Privacy Policy

ActiveCraft Tileworks (“we”, “us”, or “our”) explains in this Privacy Policy how we process personal data when you use our website, create an account, enroll in courses, or contact support.

1. Data we collect

• Account data: name, email, password (hashed), and optional phone number.
• Transaction data: purchased courses, billing zip/postal code, and payment confirmation metadata handled by our payment processor.
• Usage data: pages viewed, device/browser type, approximate location from IP (coarse), and referral sources.
• Communications: messages you send via forms or email.
• Cookies and local storage: preferences such as theme, cookie consent, favorites, and cart contents.

2. How we use data

• Provide and improve courses, authenticate users, and deliver customer support.
• Process payments and prevent fraud with our payment partners.
• Analyze site performance and improve content relevance.
• Send transactional emails (enrollment confirmations, schedule updates).
• Comply with legal obligations and enforce our Terms.

3. Legal bases

We rely on contract necessity (to provide services), legitimate interests (site security and improvement), consent (for certain cookies/communications), and compliance with legal duties.

4. Sharing

We do not sell personal data. We share limited data with service providers under contract, including payment processing, hosting, email delivery, and analytics. Providers may be located in other jurisdictions with appropriate safeguards.

5. Cookies and local storage

We use strictly necessary cookies and local storage keys (e.g., theme, cookie consent, favorites, cart). You can manage preferences via our cookie banner. Refusing optional cookies may impact certain features.

6. Data retention

Account and transaction records are retained as required for accounting and legal compliance. Support messages are kept for up to 24 months unless deletion is requested where applicable.

7. Security

We employ encryption in transit (HTTPS), access controls, and routine security reviews. No method is 100% secure; please use strong, unique passwords.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your data, and to object to or restrict processing. Contact us to exercise these rights.

9. Children’s privacy

Our services are not directed to children under 16. We do not knowingly collect data from children.

10. International transfers

If data is transferred internationally, we use appropriate safeguards such as contractual clauses consistent with applicable laws.

11. Changes

We may update this Policy to reflect changes in law or our practices. Material changes will be announced on this page with an updated effective date.

12. Contact

Questions about this Policy? Email [email protected] or call +1 (415) 802-9142.