RBT®shape-62ABAT®shape-62IBT® PATHWAYSb1b16881-a11e-4fc1-b1fb-9f5bccfa7b8e-removebg-previewOTB CLINICAL COACH — LESS PAPERWORK. MORE CLIENT TIME.shape-62MOCK EXAMS — ACCESS CODE DELIVERYshape-62🎵 THE BEHAVIOR TECHNICIAN MIXTAPE: 40 HOURS TO CERTIFICATION — NOW LIVEshape-62BACB ACE APPROVEDshape-62QABA APPROVEDshape-62IBAO APPROVEDshape-62

PRIVACY POLICY

Breadcrumb Abstract Shape
Breadcrumb Abstract Shape
Breadcrumb Abstract Shape

Effective Date: May 25, 2026
Last Updated: May 25, 2026

Outside the Box Trainings (“OTB Learning Group, LLC,” “we,” “us,” or “our”) operates the website www.outsidetheboxtrainings.com (the “Site”) and provides professional education and continuing education services (the “Services”). We are committed to protecting your privacy and handling your personal information with transparency and care.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, purchase our courses, or engage with our learning platform (including our LearnDash Learning Management System (LMS)). This policy is written with professional education in mind (e.g., CEUs/PDUs and certification coursework), and it is intended to address applicable U.S. privacy laws (including the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) where applicable), and international standards such as the EU General Data Protection Regulation (GDPR) and UK GDPR where applicable.

Important HIPAA/FERPA Note (Training Context): OTB provides training about HIPAA and FERPA requirements and may collect and store training-related records (such as course progress, quiz results, and completion certificates). Our Services are not designed to collect or store protected health information (“PHI”) on behalf of healthcare providers, and we ask learners not to upload PHI or other sensitive client/student records into the LMS. Where training programs are used within organizations that are subject to HIPAA and/or FERPA, we aim to handle training records in a way that supports those compliance obligations.

SUMMARY OF KEY POINTS

This summary is provided for convenience only. It does not replace the full Privacy Policy below.

  • What we collect (core): We only directly collect your full name and email address for account creation, course delivery, and communications, and we may collect your professional certification number (e.g., BACB®, IBAO®, or ABAT) when you provide it for CEU/PDU reporting (as applicable). We also collect learning and course data (progress, quizzes, completion) and basic device/usage data.
  • Payments: Payments are processed through WooCommerce and Stripe; we do not store full payment credentials on our servers.
  • How we use data: To deliver courses, manage accounts, support learners, report CEUs/PDUs where applicable, run our Site/LMS, and improve security and performance.
  • Tracking: We use cookies and similar technologies and may use tools such as Google Analytics to understand Site traffic and improve the Services.
  • Your choices/rights: Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your data, and to opt out of certain uses. We explain how to submit requests below.
  • We do not sell personal information: OTB Learning Group, LLC does not sell your personal information for money.
  • Florida law applies: This policy is governed by Florida law; disputes must be brought in Broward County, Florida.

1. INFORMATION WE COLLECT

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to you (“Personal Information”).

A. Information You Provide to Us:

  • Account and Contact Information (Direct Collection): We only directly collect your full name and email address for account creation, course delivery, and communications.
  • Professional Education / Credential Information (Direct Collection): We may collect your professional certification number, such as a BACB®, IBAO®, or ABAT number, when you provide it. We use these professional IDs solely to report continuing education credits and/or completion information to the respective credentialing boards (as applicable).
  • Payment Processing (WooCommerce + Stripe): Billing and payment information is processed securely through WooCommerce and Stripe. OTB Learning Group, LLC does not store full credit card numbers, full bank account numbers, or full payment credentials on our own servers. We may receive limited transaction information (e.g., payment confirmation, transaction ID, and limited billing details) to fulfill your purchase, provide receipts, and reconcile payments.
  • Learning and Course Data (LearnDash): Records of the courses you enroll in, your progress, quiz/assessment attempts and results, timestamps, completion status, and certificate issuance/verification data within LearnDash and our Site.
  • Communication Data: Information you provide when you contact us for support, request information, or sign up for our newsletter or promotions.

B. Information Collected Automatically:

  • Device and Usage Data: IP address, browser type, device identifiers, operating system, referring URLs, and information about how you interact with our Site and the LearnDash Learning Management System (LMS).
  • Cookies and Similar Technologies: Our use of cookies and similar technologies (including any analytics cookies) is governed by our standalone Cookie Policy. Please review our Cookie Policy for details about the types of cookies we use, purposes, and your choices/controls.

2. HOW WE USE YOUR INFORMATION

We use your information to provide and improve our professional education Services, specifically to:

  • Provide Services and Course Access: Deliver and manage your access to CEU/PDU courses and the 40-hour Behavior Technician Certification Course, including account creation and authentication.
  • Operate LearnDash and Track Learning: Maintain course enrollment, progress tracking, quiz/assessment functionality, completion records, certificate generation, and learner support within LearnDash.
  • Credential Verification and Reporting: Verify your identity and professional credentials and, where applicable, report course completions to the Behavior Analyst Certification Board (BACB®), Qualified Applied Behavior Analysis Credentialing Board (QABA®), and International Behavior Analysis Organization (IBAO®).
  • Payment Processing: Process transactions and send purchase confirmations/receipts via our third-party payment processors.
  • Communications: Provide customer support, respond to inquiries, and send administrative messages (e.g., account notices, policy updates).
  • Marketing (Where Permitted): Send newsletters and marketing communications (you can opt out at any time using the unsubscribe link or by contacting us).
  • Improve and Secure the Platform: Analyze usage, troubleshoot issues, prevent fraud, protect accounts, and improve Site functionality and course experience.
  • HIPAA/FERPA Context (Training Records): Maintain training-related records (e.g., completion status and certificates) in a manner intended to support organizations and learners operating under HIPAA and/or FERPA requirements, where relevant to the training context.

3. SHARING YOUR INFORMATION

We do not sell your personal information. We share your data only in the following circumstances:

  • Credentialing Boards: We share completion and related reporting data with BACB®, QABA®, and IBAO® to ensure you receive proper credit for your professional development.
  • Service Providers (Limited and Necessary): We share data with third-party vendors who help us operate our Site and Services (e.g., website hosting, LMS/website maintenance including LearnDash-related services, email delivery, analytics, and customer support tools). These providers are permitted to use Personal Information only to perform services for us.
  • Payment Processors: Payments are processed by third-party processors such as Stripe and PayPal under their own privacy policies. We receive limited information necessary to confirm and reconcile your transaction.
  • Business Partners (Cohorts/Organizations): If you are part of a cohort through your employer, school, or an ABA organization, we may share limited progress or completion reports with that organization as needed for cohort administration, verification, or reimbursement (as applicable).
  • Legal Requirements: We may disclose information if required by law, subpoena, or to protect the safety and rights of OTB Learning Group, LLC, our learners, and the public.

4. DATA SECURITY AND RETENTION

We implement robust administrative, technical, and physical security measures to protect your Personal Information. However, no electronic transmission over the Internet is 100% secure.

Data Retention

We keep Personal Information for as long as your account is active or as needed to provide the Services, including delivering courses, maintaining learning records, and providing customer support.

We may retain certain information for longer periods where necessary for legitimate business purposes and legal/compliance reasons, such as:

  • Credentialing board reporting/audits: We retain professional training records for as long as required by the respective credentialing boards (often up to 7 years) to ensure you can verify your CEUs/PDUs for audits.
  • Security and fraud prevention: To protect the Site, our learners, and our business.
  • Tax/accounting and dispute resolution: To comply with financial recordkeeping obligations and resolve issues.

When we no longer need Personal Information for the purposes described in this policy, we will take reasonable steps to delete it or de-identify it, unless we are required or permitted by law to keep it.

5. INTERNATIONAL TRANSFERS & RIGHTS (GDPR/UK GDPR)

OTB Learning Group, LLC is based in the United States. By using our Site, you acknowledge that your information will be transferred to and processed in the U.S. (and potentially other locations where our service providers operate). Data protection laws in the U.S. may differ from those in your jurisdiction.

For Users in the European Economic Area (EEA) and United Kingdom:

Under the GDPR (EEA) and UK GDPR (United Kingdom), you may have the following rights, subject to applicable law and exceptions:

  • Access/Portability: The right to request access to, and copies of, your personal data and (where applicable) receive it in a portable format.
  • Rectification: The right to request that we correct inaccurate or incomplete information.
  • Erasure: The right to request that we erase your personal data (subject to legitimate interests and record-keeping requirements, including credentialing board and audit-related requirements).
  • Restriction/Objection: The right to restrict or object to certain processing, including certain direct marketing.
  • Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise these rights, please contact us at the email provided below.

6. U.S. STATE SPECIFIC PRIVACY RIGHTS (INCLUDING CALIFORNIA, FLORIDA, AND OTHER STATES)

Depending on where you live, you may have certain rights regarding your Personal Information. These rights may vary by state and may be subject to verification, exceptions, and limitations under applicable law.

A. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to:

  • Know/Access: Request disclosure of the categories and specific pieces of personal information we collected about you, the categories of sources, our business purposes, and the categories of third parties we disclose it to.
  • Delete: Request deletion of certain Personal Information (subject to exceptions, including security, fraud prevention, and credentialing/audit record-keeping).
  • Correct: Request correction of inaccurate Personal Information.
  • Opt Out of “Sale” / “Sharing”: Opt out of the “sale” or “sharing” of personal information as defined by California law.
  • Limit Use/Disclosure of Sensitive Personal Information: To the extent applicable, request limitations on certain uses/disclosures of sensitive personal information (note: we do not intentionally collect sensitive personal information such as Social Security numbers, precise geolocation, or PHI through the Services).
  • Non-Discrimination: Not be discriminated against for exercising your rights.

Do Not Sell/Share: OTB Learning Group, LLC does not sell Personal Information for monetary value. If we engage in activities that are considered “sharing” under California law (for example, certain analytics/advertising cookies), you may request to opt out by contacting us using the information in the “Contact Us” section.

B. “Shine the Light” (California Civil Code §1798.83)

California residents may request certain information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes in a way that would trigger Shine the Light obligations. If you would still like to make a request, contact us using the information in the “Contact Us” section and include “Shine the Light Request” in your message.

C. Florida Privacy Rights

Florida does not currently provide a broad consumer privacy law with the same scope as California’s CCPA/CPRA for general consumer data. However, Florida residents may still contact us to request to review, update, or delete certain information we hold about them, and we will respond consistent with applicable law, our legitimate business needs (including credentialing and audit requirements), and this Privacy Policy.

D. Other U.S. State Privacy Laws

If you live in a state that has enacted a comprehensive privacy law (for example, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or other states as they become effective), you may have rights such as:

  • Access/Confirm: Confirm whether we process your personal data and access it.
  • Correct: Correct inaccuracies in your personal data.
  • Delete: Delete personal data you provided to us or that we obtained about you (subject to exceptions).
  • Portability: Obtain a copy of your personal data in a portable format.
  • Opt Out: Opt out of certain processing, such as targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (as applicable).

We do not “sell” personal information for money. If you would like to make a state privacy request, please contact us as described in Section 10.

E. How to Submit a U.S. State Privacy Request (and How We Verify)

To submit a request, email us using the contact information in Section 10. Please include:

  • Your full name
  • The email address associated with your account
  • The type of request (access, delete, correct, portability, opt out, etc.)
  • Sufficient information for us to verify your identity

We may need to verify your identity before processing certain requests. If you have an account, we may verify you through account access and/or by confirming details associated with your account. If you are submitting a request on behalf of someone else, we may require proof of authorization.

F. Authorized Agents (California and Certain States)

Where permitted by law, you may use an authorized agent to submit a request on your behalf. We may require proof that the agent is authorized to act for you and may also require you to verify your identity directly with us.

G. Appeals (Certain States)

If a state privacy law provides you the right to appeal our decision on a request, you may request an appeal by replying to our response email and stating that you would like to appeal the decision. We will review and respond within the timeframe required by applicable law.

7. CHILDREN’S PRIVACY

Our Services are intended for professionals and adults seeking vocational training. We do not knowingly collect information from individuals under the age of 18.

8. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our training methods or legal requirements. We will notify you of any material changes by posting the new policy on this page with an updated “Effective Date.”

9. GOVERNING LAW

This Privacy Policy and any disputes related to it shall be governed by the laws of the State of Florida, without regard to conflict of law principles. Any legal actions shall be brought exclusively in the state or federal courts located in Broward County, Florida.

10. CONTACT US

If you have questions about this Privacy Policy or how we handle your data, or if you would like to review, update, access, or delete your Personal Information, please contact us. If you have an account, you may also be able to review and update certain account details by logging into your account profile area.

Outside the Box Trainings (OTB Learning Group, LLC)
Address: 1314 E Las Olas Blvd, Unit #2886, Fort Lauderdale, FL 33301
Phone: 954-866-1430
Email:Hello@OTBLearningGroup.com
Website: www.outsidetheboxtrainings.com