Privacy Policy

01Introduction

This Privacy Policy describes how Sublime LMS ("Sublime", "we", "us") collects, uses, and protects information when you use our websites, applications, and learning platform (the "Service"). It applies to administrators, instructors, and learners who use Sublime.

We act as a data controller for account and website data, and as a data processor for the learner content and records our customers manage on the platform.

02Information we collect

Information you provide

• Account details — name, work email, organization, role, and team size.
• Learning content — courses, videos, quizzes, assignments, and discussions you create or submit.
• Communications — messages you send us through forms, support, or demo requests.
• Billing information — processed securely by our payment provider; we do not store full card numbers.

Information collected automatically

• Usage data — pages viewed, features used, progress, quiz attempts, and engagement signals.
• Device & log data — IP address, browser type, device identifiers, and timestamps.
• Cookies — as described in the Cookies section below.

03How we use information

We use information to:

• Provide, operate, and maintain the Service, including learner momentum, guidance, and recovery features.
• Personalize the learning experience and surface relevant, contextual guidance.
• Process transactions and manage subscriptions.
• Communicate with you about updates, security, and support.
• Monitor, analyze, and improve performance, reliability, and security.
• Comply with legal obligations and enforce our terms.

04Legal bases

Where the GDPR or similar laws apply, we process personal data on the basis of: performance of our contract with you; your consent (which you may withdraw); our legitimate interests in operating and improving the Service; and compliance with legal obligations.

05How we share information

We share information only as needed to run the Service:

• Service providers — vetted vendors for hosting, analytics, payments, and support, bound by confidentiality and data-protection obligations.
• Within your organization — admins and instructors may access learner data relevant to their programs.
• Legal & safety — where required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

06Data security

We protect data with encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, continuous monitoring, and regular independent audits. No method of transmission or storage is completely secure, but we work hard to safeguard your information and to maintain SOC 2 and GDPR-aligned practices.

07Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymize it. Customers can request export or deletion of learner data they control.

08Your rights & choices

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Request portability of your data.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us using the details below. We will respond within the timeframes required by applicable law.

09Cookies & tracking

We use essential cookies to operate the Service, and analytics cookies to understand usage and improve the experience. You can control cookies through your browser settings; disabling some cookies may affect functionality.

10Learner & student data

Where Sublime is used by academies, bootcamps, or universities, learner records are handled on behalf of those institutions. We support compliance with FERPA and similar frameworks, and we process student data only as instructed by the institution that controls it. Sublime is not directed to children under the age governed by applicable child-privacy laws without appropriate institutional or parental authorization.

11Changes to this policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you through the Service or by email and update the "Last updated" date above.

12Contact

Questions, requests, or concerns about your privacy?