Effective Date: October 28, 2026
Design2Train respects the trust you place in us when purchasing training, coaching, consulting, memberships, and digital products through Design2Train.com. This policy summarizes our approach to protecting payment information and related customer records.
1. Payment Security
Payments are processed through PayPal or KURV rather than collected directly through Design2Train website forms. Payment information submitted through PayPal is handled under PayPal’s security practices and applicable terms. Payment information submitted through KURV is handled under KURV security practices and applicable terms. Design2Train does not store full payment card numbers, card security codes, or PINs on its website or in its business records. We may receive transaction details needed to confirm purchases, provide services, issue refunds, and maintain financial records. Please do not send credit card numbers or other sensitive payment information to Design2Train by email, contact form, course submission, or community message.
2. PCI DSS Responsibilities
The Payment Card Industry Data Security Standard (PCI DSS) establishes security requirements for protecting payment card information. Design2Train’s approach is to use third-party payment processing to limit its handling of sensitive card information and to address the PCI DSS responsibilities applicable to its payment arrangements. Using a third-party processor does not eliminate Design2Train’s responsibility to protect its website and manage its payment-service relationships.
3. Access and Information Protection
Access to customer and transaction information is limited to authorized individuals and service providers who need it to perform legitimate business functions. We use industry standards along with reasonable administrative and technical safeguards appropriate to our business, including account access controls, secure connections, and maintenance of website software and services.
4. Information Retention
We retain customer and transaction records only as needed to deliver services, support customers, maintain business records, resolve disputes, and meet applicable legal and tax obligations. When information is no longer needed, we take reasonable steps to delete or securely dispose of it. Additional information about personal-data collection and use appears in our Privacy Policy.
5. Third-Party Services
Design2Train uses third-party services to support payments, website hosting, course delivery, communications, and other business operations. We consider information security when selecting and reviewing providers and limit the information shared to what is reasonably needed for their services. Third-party providers operate under their own privacy policies, security practices, and terms.
6. Security Concerns and Incident Response
We review reported security concerns and take appropriate steps to investigate and respond. If a security incident requires notification, we will notify affected individuals and other appropriate parties as required by applicable law. No website or electronic system can guarantee complete security.
7. Policy Updates and Contact
We may update this policy as our services, technology, or requirements change. The effective date above identifies the latest revision. For payment-security questions or to report a suspected security concern, contact: Valerie K. Miller – CEO, Design2Train via Email: miller@design2train.com