Terms & Conditions
These Terms govern your access to and use of Global CT Institute (“GCTI”) websites, portals, courses, services, digital products, events, and related offerings (collectively, the “Services”). By using the Services, you agree to these Terms.
Effective date: 2026-02-01   •   Last updated: 2026-02-01
Important
This page is informational and not legal advice. If you require a legally tailored version (jurisdiction-specific), consult qualified counsel. Your use of the Services must comply with all applicable laws and regulations.
1. Eligibility, accounts, and access
  • •You must provide accurate information and maintain the security of your account credentials.
  • •You are responsible for activity under your account, including safeguarding passwords and MFA where enabled.
  • •Access to certain content, communities, and courses may require registration via the client portal or student portal.
  • •We may suspend or terminate access for violations of these Terms, security risk, or unlawful activity.
Client Portal: portal.globalctinstitute.org   •   Student Portal: students.globalctinstitute.org
2. Acceptable use
You agree not to misuse the Services. Prohibited activity includes:
  • •Attempting unauthorized access, scanning, exploitation, or disruption of systems.
  • •Uploading malicious code, malware, or engaging in phishing, fraud, or social engineering.
  • •Interfering with platform integrity, availability, or confidentiality.
  • •Using content for unlawful surveillance, harassment, or harmful activity.
Security research and lab activity must follow defined scopes and written authorization.
3. Cybersecurity and compliance posture
GCTI operates security and compliance programs designed to protect learners, staff, partners, and systems. Our approach emphasizes defense-in-depth, least privilege, auditable operations, and responsible disclosure.

Security controls (high level)

Controls are implemented and continuously improved based on risk and operational requirements.
  • •Identity & access management (role-based access, least privilege, MFA where supported)
  • •Secure configurations and hardening for systems supporting learning and communications
  • •Logging, monitoring, and anomaly detection for critical services
  • •Vulnerability management and patching processes
  • •Secure development practices for web content and platform integrations
  • •Incident response procedures and escalation paths

Compliance approach

We align practices to widely recognized global standards and best practices, as applicable to our services and risk profile.
  • •Information security management practices aligned to ISO/IEC 27001 principles
  • •Privacy and data protection practices aligned to GDPR concepts (lawful basis, minimization, rights)
  • •Security controls informed by NIST Cybersecurity Framework and NIST control guidance (as applicable)
  • •Vendor and service provider risk considerations for key integrations
Note: Specific certifications/compliance attestations may vary by service and are not implied unless expressly stated in writing.
4. Data protection and privacy
We collect and process data to operate the Services, support learning, fulfill admissions and enrollment workflows, improve experience, meet legal obligations, and maintain security.

What we may collect

  • •Account and contact data (name, email, phone, organization, profile details)
  • •Academic/learning data (course activity, progress, submissions)
  • •Operational logs (IP, device/browser signals, access logs) for security and reliability
  • •Admissions documents you choose to upload (e.g., transcripts/ID) when required for verification

How we protect data

  • •Access controls and least-privilege administration for sensitive workflows
  • •Encryption in transit (HTTPS/TLS) for supported services
  • •Retention practices designed to keep data only as long as needed for operations and legal obligations
  • •Incident response procedures for suspected unauthorized access
If you believe your account or data may be at risk, contact helpdesk@globalctinstitute.org.
International use
If you access the Services internationally, your data may be processed in jurisdictions where our systems or providers operate. We apply appropriate safeguards consistent with applicable data protection laws and recognized global standards.
5. Purchases, payments, and access
  • •Purchases may be processed through third-party platforms (e.g., storefront funnels) and are subject to their terms.
  • •Digital products and course access may be delivered electronically and may require portal registration.
  • •Refund and cancellation policies (if offered) are described at checkout or in written program materials.
6. Intellectual property
  • •All content, trademarks, curricula, and materials are owned by GCTI or licensed to GCTI unless stated otherwise.
  • •You may not copy, distribute, or publicly display materials except as expressly permitted.
  • •Limited permission is granted for personal, non-transferable use within the Services.
7. Disclaimers and limitation of liability
Services are provided “as is” and “as available.” To the maximum extent permitted by law, GCTI disclaims warranties of merchantability, fitness for a particular purpose, and non-infringement. GCTI is not liable for indirect, incidental, special, consequential, or punitive damages, or any loss of data, profits, or revenues, arising from your use of the Services, except where such limitations are prohibited by law.
8. Suspension and termination
  • •We may suspend/terminate access for violations, fraud, security risk, or unlawful activity.
  • •You may stop using the Services at any time; some data may remain per retention/legal obligations.
9. Changes to these Terms
We may update these Terms periodically. Updates will be posted on this page with a revised “Last updated” date. Continued use of the Services after changes constitutes acceptance of the updated Terms.