Skip to content

Legal

Privacy Policy

Last updated: October 31, 2026. This is a template — adapt it to your jurisdiction (GDPR, CCPA, etc.) with legal review.

What we collect

  • Account data: email address, name and password hash when you register or purchase.
  • Order data: what you bought, when, the amount and Stripe transaction identifiers. Card details are processed by Stripe and never reach our servers.
  • Newsletter data: email, first name, the consent text you agreed to, your IP address and the time of consent.
  • Usage data: lesson progress, download logs (including IP address) and standard server logs for security.
  • Analytics: if enabled, Google Analytics collects anonymised usage statistics.

How we use it

To deliver the products you buy, provide member access, send transactional emails (receipts, access links, password resets), send the marketing emails you opted into, prevent fraud and abuse, and improve the Site.

Legal basis (EU/UK)

Contract performance (purchases and access), consent (newsletter and marketing), and legitimate interests (security and fraud prevention).

Sharing

We share data only with processors needed to run the service: Stripe (payments), our email delivery provider, our hosting/storage providers and, if enabled, our email marketing platform. We never sell your personal data.

Your rights

You can access, correct or delete your data, withdraw consent, and unsubscribe from marketing at any time using the link in every email or by contacting support@example.com.

Retention

Order records are kept for as long as required by tax law. Newsletter data is kept until you unsubscribe. Account data is kept while your account is active.

Cookies

We use strictly necessary cookies for login sessions and CSRF protection, and analytics cookies only if analytics is enabled.