Privacy Notice

Last updated: July 30th, 2026

1. Who we are

Corbel LMS (“Corbel,” “we,” “us,” or “our”) is a compliance-training learning management system and a product of Spandrel Interactive. The organization responsible for your information under this notice is Spandrel Interactive Inc., located at 50 Crowther Lane, Suite 140, Fredericton, New Brunswick E3C 0J1, Canada.

Corbel LMS is built on the open-source Moodle learning platform, which we host and manage on Canadian infrastructure, and it connects with SafeSimXR for simulation-based training. This notice explains how we handle personal information collected through this website and the Corbel LMS service.

2. Our role: when we are a controller vs. a processor

Our responsibilities depend on how your information reaches us:

• As a controller. When you visit this website or submit a demo request, we decide how and why your information is used, and this notice applies directly to you.
• As a processor / service provider. When an organization uses Corbel LMS to deliver training, the learner and course records processed inside the platform are handled on that organization's behalf and under its instructions. In that case, the organization is the controller and its own privacy policy governs that data. If you are a learner and have questions about your training records, please contact your organization's administrator. We make the platform's privacy tools available to support those requests.

3. Information we collect

Information you provide

• Demo and contact requests. When you request a demo or contact us, we collect the details you enter: your name, company name, work email, role, and a description of your current training setup.
• Account information (for users of the platform): name, email, credentials, and profile details, which may be provided by you or by your organization.
• Communications. Messages, support requests, and any information you choose to share with us.

Information collected automatically

• Technical and usage data. Our servers and infrastructure providers may log standard technical data such as IP address, browser and device type, and pages viewed, for security, diagnostics, and to keep the service running.
• Cookies. A small number of cookies as described in section 6.

Information within the LMS

• Training and learning records (course progress, assessment results, certifications, and simulation/XR performance via SafeSimXR) are processed on behalf of the organization delivering the training, as described in section 2.

4. How we use your information

• To respond to demo requests and communicate with you about Corbel LMS.
• To provide, operate, secure, maintain, and improve this website and the Corbel LMS service.
• To provide support and respond to your enquiries.
• With your consent, to send marketing communications you can opt out of at any time.
• To meet our legal, regulatory, and contractual obligations.

We do not sell your personal information, and we have no intention of doing so.

5. Legal bases for processing

Where applicable privacy law requires a legal basis, we rely on one or more of the following: your consent (for example, optional cookies and marketing); performance of a contract (to provide the service you or your organization requested); our legitimate interests (such as securing and improving the service, and responding to enquiries), balanced against your rights; and compliance with a legal obligation. In Canada, we handle personal information in accordance with PIPEDA and any applicable provincial privacy legislation.

6. Cookies, analytics, and advertising boundary

By default, this website sets only strictly necessary cookies — including one that stores your cookie-preference choice so we do not have to ask again. Any analytics or marketing cookies are loaded only if you consent to them, and you can review or change your choices at any time using the Manage Cookies control, which is also available in the site footer.

Advertising and analytics boundary. Any analytics we use are limited to this public marketing website. The Corbel LMS product itself does not run advertising or remarketing, and we do not use learner activity inside the platform for advertising purposes.

7. How we share your information

We share information only with service providers (subprocessors) who help us operate the site and deliver the service, under agreements that require them to protect it and to use it only for the services they provide to us — and where required by law. Our providers include:

Provider / category	Purpose
Amazon Web Services (AWS) — Canada (Central), ca-central-1	Canadian-hosted platform and website hosting, backups, security.
Moodle platform	Underlying learning management system that Corbel LMS runs on.
SafeSimXR	Simulation/XR training performance records integrated into the platform.
HubSpot	CRM — receiving and managing demo requests submitted through this site.
Google Workspace (Google LLC)	Business email — responding to enquiries and sending requested communications.

A current list of subprocessors is available on request. We do not sell or rent your personal information.

8. Where your data is stored & international transfers

Production data and backups are hosted on Amazon Web Services (AWS) in the Canada (Central) region (ca-central-1) to support data residency for Canadian organizations. Some of our service providers — such as HubSpot and Google Workspace — may process limited personal information (for example, demo-request and email data) outside Canada, including in the United States. Where personal information is transferred to or accessed from outside Canada, we put appropriate safeguards in place, such as Standard Contractual Clauses and data-processing agreements, and we take steps to ensure your information continues to be protected.

9. How long we keep your information

We keep personal information for the shortest time reasonably necessary for the purposes described in this notice, and to meet our legal, business, and contractual requirements, after which it is deleted or anonymized. Demo-request and website enquiry information is retained for up to one month after we respond to your enquiry, unless a longer period is required by law or you ask to stay in contact with us. Learning records held on behalf of an organization are retained according to that organization's instructions.

10. Your privacy rights

Subject to applicable law (including PIPEDA in Canada and, where relevant, the GDPR/UK GDPR and CCPA), you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information;
• Withdraw consent at any time (for example, for marketing or optional cookies);
• Request a copy of your information in a portable format;
• Object to, or request that we restrict, certain processing;
• Not be subject to solely automated decisions that produce significant effects; and
• Lodge a complaint with a supervisory authority (see section 15).

To make a request, contact us at contact@spandrelinteractive.com. We will respond within the timeframe required by applicable law. If your request relates to training records held on behalf of your organization, we will direct you to, or coordinate with, that organization.

11. Children's data

This website and Corbel LMS are intended for organizations and their workforce, not for children. We do not knowingly collect personal information directly from children. Where an organization uses the platform with younger learners, that organization is the controller and is responsible for obtaining any required parental or guardian consent. If you believe a child has provided us information directly, contact us and we will delete it.

12. Security

We use administrative, technical, and physical safeguards intended to protect your information, including access controls, audit logging, and encryption in transit. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.

13. Other websites

This site and the platform may link to third-party websites (for example, Spandrel Interactive, SafeSimXR, or Moodle). This notice does not cover those sites, and we encourage you to review their own privacy policies.

14. Changes to this notice

We may update this notice from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

15. How to contact us

Questions about this notice or your personal information can be sent to contact@spandrelinteractive.com.

If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Individuals in other regions may contact their local data-protection authority.

← Back to home