Last updated 26 October 2026
Privacy
Draft: these terms are being reviewed and may change before launch.
This notice explains what Epicsol (“we”), who runs OrthoReady from Australia, collects when you use the site and the course, and what we do with it. In short: we collect what we need to run the course, we don’t sell your data, and we don’t use advertising or third-party tracking.
What we collect
| What | Why |
|---|---|
| Your email address, and one-time sign-in codes (stored only in scrambled form and valid for 15 minutes) | To sign you in, without a password. |
| Course progress (lessons done, cases and your answers in them) and certificates | So your progress follows you to every device, and to issue and check certificates. |
| Purchases: what you bought, when, the amount and currency, and the payment reference | To give you access, handle refunds and keep the records the law requires. Your card details go to Stripe, never to us. |
| Team data: the team you belong to, invites (the invited email address), and your progress | To run team licences. Your team’s manager sees your email address, progress and certificate. |
| What you send us: the “keep me posted” form and free guides (your email, which guide, and the page or campaign that brought you), team and pilot requests, the “what stopped you?” question after a cancelled checkout, and emails | To send what you asked for and a short series of welcome emails, reply, set up pilots and improve the course. |
| Usage: pages visited, the country (from the network), device type (phone, tablet or desktop), the site that sent you, and course milestones | To understand how the course is used and fix what doesn’t work. See “Analytics” below. |
| Error reports: technical details when something breaks, with email addresses and links removed | To find and fix bugs. |
Analytics without cookies
We count visits ourselves; there is no Google Analytics or similar. We don’t store your IP address. To count unique visitors, the server turns your IP address and browser into a scrambled code that changes every day, so you can’t be followed from one day to the next. If your browser sends “Do Not Track” or Global Privacy Control, we don’t count you at all. Usage records are deleted after 13 months.
Cookies and browser storage
- optima_session: keeps you signed in, for up to 60 days or until you sign out.
- optima_ent: lets the course load the units you’ve paid for, for one hour at a time.
- The course keeps your progress and your chosen look in your browser’s storage, so the free units work without an account.
These are needed for the site to work. We don’t use advertising or tracking cookies, so there’s nothing to opt out of.
Who processes your data for us
- Cloudflare: hosts the site and the course (global network).
- Neon: our database, in the European Union (Frankfurt, Germany).
- Stripe: payments and tax. With Stripe Managed Payments, Stripe sells the course to you as seller of record, so it also handles your payment data under its own privacy policy.
- Resend: sends our emails (sign-in codes, invites, receipts of requests).
- Sentry: error reports.
These providers may process data in countries other than yours. They only use it to provide their service to us, under their data-protection terms. We don’t sell or rent your data to anyone.
How long we keep it
- Your account, progress and certificates: until you ask us to delete them.
- Purchase records: as long as tax and accounting law requires.
- Usage records: 13 months. Sign-in codes: until they expire.
- Requests and messages: as long as needed to deal with them, then we delete them.
Emails
If you ask for a guide or news, we send it, then a few welcome emails over the next two weeks (and occasional news). Every one of these has an unsubscribe link that works with one click, and stops them all. Emails you need to use the course, such as sign-in codes and receipts, still arrive when you ask for them.
Your choices and rights
You can ask us to show you the data we hold about you, correct it, send you a copy, or delete your account. Email support@orthoready.co from your account’s address; we’ll reply within 30 days. Deleting your account removes your progress and certificate, and ends access to anything you bought. If you’re not happy with how we handled your request, you can complain to the Office of the Australian Information Commissioner, or to the data-protection authority where you live.
Children
OrthoReady is professional training for adults. It is not meant for children under 16.
Changes
If we change this notice in a way that matters, we’ll email you before it applies.
Questions? Email support@orthoready.co.