1. What this policy covers
Direct MCLE provides online continuing legal education for attorneys. This policy explains what personal information we collect through directmcle.com and our course platform, why we collect it, who we share it with, and the choices you have. The California MCLE provider for our courses is Margaret Leslie Davis (Provider No. 21040).
2. Information we collect
- Account information: your name, email address, and a password. We store your password only as a one-way cryptographic hash, never in readable form.
- Bar information: the jurisdiction(s) where you are licensed and your bar number, plus your compliance group and compliance deadline if you choose to give them. We need your bar number to record your credit and issue your certificate.
- Course activity: which modules you open, how far you have watched, when you complete them, and your responses to attention checks (when each was shown and when you answered). State Bar rules require MCLE providers to verify completion; these records are how we do it.
- Certificates and evaluations: the certificates we issue to you and, when we offer it, your answers on the course evaluation form.
- Payment information: purchases are handled by our payment processor, Lemon Squeezy. We receive your name, email address, order details and payment status. We never receive or store your full payment card number.
- Technical information: your IP address, browser and device type, and request logs, collected automatically for security, fraud prevention and troubleshooting.
- Messages: anything you send to our support team.
3. How we use it
- To create and manage your account and provide the courses you buy.
- To verify that you completed a course, award credit, and issue your certificate.
- To keep the records the State Bar of California requires of MCLE providers, and to provide them to the State Bar when it requires or requests them.
- To process payments and refunds and to send transactional emails such as enrollment confirmations, certificates and password resets.
- To protect the service from fraud, account sharing, and tampering with progress tracking.
- To answer your questions, fix problems, and comply with the law.
We do not use your information for advertising, and we will not add you to a marketing email list without your consent.
4. Who we share it with
- Service providers who process information for us: Lemon Squeezy (payments); Cloudflare (video streaming, content delivery and security); our cloud hosting and storage providers; and an email delivery provider. They may use your information only to provide their services to us.
- The State Bar of California, when its rules require or it requests attendance or completion information, for example in an audit.
- Authorities and others as the law requires, such as in response to a valid subpoena or court order, or to protect rights, safety and security.
- A successor, if Direct MCLE is ever merged with or acquired by another business. We would tell you first if this changed how your information is handled.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. How long we keep it
- Compliance records (your completion record, credit details and certificate) are kept for at least four years after completion, in line with the record-keeping the State Bar expects of providers. We keep them even if you close your account or receive a refund, because they document credit you earned.
- Course evaluation forms are kept for at least one year.
- Account information is kept while your account is open. If you ask us to delete your account, we remove what we are not required to keep.
- Backups are kept on a rolling schedule, and backups of compliance records are kept longer for the same legal reason. Information deleted from our live systems can therefore remain in backups for a limited time before it ages out.
6. Your California privacy rights
If you are a California resident, you can ask us to tell you what personal information we have about you and how we use it, to correct information that is wrong, and to delete your information. Deletion has limits: we cannot delete records we are legally required to keep, such as the compliance records described above. We will not treat you differently for exercising these rights. Because we do not sell or share personal information for advertising, there is nothing to opt out of.
To make a request, email support@directmcle.com from the address on your account. We may need to confirm your identity, and we aim to respond within 45 days. Nothing in this policy limits rights you have under California law.
7. Cookies
Our course platform uses one cookie: a session cookie that keeps you signed in and is cleared when you close your browser. We do not use advertising or analytics cookies. Cloudflare may set cookies of its own that are needed to protect the site from abuse. If we ever add analytics, we will update this policy first.
8. Security
We protect your information with encryption in transit (HTTPS), hashed passwords, restricted access to the systems that hold personal information, regular backups and software updates. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it private.
9. Client confidentiality
Our courses teach you how to use AI tools with your own documents. You never need to send client or case information to us, and we ask that you do not include confidential client information in messages to support.
10. Children
Our courses are for licensed attorneys and are not directed to children under 18. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed, and we will notify account holders by email of any material change.
12. Contact us
Questions or requests about your privacy: support@directmcle.com.