"), why, and the choices you have. It is written to satisfy the U.S. state privacy laws that apply to us, the EU and UK General Data Protection Regulation (GDPR) for visitors from those regions, Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), and Brazil's General Data Protection Law (LGPD).

Who is responsible for your data

The data controller is TrainBeyond LLC, a Texas limited liability company, with its principal office at 1000 Main Street, Suite 2300, Houston, TX 77002, United States. TrainBeyond LLC also keeps an office at Calz. Gral. Mariano Escobedo 476, Piso 12, Miguel Hidalgo, Mexico City 11590, Mexico, which is its domicile for notices from visitors in Mexico and the address of the "responsable" for the purposes of the LFPDPPP. There is no separate Mexican company. You can reach us at support@trainbeyond.com.

What this policy covers

This policy covers the public Site, including the blog, the gallery and the contact page. It does not cover the TrainBeyond training platform at app.trainbeyond.com or the sessions our customers run on headsets, desktops and phones. When you train inside a customer's program, your employer or training provider is the controller of your training records and TrainBeyond processes them on their behalf under our agreement with them, including the results we return to their learning management system through LTI 1.3.

What we collect and why

Visit analytics

We measure how the Site is used with Matomo, an analytics tool that we host ourselves at seo.trainbeyond.com. No analytics data is sent to Google, Meta or any advertising network, and we do not use advertising trackers. For each page view we record the page address, the page you came from, your browser and device type, screen size, language, and an approximate location derived from your IP address. Matomo masks the last two bytes of your IP address before it is stored, so we never keep your full address.

Until you accept optional cookies, Matomo counts your visit without setting any cookie and cannot recognise you on a later visit. If you choose "Accept all" in the cookie notice, Matomo sets two cookies so that returning visits can be counted: _pk_id (13 months) and _pk_ses (30 minutes). You can withdraw that choice at any time by clearing the Site's data in your browser; the notice will appear again. Our legal basis for analytics is our legitimate interest in understanding and improving the Site, and your consent for the optional cookies. We keep analytics records for 13 months.

Contact and demo requests

When you send the demo request form, what you type is transmitted to TrainBeyond and stored on our own servers: your name, email address, company, the sector you select, your message, and whether you asked for a headset session. We keep it in our own database and notify our team from our own mail server. The form is not handled by a third-party form or marketing service.

Alongside the submission we record the date and time, the page you sent it from, your site language, and the IP address the request came from. The IP address is used only to prevent automated abuse of the form and is deleted after 30 days. The rest is kept while we are in contact with you and for up to 24 months after our last exchange, then deleted.

The legal basis is the steps needed to enter into a contract with you, or our legitimate interest in responding to business enquiries. You can ask us to delete your submission at any time using the contact details under "Your rights".

Preferences stored in your browser

The Site keeps three small settings in your browser's local storage: your cookie choice (tb-consent), your preferred language (tb-lang), and whether the element reference overlay is switched on (tb-ids). These values never leave your device and are not read by us. Deleting the Site's data in your browser removes them.

Fonts

The Site loads its typefaces from Google Fonts. When your browser fetches a font file, Google receives your IP address and standard request headers. Google states that it does not use these requests for tracking or advertising; its policy is at developers.google.com/fonts/faq/privacy.

Videos and images

All video and image media on the Site is hosted by us. We do not embed players from YouTube, Vimeo or similar services, so watching a capture on the Site does not send data to a third party.

What we do not do

• We do not sell or rent personal data, and we have not done so in the past twelve months.
• We do not use the Site for targeted advertising, retargeting or cross-site tracking.
• We do not make automated decisions about you that have legal or similarly significant effects.
• The Site is not directed to children, and we do not knowingly collect data from anyone under 16.

Who we share data with

We share personal data only with the service providers that run the Site and our email, and only so that they can provide those services to us; with professional advisers; and with authorities when the law requires it. If TrainBeyond LLC is ever sold or merged, personal data may pass to the successor under the same commitments.

International transfers

Our servers and staff are in the United States and Mexico, so data you give us is processed in those countries. Where the GDPR, the UK GDPR or the LGPD applies, we rely on the European Commission's standard contractual clauses or their local equivalents to cover these transfers. Data handled at our Mexico City office is processed by the same company, TrainBeyond LLC, so no transfer to a third party takes place between our offices; it remains subject to this privacy notice.

Your rights

Depending on where you live you may have the right to know what data we hold about you, to receive a copy, to correct it, to have it deleted, to object to or restrict its use, to withdraw consent, and to receive it in a portable form. Residents of Mexico may exercise their rights of access, rectification, cancellation and opposition (ARCO rights) and revoke their consent. Residents of California and other U.S. states with privacy laws may exercise the rights those laws provide, and we will not discriminate against you for doing so.

To exercise any of these rights, email support@trainbeyond.com with the subject line "Privacy request". We will confirm your identity, answer within the time the applicable law allows (20 working days in Mexico, one month under the GDPR, 45 days in most U.S. states), and tell you if we cannot fulfil a request and why. You may also complain to your data protection authority: for Mexico the INAI, for the EU your national authority, for the UK the ICO, for Brazil the ANPD.

Security

The Site is served only over HTTPS. Analytics data stays on infrastructure we control. Access to email and analytics is limited to the staff who need it. No system is perfectly secure, and if a breach affecting your data ever occurs we will notify you and the relevant authorities as the law requires.

Changes to this policy

When we change this policy we will update the effective date at the top. If a change materially affects how we use data you have already given us, we will announce it on the Site or by email. For visitors in Mexico, this page is where changes to the privacy notice ("aviso de privacidad") are published.

Contact

Questions about privacy: support@trainbeyond.com, or by post to either office address above.