Privacy Policy

1. Overview

LushLoom Guild provides online knitting courses. This Privacy Policy describes what personal data we collect, how we use it, and your choices.

2. Data we collect

• Account data: name, email, password hash.
• Transaction data: purchased courses, billing address (processed by payment partners), and order identifiers.
• Usage data: pages visited, device and browser type, approximate location, and course progress analytics.
• Communications: messages sent via contact forms or support email.

3. How we use data

• Provide and improve courses and features.
• Authenticate users and secure accounts.
• Process orders, refunds, and support requests.
• Send service emails (receipts, progress reminders). Marketing messages only with your consent.

4. Cookies and tracking

We use essential cookies for session management and preferences (including theme and cookie consent). Analytics cookies help us understand feature usage. You can control non-essential cookies via your browser settings.

5. Legal bases

Under GDPR, we rely on contract performance, legitimate interests (e.g., service improvement, fraud prevention), and your consent where required.

6. Sharing

We share personal data with vendors that help deliver our service (e.g., payment processors, cloud hosting). We require them to safeguard data and use it only for our instructions. We do not sell personal data.

7. Data retention

We keep account and transaction records for as long as necessary to provide services and meet legal obligations. You may request deletion of your account, subject to lawful retention requirements.

8. Your rights

• Access, correction, deletion, and portability of your personal data.
• Objection to processing and restriction of processing under certain circumstances.
• Withdrawal of consent where processing is based on consent.

9. International transfers

If data is transferred across borders, we use appropriate safeguards such as standard contractual clauses.

10. Children’s privacy

Our courses are for adults and teens aged 13+. We do not knowingly collect data from children under 13.

11. Security

We use technical and organizational measures including encryption in transit, access controls, and periodic audits. No method is 100% secure; please use strong passwords and keep them confidential.

12. Contact

For privacy requests, email [email protected] or call +1 (415) 555-0198.

13. Changes

We may update this policy. Material changes will be posted with notice. Your continued use after changes indicates acceptance.