Privacy Policy

1. Overview

SpiritRoom Atelier (“we”, “our”, “us”) provides online interior design courses. This policy explains what data we collect, how we use it, and what choices you have. We aim to minimize collection and store only what we need to deliver a caring learning experience.

2. Information we collect

• Account data: name, email, password (hashed), and course enrollments.
• Payment confirmations from our processor (no full card numbers stored by us).
• Learning data: progress, assignments, quiz results.
• Support communications and preferences (e.g., accessibility needs).
• Device and usage data: IP address, browser type, pages visited, approximate location (city-level) via privacy-friendly analytics.

3. How we use information

• Provide and improve course content, forums, and support.
• Detect abuse, secure accounts, and prevent fraud.
• Send essential emails (receipts, access links) and optional newsletters (opt-out anytime).
• Comply with legal obligations and enforce our Terms.

4. Legal bases

We process data based on contract (course delivery), legitimate interests (service improvement), consent (marketing), and legal compliance.

5. Sharing

We share data with vendors who help us operate the service (hosting, email, payment). These vendors are bound by confidentiality and data protection obligations. We may disclose information if required by law or to protect rights and safety.

6. Cookies and analytics

We use essential cookies for sign-in and course access, and minimal analytics cookies to understand aggregate usage. You can control cookies in your browser and via our cookie banner. Learn more in the banner’s “Preferences.”

7. Data retention

We keep account data while your account is active and for as long as needed to provide courses. After closure, we retain limited records for tax, security, and legal reasons, then delete or anonymize.

8. Your rights

• Access, correct, or delete your personal data.
• Object to or restrict processing in certain circumstances.
• Portability of information you provided.
• Withdraw consent where processing is based on consent.

Contact us at [email protected] to exercise these rights.

9. Children

Our courses are intended for learners 16+ unless a guardian provides explicit consent and supervision.

10. Security

We apply industry safeguards: encryption in transit, hashed passwords, access controls, and routine audits. No method is 100% secure, but we work to protect your data.

11. International transfers

Where data moves across borders, we rely on adequacy decisions, standard contractual clauses, or comparable safeguards.

12. Changes

We may update this policy. Material changes will be announced via email or on this page with a new effective date.

13. Contact

Questions or concerns? Email [email protected] or call +1 (415) 555-0137.