Draft — pending legal review.
Privacy Policy
This policy explains what personal data [Company legal name] ("Self Studio", "we") collects when you use this website and buy our courses, and how we use it.
What we collect
- Name, email address and phone number you enter in our form, and when you accepted our Terms.
- Order details: product, amount, currency and payment status. Card details are handled by Stripe; we never see or store them. Stripe keeps your card on file so you can add optional courses with one click right after purchase.
- Course usage: when you open the course and lessons, lessons you mark complete, your browser's user-agent and a one-way hash of your IP address.
- Your quiz answers, if you take our quiz.
- On your device only: your course link, so the installed app can open it, and whether you closed the install hint. The app caches the site's design files for offline use, never your course pages or videos.
- Emails we sent you and whether they were delivered, and your unsubscribe choice.
- If you accept cookies in our banner: the Meta Pixel and its advertising identifiers (the
_fbpand_fbccookies), and the ad click and campaign tags from the link you arrived by (gclid,fbclid,utm_*and similar) in thesst_click_idscookie for 90 days. Your choice is stored in thesst_consentcookie and can be changed via "Cookie settings".
Why we use it
- To process your order and give you access to the course (performance of a contract).
- To send emails about your purchase and the course, including a reminder if you haven't started. You can unsubscribe from reminders in any email.
- To keep a record that the course was delivered and used, for example when resolving payment disputes (legitimate interest).
- To prevent abuse of our forms, using short-lived, hashed counters (legitimate interest).
- Only with your optional marketing consent (a separate, unticked checkbox): to share hashed contact details and order events with Meta, to link your order to the ad or campaign you came from, and to send you follow-up emails if you didn't complete your purchase. You can buy the course without giving it.
Who we share it with
- Stripe — payment processing.
- Neon — database hosting.
- Resend — sending emails.
- Our hosting provider — running the website.
- Our email automation tool (n8n), if used — order and follow-up emails.
- Meta Platforms — advertising measurement, only with your consent. Email and phone are hashed (SHA-256) before sending.
We do not sell your personal data.
How long we keep it
Order and access records are kept for [retention period] to meet accounting and legal obligations. Marketing data is deleted when you withdraw consent. Anti-abuse counters are deleted after one day.
Your rights
You can ask to access, correct, delete or export your data, object to processing, or withdraw consent at any time by emailing [privacy contact email]. You may also complain to your local data protection authority.
Contact
[Company legal name], [Registered address], company no. [Company registration number].
Support: [support email]. Privacy: [privacy contact email].
Last updated: [date].