Data Protection

We process personal data to deliver courses, operate labs, respond to inquiries, and improve our services. Processing may include identity and contact details, professional information, billing records where applicable, technical logs from lab access, and communications you send us. We rely on performance of a contract, legitimate interests balanced against your rights, and consent where required—for example, for non-essential cookies as described in our Cookie Notice.

For privacy questions, contact contact@first-rate.one. You may also write to our postal address listed on the website footer. We aim to acknowledge requests within five business days and resolve straightforward requests within thirty days, subject to complexity and legal holds.

This notice applies to personal data collected through first-rate.one and related learning properties operated by ClusterForge Academy. It does not cover third-party sites linked for convenience. If you participate through an employer, both your organization and we may act as independent controllers for different elements of your profile; your HR team can clarify enterprise arrangements.

We use infrastructure and communications providers to host content, send transactional email, and monitor reliability. Processors are bound by written agreements requiring appropriate safeguards. We do not sell personal data. Where data is transferred outside Korea, we implement measures such as standard contractual clauses or equivalent mechanisms when required.

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to certain processing. You may withdraw consent for optional processing without affecting the lawfulness of earlier processing. You may lodge a complaint with the Personal Information Protection Commission or another competent authority. We will verify requests to protect account security.

We retain enrollment records and billing evidence for periods required by tax and commercial law in Korea. Lab telemetry needed for abuse prevention may be retained in short rolling windows. Marketing preferences are stored until you withdraw consent. Anonymized analytics may be retained longer where no individual identification is reasonably possible.

Categories include identifiers (name, email), professional context (role, employer name if supplied), account credentials stored as salted hashes, payment references processed by our payment partners where applicable, support ticket content, and technical identifiers such as IP addresses during active sessions. We avoid collecting sensitive categories unless strictly necessary and lawful.

We apply administrative, technical, and organizational measures including access controls, encryption in transit for authenticated areas, vulnerability management, and staff training. No method of transmission is perfectly secure; please use unique passwords and enable available protections on your devices.

Our services target working professionals and are not directed to children under 14. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will take appropriate steps to delete it, subject to legal retention duties.