Privacy policy
Last updated: 3 November 2026
This policy explains how we use Personal data when you visit academy.zabbix.com or use its self-paced courses, subscriptions and exams.
The controller is Zabbix SIA, registration number 40003738045, Gustava Zemgala gatve 74, Riga, LV-1039, Latvia. Contact us at legal@zabbix.com
1. Key terms
In this policy:
- Academy means the Zabbix Academy website at academy.zabbix.com and the self-paced courses, subscriptions and exams available through it;
- Customer means either (i) a legal entity which intends to purchase training services via Academy for its personnel, or (ii) an individual, which intends to purchase training services via Academy only for its business purposes and does not qualify as a “consumer”;
- Participant means either (i) Customer’s personnel using training services via Academy, or (ii) Customer using training services as an individual;
- Personal data means information about a person who can be identified, directly or indirectly. Examples include your name, account email address and learning records linked to you;
- Processing means anything done with Personal data, including collecting, storing, using, sharing or deleting it;
- Controller means the organisation that decides why and how Personal data is processed. For Academy, this is Zabbix SIA, referred to in this policy as we, us or our;
- Processor means a person or organisation that processes Personal data on a Controller’s behalf;
- Consent means a freely made, specific and informed choice, expressed through a clear statement or action, agreeing to a particular use of your Personal data. You can withdraw it at any time;
- GDPR means the EU General Data Protection Regulation, Regulation (EU) 2016/679;
- EEA means the European Economic Area: the EU Member States, Iceland, Liechtenstein and Norway.
2. What we collect
Depending on how you use Academy, we collect:
- Account and contact details, such as your name, email address, company affiliation and login details;
- Order, subscription, billing and payment transaction information;
- Learning records linked to your account, including course activity, video progress, exam answers, scores, attempts and certificates;
- Messages you send us and course feedback;
- Technical information, such as IP address, browser and device information, website activity and cookie preferences;
- Marketing preferences, including records of your consent and unsubscribe requests.
We receive Personal data directly from you and through your use of Academy. Where a Customer purchases training for its personnel, the Customer provides us with your name, work email and company affiliation to arrange your enrolment. You then create your own Academy account and accept the Academy Terms and Conditions. Your subsequent use of Academy is governed by this Privacy Policy in the same way as for other Participants.
Payments are processed by payment service provider Stripe. We do not receive or store your full payment-card number. Stripe makes limited card details available to us, including the card brand, last four digits and expiry date, to help us identify your payment method and manage billing.
We receive and retain:
- Stripe customer and subscription IDs;
- Subscription status, plan, renewal and cancellation dates;
- Purchase history, including amounts, currencies, dates and items purchased;
- Billing country and, where needed, postal code, together with the tax evidence required to apply the correct VAT.
For information about how Stripe handles Personal data, see Stripe’s Privacy Policy.
Required fields are marked when we collect information. Without the information needed for registration, payment or training, we may be unable to provide the relevant service.
3. Why we use your data
| Purpose | Legal basis |
|---|---|
| Manage your account, orders, subscriptions, training, exams, certificates and related support | Performance of our contract with you (Article 6(1)(b) GDPR). Where a Customer purchased your access and we process your data to deliver that training and to report on it to that Customer, our legitimate interest in performing our contract with the Customer and delivering training to its personnel (Article 6(1)(f) GDPR). |
| Meet accounting, tax and applicable sanctions requirements | Compliance with legal obligations (Article 6(1)(c) GDPR). |
| Protect Academy, prevent misuse and handle legal claims | Our legitimate interest in protecting our services, users and legal rights (Article 6(1)(f) GDPR). |
| Evaluate course feedback and improve training | Our legitimate interest in maintaining and improving training quality (Article 6(1)(f) GDPR). |
| Send optional marketing emails | Your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time without affecting your training. |
| Verify the authenticity of your certificate and maintain the integrity of Zabbix exams and certification | Our legitimate interest in preserving the integrity and credibility of Zabbix training and certification (Article 6(1)(f) GDPR). |
| Use cookies and similar technologies on Academy | Strictly necessary cookies: our legitimate interest in operating Academy and providing the service you request (Article 6(1)(f) GDPR). Optional analytics and marketing cookies: your consent (Article 6(1)(a) GDPR). |
Exam scores are calculated automatically by comparing your selected answers with predefined correct answers, using the scoring criteria described in the Academy Terms and Conditions. Your score determines whether you receive a Certificate of Completion. Contact training@zabbix.com with questions about your result.
4. Who receives your data
We share relevant Personal data with service providers that help us operate Academy and deliver its services, including:
- LearnWorlds, which provides and hosts the Academy learning platform and processes Personal data on our behalf to manage accounts, deliver courses and exams, and maintain learning records, under a Data Processing Agreement.
- Stripe, which processes payments and supports billing and subscription management.
Service providers processing Personal data on our behalf act under our instructions and appropriate data processing agreements. Stripe also processes certain Personal data as an independent controller, including for fraud prevention and compliance with legal obligations. For more information, see Stripe’s Privacy Policy.
Academy platform data is hosted in Ireland. LearnWorlds uses authorised subprocessors to provide its services, some of which are located outside the EEA, including in the United States.
Where we or our service providers transfer Personal data outside the EEA, such transfers are made in accordance with Chapter V of the GDPR, relying on an applicable European Commission adequacy decision, including the EU-US Data Privacy Framework for certified recipients, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You can request further information about these safeguards, including a copy where applicable, by contacting legal@zabbix.com
5. How long we keep data
We retain Personal data for the following periods or according to the criteria below:
- Account and learning records: while your account remains active and the records are needed to provide your training. After account closure, we retain only the records needed for the purposes described below.
- Exam and certificate records: we retain a limited record of your identity, course completion, exam result and certificate details for as long as needed to verify your achievement and the authenticity of your certificate. We periodically review whether continued retention remains necessary. Detailed exam answers and activity records are retained only for as long as needed to administer assessments and resolve questions or appeals.
- Invoices and accounting records: for the periods required by applicable accounting and tax laws. These include a minimum of five years for invoices and other supporting accounting documents, and longer periods where required.
- Support messages: for two years after the relevant request is closed, to handle follow-up questions and complaints.
- Marketing data: until you withdraw your consent or unsubscribe, after which we keep only the minimum needed to honour your opt-out and evidence your consent history.
- Cookies: for the lifetimes stated in our Cookie Policy.
Specific records may be retained longer where necessary to investigate an incident or establish, exercise or defend legal claims. Once the applicable retention period or purpose ends, we delete or anonymise the data. Closing your account does not automatically delete records retained for these purposes.
6. Cookies
Academy uses cookies and similar technologies to operate the website and support its features. Strictly necessary cookies enable functions such as signing in, maintaining your session and processing payments.
Where optional cookies are used, including for analytics or marketing, we ask for your consent before placing them. You can manage or withdraw your consent through the cookie settings.
For details about cookie categories, providers, purposes, lifetimes and available controls, please see our Cookie Policy.
7. Security
We use technical and organisational measures appropriate to the risks to protect Personal data against unauthorised access, disclosure, alteration and loss. Access is limited to authorised people who need it for their work.
Keep your account credentials confidential. If you suspect unauthorised access, contact training@zabbix.com. Please do not email passwords or full payment-card details.
8. Your rights
Subject to the conditions set out in the GDPR, you have the right to:
- Access your data: obtain confirmation of whether we process your Personal data and receive a copy of it.
- Correct your data: request correction of inaccurate data or completion of incomplete data.
- Request deletion: ask us to delete your Personal data where the conditions for erasure apply.
- Restrict processing: ask us to limit how we use your Personal data in certain circumstances.
- Receive and transfer your data: obtain eligible data in a structured, commonly used and machine-readable format and, where technically feasible, have it transferred to another controller.
- Object to processing: object, on grounds relating to your particular situation, to processing based on legitimate interests. You can object to direct marketing at any time.
- Withdraw consent: withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact legal@zabbix.com. We may request additional information where reasonably necessary to verify your identity. Requests are generally handled free of charge. We respond without undue delay and within the time limits required by applicable data protection law.
You also have the right to lodge a complaint with Latvia’s Data State Inspectorate at www.dvi.gov.lv or another competent data protection authority, for example in the EU Member State of your habitual residence or place of work. Depending on where you are located, other data protection laws may give you additional or equivalent rights, which we will respect
9. Changes
We may update this policy and will show the latest revision date here. We will notify you of significant changes by email or a prominent notice on Academy where appropriate. If a new use of your data requires consent, we will ask for it separately.
