Privacy Policy

You can read every article, browse courses and look at any public page without giving any personal information at all. Information is only collected when you choose to give it, by creating an account or sending a message.

There are no advertising trackers, no analytics scripts and no third-party marketing tools on this site. Nothing here is sold, rented or shared for advertising, and your information is not used to build a profile of you.

Course accounts exist so that your progress can be saved and your certificate issued. When you register with an email address and password, the following is stored:

• your name and email address
• your password, stored only as a one-way encrypted value (a bcrypt hash). The actual password is never stored and cannot be read by anyone, including Nasrin Sultana Shila
• the date you registered and the date you confirmed your email

If you sign in with Google instead, Google provides your name and email address, and no password is stored at all. Signing in tells Google that you used this site; it does not give this site access to your Gmail, contacts or files.

While you work through a course, the site records:

• which courses you are enrolled in
• which lessons you have completed, and when
• your quiz and exam attempts: the answers you chose, your score and whether you passed
• any certificate issued to you, including your name, the course title, your final score and a verification code

This exists so you can resume where you left off and so a certificate can be checked as genuine. A certificate page shows the name of the person it was issued to; those pages are excluded from search engines.

The contact form collects your name, email address, an optional phone number, the topic you select, and your message. This is stored so the enquiry is not lost, and a copy is emailed so it can be answered.

Please do not send detailed medical or clinical information about a child through this form. It is a general enquiry form on a website, not a secure clinical system. Say enough to explain what you need, and the details can be discussed properly once you are in touch.

Notes and records created during actual therapy or assessment are kept separately, under professional and clinical confidentiality obligations. They are not part of this website and are not covered by this policy.

One cookie is used: a sign-in cookie, set only after you log in, so that the site remembers you between pages. Deleting it signs you out. It carries no advertising or tracking function.

There are no analytics cookies, no advertising cookies and no third-party trackers, which is why this site shows no cookie consent banner, because there is nothing to consent to beyond the sign-in cookie needed to make logging in work.

Running a website means relying on a few specialist providers. Each handles information only in order to provide its service:

• Vercel hosts the website and keeps standard server logs, which include IP addresses and the pages requested
• Neon is the database holding accounts, course progress and contact messages, located in Singapore
• Resend delivers automated email such as verification codes and password reset links
• Vercel Blob stores images used on the site
• Google provides the site’s fonts, which means Google receives your IP address when a page loads, and handles sign-in if you choose Google

Because these providers operate internationally, information may be processed outside Bangladesh.

Account and course records are kept for as long as your account exists, so your progress and certificates remain available. Contact messages are kept until they are no longer needed and then deleted.

Verification codes and password reset links are deliberately short-lived: codes expire after 15 minutes and reset links after one hour, and both are deleted as soon as they are used.

The site is served only over an encrypted connection. Passwords are stored as bcrypt hashes, and verification codes and reset links are stored in hashed form rather than as readable values, so they cannot be reused by anyone who obtained a copy of the database.

No system can promise perfect security, and this policy does not claim otherwise. If a breach affecting your information occurs, you will be told.

Much of this work involves children, but accounts on this website are intended for adults: parents, caregivers and professionals. The site is not designed for children to register or use on their own.

Information a parent shares about their child through the contact form is treated as confidential and used only to respond to the enquiry.

You can ask at any time to:

• see what information is held about you
• correct anything inaccurate
• delete your account and its associated records
• have a contact message deleted

Send the request through the contact form and it will be dealt with. Deleting an account removes its course progress and certificates, which cannot be recovered afterwards.

If the way this site handles information changes, this page will be updated and the date at the top changed with it. Material changes affecting people with accounts will be notified by email.

Questions about this policy, or about information held about you:

Nasrin Sultana Shila, IBA
Dhaka, Bangladesh

Or use the contact page →