Customers who have users enrolled on the Boxphish Learning Journey will need to provide email addresses either via CSV file or through our integration with Office 365 and all data is only kept during the time the user is enrolled. We need to keep these emails to enable the system to send the training content and then track the results. These email addresses will not be used for any other purpose apart from the explained and the addresses will not be given/sold to any third-parties for any purpose.