Privacy Policy
Last updated: 2025-12-19
Controller
Dr Sarah Courses is the data controller. Contact: privacy@example.com.
What we collect
- Account data: name, email, password hash.
- Transaction data: items purchased, currency, totals, timestamps.
- Usage data: pages viewed, device/browser metadata, IP.
- Support data: messages you send us.
Why we collect it
- Provide and secure the service.
- Process payments and deliver digital content.
- Comply with legal obligations (invoicing, tax).
- Improve courses, books, and site experience.
Legal bases (GDPR)
- Contract: to create your account and deliver purchases.
- Legitimate interests: analytics, preventing abuse.
- Consent: marketing emails where required.
- Legal obligation: records retention, fraud prevention.
Sharing
We share data with processors needed to run the service (hosting, payment, email). We require contracts and only necessary processing.
International transfers
When data leaves your jurisdiction, we use appropriate safeguards where legally required.
Retention
Account and transaction records are kept as long as needed to provide the service and meet legal requirements. You can request deletion of your account where feasible.
Your rights
- Access, rectification, erasure, restriction, portability, and objection.
- Withdraw consent for marketing at any time.
- Lodge a complaint with your data protection authority.
Cookies
We use cookies for session, security, and analytics. You can control cookies via your browser. Essential cookies are required for login and checkout.
Children
The service is not directed to children under 13 (or as defined by your jurisdiction). Do not create an account if you are under the applicable age.
Changes
We may update this policy. Continued use after changes means you accept the updated policy.
Contact
Email: privacy@example.com