Privacy Policy

Effective date: October 6, 2026. This policy explains what TrainBeyond LLC ("TrainBeyond", "we", "us") collects when you use www.trainbeyond.com (the "Site"), why, and the choices you have. It is written to satisfy the U.S. state privacy laws that apply to us, the EU and UK General Data Protection Regulation (GDPR) for visitors from those regions, Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), and Brazil's General Data Protection Law (LGPD).

Who is responsible for your data

The data controller is TrainBeyond LLC, a Texas limited liability company, with its principal office at 1000 Main Street, Suite 2300, Houston, TX 77002, United States. TrainBeyond LLC also keeps an office at Calz. Gral. Mariano Escobedo 476, Piso 12, Miguel Hidalgo, Mexico City 11590, Mexico, which is its domicile for notices from visitors in Mexico and the address of the "responsable" for the purposes of the LFPDPPP. There is no separate Mexican company. You can reach us at support@trainbeyond.com.

What this policy covers

This policy covers the public Site, including the blog, the gallery and the contact page. It does not cover the TrainBeyond training platform at app.trainbeyond.com or the sessions our customers run on headsets, desktops and phones. When you train inside a customer's program, your employer or training provider is the controller of your training records and TrainBeyond processes them on their behalf under our agreement with them, including the results we return to their learning management system through LTI 1.3.

What we collect and why

Visit analytics

We measure how the Site is used with Matomo, an analytics tool that we host ourselves at seo.trainbeyond.com. Matomo data is not sent to Google, Meta or any advertising network. Google Ads conversion measurement is separate and described below. For each page view Matomo records the page address, the page you came from, your browser and device type, screen size, language, and an approximate location derived from your IP address. Matomo masks the last two bytes of your IP address before it is stored, so we never keep your full address.

Until you accept optional cookies, Matomo counts your visit without setting any cookie and cannot recognise you on a later visit. If you choose "Accept all" in the cookie notice, Matomo sets two cookies so that returning visits can be counted: _pk_id (13 months) and _pk_ses (30 minutes). You can withdraw that choice at any time by clearing the Site's data in your browser; the notice will appear again. Our legal basis for analytics is our legitimate interest in understanding and improving the Site, and your consent for the optional cookies. We keep analytics records for 13 months.

Contact and demo requests

When you send the demo request form, what you type is transmitted to TrainBeyond and stored on our own servers: your name, email address, company, the sector you select, your message, and whether you asked for a headset session. We keep it in our own database and notify our team from our own mail server. The form is not handled by a third-party form or marketing service.

Alongside the submission we record the date and time, the page you sent it from, your site language, and the IP address the request came from. The IP address is used only to prevent automated abuse of the form and is deleted after 30 days. The rest is kept while we are in contact with you and for up to 24 months after our last exchange, then deleted.

The legal basis is the steps needed to enter into a contract with you, or our legitimate interest in responding to business enquiries. You can ask us to delete your submission at any time using the contact details under "Your rights".

Google Ads conversion measurement

If you choose "Accept all", the Site loads the Google tag and allows Google Ads to measure whether an advertisement led to a successful contact-form submission. Google receives standard request data such as your IP address, browser headers and page address, advertising identifiers associated with the visit, and a conversion event with an opaque submission identifier used only to prevent duplicate counting. We do not send Google your name, email address, phone number, company or message.

The tag does not load if you choose "Essential only". Ad personalization and remarketing signals remain disabled. Our legal basis is your consent, which you can withdraw for future visits by clearing the Site's data in your browser and then choosing "Essential only". Google processes the conversion data under its own privacy terms.

Live Chat

If you send a message through Live Chat, we process the message and conversation history, the Site language, the page address, the referring page, campaign parameters in the page address, timestamps, and the conversation's delivery and handoff status. You do not need to give us a name, email address, phone number or company to start a chat. Please do not send payment details, health information, credentials, government identifiers or other sensitive personal information.

Live Chat may use artificial intelligence to answer from approved TrainBeyond material. If automated handling cannot answer safely or a person joins the conversation, messages may be relayed to TrainBeyond staff through our dedicated WhatsApp account. WhatsApp's infrastructure therefore processes those relayed messages. The interface identifies automated and human responses. We do not use chat content to make decisions that have legal or similarly significant effects.

We use a keyed, non-reversible form of the request's network address to prevent abuse; the full address is not written to the Live Chat database or application logs. Conversation content is retained only for the configured support and security period and is then deleted separately from the limited routing and audit records needed to reject delayed or duplicate delivery. The legal basis is your consent when you send the first message, our legitimate interest in answering enquiries and protecting the service, and steps requested by you before a possible contract. You may end the conversation or withdraw consent at any time.

Preferences stored in your browser

The Site keeps your cookie choice (tb-consent), preferred language (tb-lang), and element-reference-overlay setting (tb-ids) in local storage. If you choose "Accept all" and an advertising identifier such as gclid, gbraid or wbraid is present in a landing-page address, the Site may keep it under tb-click for up to 90 days and include it with a contact request for attribution. Choosing "Essential only" or deleting the Site's data removes that identifier.

While a Live Chat conversation is active, the tab's session storage keeps an opaque conversation identifier, a secret resume token and the latest event cursor under tb-live-chat-session-v1. The token is sent only in the authorization header for Live Chat requests so the Site can restore the correct conversation after a reload; it is never placed in a URL. Closing the tab clears this browser copy, and ending the chat invalidates and removes it.

Fonts

The Site loads its typefaces from Google Fonts. When your browser fetches a font file, Google receives your IP address and standard request headers. Google states that it does not use these requests for tracking or advertising; its policy is at developers.google.com/fonts/faq/privacy.

Videos and images

All video and image media on the Site is hosted by us. We do not embed players from YouTube, Vimeo or similar services, so watching a capture on the Site does not send data to a third party.

What we do not do

• We do not sell or rent personal data, and we have not done so in the past twelve months.
• We do not use the Site for targeted advertising, retargeting or cross-site tracking.
• We do not make automated decisions about you that have legal or similarly significant effects.
• The Site is not directed to children, and we do not knowingly collect data from anyone under 16.

Who we share data with

We share personal data only with the service providers that run the Site and our email, and only so that they can provide those services to us; with Google for consented advertising conversion measurement as described above; with professional advisers; and with authorities when the law requires it. If TrainBeyond LLC is ever sold or merged, personal data may pass to the successor under the same commitments.

International transfers

Our servers and staff are in the United States and Mexico, so data you give us is processed in those countries. Where the GDPR, the UK GDPR or the LGPD applies, we rely on the European Commission's standard contractual clauses or their local equivalents to cover these transfers. Data handled at our Mexico City office is processed by the same company, TrainBeyond LLC, so no transfer to a third party takes place between our offices; it remains subject to this privacy notice.

Your rights

Depending on where you live you may have the right to know what data we hold about you, to receive a copy, to correct it, to have it deleted, to object to or restrict its use, to withdraw consent, and to receive it in a portable form. Residents of Mexico may exercise their rights of access, rectification, cancellation and opposition (ARCO rights) and revoke their consent. Residents of California and other U.S. states with privacy laws may exercise the rights those laws provide, and we will not discriminate against you for doing so.

To exercise any of these rights, email support@trainbeyond.com with the subject line "Privacy request". We will confirm your identity, answer within the time the applicable law allows (20 working days in Mexico, one month under the GDPR, 45 days in most U.S. states), and tell you if we cannot fulfil a request and why. You may also complain to your data protection authority: for Mexico the INAI, for the EU your national authority, for the UK the ICO, for Brazil the ANPD.

Security

The Site is served only over HTTPS. Analytics data stays on infrastructure we control. Access to email and analytics is limited to the staff who need it. No system is perfectly secure, and if a breach affecting your data ever occurs we will notify you and the relevant authorities as the law requires.

Changes to this policy

When we change this policy we will update the effective date at the top. If a change materially affects how we use data you have already given us, we will announce it on the Site or by email. For visitors in Mexico, this page is where changes to the privacy notice ("aviso de privacidad") are published.

Contact

Questions about privacy: support@trainbeyond.com, or by post to either office address above.