Privacy Policy — Knitting Courses

1) Scope & who we are

This Privacy Policy explains how our knitting course platform (“we”, “us”) handles personal information when you browse our site, create an account, enroll in courses, or contact support. If you do not agree with this Policy, please do not use the service.

Applies to website pages, course areas, and communications related to the service.
Does not cover third-party websites you may reach via external links (when present).
We aim to follow common data protection principles: minimization, security, purpose limitation, and transparency.

2) What we collect

We collect only what we need to operate courses, provide access, and maintain a reliable experience. Depending on how you use the service, we may collect:

Account details: name (or display name), email address, and authentication-related identifiers.
Course usage: lessons completed, progress states, preferences, and learning interactions that help resume where you left off.
Payments: purchase confirmation and transaction metadata provided by the payment processor (we do not store full card details).
Support messages: what you send us when you request help (including email contents and attachments you provide).
Technical basics: device and browser information, approximate location derived from IP (coarse), and security logs for fraud prevention and reliability.

We do not intentionally collect sensitive categories of personal data. Please avoid sending sensitive information in support messages.

3) How we use data (purpose limitation)

We use your information to deliver the service you request and to keep the platform stable, secure, and continuously improving.

Provide access to courses, unlock purchased content, and restore course progress.
Send essential service communications (e.g., password resets, critical updates, purchase receipts).
Improve lessons and user experience using aggregated insights (e.g., which lessons are confusing).
Protect the service from spam, abuse, and fraud; maintain logs for security and troubleshooting.
Respect your preferences such as theme settings and cookie consent choices.

We do not sell personal data. If we ever add optional marketing communications, they will be clearly described and easy to opt out from.

4) Cookies & local storage

We use cookies and similar storage technologies to keep sessions working, store preferences, and remember consent choices. For example, we store your theme selection and whether you accepted cookies.

Essential: required for authentication, navigation, and secure access.
Preferences: remember settings such as theme and consent.
Analytics (optional): if used, would be aimed at improving content quality and performance, not tracking you across unrelated sites.

You can clear cookies in your browser at any time. Note: clearing cookies may sign you out or reset preferences.

5) Third parties (processors)

To operate the service, we may rely on reputable third-party providers (for example, payment processing and email delivery). These providers process data on our behalf and under appropriate contractual and security safeguards.

Payment processors: confirm successful purchases and handle refunds/chargebacks.
Email service providers: deliver account and support emails reliably.
Infrastructure providers: host and secure the platform.

We share only what is necessary for the provider to perform its function. We do not allow processors to use your data for unrelated purposes.

6) Data retention

We keep personal information only as long as needed for the purposes described above, including legal, accounting, and security obligations. Retention periods vary depending on data type:

Account data: while your account is active and for a limited period after closure to handle disputes and security.
Payment confirmations: retained as required for compliance and financial record-keeping.
Security logs: retained for a limited time to investigate abuse and maintain platform integrity.

7) Security

We use administrative, technical, and organizational measures to protect data. No method of transmission or storage is 100% secure, but we strive to reduce risk through access controls, least-privilege practices, and monitoring.

Access restrictions and operational safeguards for internal tools.
Secure session handling and reasonable protections against common web threats.
Incident response steps to investigate and address suspicious activity.

8) Your rights & choices

Depending on your location, you may have rights regarding your personal data. We support reasonable requests to:

Access a copy of the personal data we hold about you.
Correct inaccurate or outdated information.
Delete your account and request deletion of associated data (subject to legal retention obligations).
Object to or restrict certain processing in specific circumstances.
Withdraw consent where processing is based on consent (e.g., optional preferences).

To submit a request, contact us using the details below. We may need to verify your identity before completing certain requests.

9) Children’s privacy

Our courses are intended for a general audience and are not directed to children under 13. If you believe a child has provided personal data, contact us so we can take appropriate action.

10) International transfers

If you access the service from outside the region where our systems or providers are located, your information may be transferred across borders for processing and storage. Where relevant, we use appropriate safeguards to protect transferred information.

11) Changes to this Policy

We may update this Policy to reflect improvements, legal requirements, or changes in how the platform works. The “Last updated” date above indicates the latest revision. If changes are significant, we may provide a more prominent notice in the product experience.

12) Contact

For privacy questions, requests, or concerns, contact:

Email: [email protected]
Phone: +1 (415) 728-6049

Please include the email associated with your account (if any) and a clear description of your request.