Introduction
Grandtrail Atelier (“we”, “us”, “our”) provides online knitting courses. This policy describes how we collect, use, and share personal information.
Information we collect
- Account data: name, email address, and password (hashed).
- Transaction data: course enrollments and payment status (processed by our payment provider).
- Communications: messages you send to us, support requests, and feedback.
- Usage data: pages visited, device and browser type, and approximate location (city level).
- Cookies and similar technologies as described below.
How we use information
- Provide and maintain courses, features, and support.
- Process transactions and prevent fraud.
- Improve content through analytics and user research.
- Send service messages (e.g., purchase confirmations) and, with consent, occasional updates.
Legal bases
We process personal data on the basis of contract (to deliver purchased courses), consent (analytics and optional communications), and legitimate interests (service improvement and security).
Cookies
We use essential cookies to keep you signed in and remember preferences. Analytics cookies help us understand usage; you can decline analytics cookies through the cookie banner.
Data retention
We keep account and transaction data as long as your account is active and as required by law. Support messages may be retained up to 24 months for quality assurance.
Sharing
We share data with service providers (hosting, analytics, payment processing) under contracts that require confidentiality and security. We may share information to comply with legal requests.
Security
We apply administrative, technical, and physical safeguards appropriate to the risk. No method of transmission or storage is 100% secure.
Children
Our services are not directed to children under 13. If you believe a child provided personal information, contact us to delete it.
International transfers
Data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
Your rights
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your data protection authority.
Changes
We may update this policy. We will post changes here and update the effective date.
Contact
Questions or requests: [email protected] or +1 (206) 555-0147.