Last Updated: [YYYY-MM-DD]
1. Introduction
Welcome to [WEBSITE_DOMAIN] (“[WEBSITE_NAME]”, “we”, “us”, “our”). We are committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information, including where the EU/UK GDPR applies and where U.S. state privacy laws may apply.
2. Data Controller and Contact Details
Controller: [COMPANY_LEGAL_NAME]
Address: [BUSINESS_ADDRESS]
Email: [CONTACT_EMAIL]
Additional contact: [CONTACT_PHONE_OR_CONTACT_FORM_URL]
Data Protection Officer (if applicable): [DPO_EMAIL]
EU/EEA Representative (if applicable): [EU_REP_CONTACT]
3. Personal Data We Collect
Depending on how you interact with us, we may collect:
- Identifiers: name, email address, phone number, account login details.
- Transaction data: purchase history, billing details (payments are typically processed by third-party payment providers).
- Communications: messages you send us, support requests, survey responses.
- Technical/usage data: IP address, device and browser information, pages viewed, approximate location, referral URLs.
4. How We Collect Data
- Directly from you: forms, checkout, account creation, email/contact messages.
- Automatically: cookies and similar technologies when you browse our website (see Cookies section).
- From service providers: payment processors, booking systems, email/CRM platforms, analytics tools (depending on your setup).
5. Purposes of Processing
We use personal data to:
- provide and manage the Services (including access to digital content, communities, events, and support);
- process purchases and deliver what you requested;
- communicate with you (service updates, important notices, support);
- send marketing communications where permitted (you can opt out at any time);
- improve security, prevent fraud, and maintain website functionality;
- analyze website usage and improve user experience;
- comply with legal obligations and enforce our Terms.
6. Legal Bases (EU/UK GDPR, where applicable)
Where the EU/UK GDPR applies, we process personal data under one or more of the following legal bases:
- Contract: to provide the Services you request (e.g., purchases, account access).
- Consent: for optional features such as certain cookies and marketing where required.
- Legal obligation: accounting, tax, and other legal compliance.
- Legitimate interests: to operate, secure, and improve our Services (e.g., fraud prevention, basic analytics, service improvement), provided those interests are not overridden by your rights.
7. Data Sharing and Disclosures
We do not sell personal data in the traditional sense. We may share personal data with:
- Service providers (processors): hosting, email/CRM, payment processing, booking platforms, video/content delivery, analytics, customer support, automation tools, and security providers.
- Professional advisors: legal, tax, accounting where necessary.
- Authorities: when required by law or to protect rights and safety.
8. International Transfers
If personal data is transferred outside your country (including outside the EEA/UK), we use appropriate safeguards when required, such as Standard Contractual Clauses and/or transfers to organisations certified under applicable adequacy mechanisms (for example, the EU-U.S. Data Privacy Framework where applicable).
9. Data Security
We implement technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure.
10. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy. Typical criteria include: duration of your account, time needed to deliver Services, legal retention requirements (e.g., tax/accounting), and limitation periods for disputes.
11. Your Rights (EU/UK GDPR)
Where the EU/UK GDPR applies, you may have the right to access, rectification, erasure, restriction, portability, and to object (including to direct marketing). You can also withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with a supervisory authority in your country of residence or work, or where an alleged infringement occurred.
To exercise rights, contact us at [CONTACT_EMAIL] or use: [PRIVACY_REQUESTS_URL].
12. Cookies and Similar Technologies
We use cookies and similar technologies to operate the website, improve functionality, and (where enabled) measure performance and deliver relevant marketing. You can manage cookie settings through your browser and/or our cookie controls (where available). For more information, see our Cookie Policy: [COOKIE_POLICY_URL].
13. Children’s Privacy
Our Services are not directed to children under 13. If we learn we collected personal data from a child under 13, we will take steps to delete it and terminate the account where appropriate.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
15. U.S. Privacy Notice (Optional — for California and other U.S. states)
If you are a resident of certain U.S. states (including California), you may have additional rights regarding your personal information, such as the right to know/access, delete, correct (where applicable), and opt out of certain uses (such as “sale”/“sharing” or targeted advertising, depending on the law).
Categories collected: identifiers; internet/network activity; commercial information (purchases); communications; approximate location (if enabled).
Purposes: provide Services; process transactions; customer support; security; analytics; marketing (where permitted); legal compliance.
Disclosures: we disclose information to service providers (hosting, payments, email/CRM, analytics, support) and to authorities where required.
Do Not Sell or Share: If we engage in activities considered a “sale” or “sharing” under applicable law (for example, certain advertising/analytics disclosures), you may have the right to opt out. Use: [DO_NOT_SELL_OR_SHARE_URL].
To exercise U.S. privacy rights, contact [CONTACT_EMAIL] or use: [PRIVACY_REQUESTS_URL]. We may need to verify your request as required by law.
16. Contact Us
Email: [CONTACT_EMAIL]