Privacy Policy - SoundCraft Method

What data we collect and why
We collect the minimum necessary to run our site, deliver courses, and support you.

A) Account, courses, and purchases

When you create an account or enroll in a course (LearnPress/WordPress): name, email, username, password (hashed), course enrollments, progress, quiz results, certificates, orders and invoices, billing info.
Why: provide and manage your account, deliver course content, issue certificates, fulfill purchases, provide support.

B) Forms and support

When you submit a contact form or request support: name, email, message, and any files you attach.
Why: respond to your request and provide support.

C) Newsletter/marketing (optional)

If you subscribe or opt in: name, email, your content preferences.
Why: send updates, free lessons, tips, and offers. You can unsubscribe at any time via the link in every email.

D) Social login (optional)

If you log in with Google or Facebook (via Nextend Social Login): we receive your name, email, and profile ID from the provider (no passwords are shared with us). You can disconnect social login at any time in your account or with the provider.
Why: fast, secure authentication.

E) Payments

Payments are processed by third‑party providers (e.g., Stripe, PayPal). We receive confirmation of payment and limited billing details, but we do not store full card numbers on our servers.
Why: process orders and comply with tax/legal obligations.

F) Usage data, cookies, and security

We collect IP address, browser/device info, pages visited, and timestamps via logs and cookies to secure the site (e.g., rate limiting, bot protection), measure performance, and improve content.
Bot protection: Cloudflare Turnstile (or Google reCAPTCHA if enabled) may analyze technical signals to prevent spam/abuse.

G) Comments and reviews (if enabled)

We collect the data shown in the comment/review form, IP address, and browser user agent to help detect spam. An anonymized hash of your email may be sent to Gravatar to display an avatar (see Automattic privacy).

H) Media

If you upload images, avoid embedding location data (EXIF GPS). Visitors can download and extract location data from images.

Performance of a contract: providing your account, courses, and purchases.
Consent: newsletter/marketing emails, optional cookies.
Legitimate interests: site security, fraud prevention, service improvements, responding to inquiries.
Legal obligations: invoices/records for tax and compliance.

Cookies and similar technologies
We use essential cookies for login, security, and preferences; and (where applicable) analytics/functional cookies. You can manage cookies in your browser. If using a consent banner (e.g., Complianz), you can change preferences there. See also our Cookie Policy (if separate).
Embedded content and links
Content may embed third‑party services (e.g., YouTube/Vimeo videos, social platforms). These sites may collect data, use cookies, and track interaction in line with their own policies.
Who we share data with
We do not sell personal data. We share it only with:

Hosting/CDN/security providers (e.g., SiteGround/Cloudflare) for reliable delivery and protection.
Payment processors (e.g., Stripe, PayPal) to process payments securely.
Email and transactional mail services (e.g., SMTP/email service) to deliver account and course emails.
Analytics/anti‑spam and form protection (e.g., Cloudflare Turnstile; if reCAPTCHA/Akismet is enabled).
Social login providers (Google/Facebook) if you choose that option.
Each provider processes data in line with its own privacy policy and standard safeguards.

Accounts and course records: while your account is active, then for a reasonable period required for legal/tax/compliance (typically up to 7 years for invoices).
Support/contact form messages: up to 24 months (unless we need them longer for ongoing support or legal reasons).
Comments/reviews: indefinitely (so we can recognize and auto‑approve follow‑ups), unless you request deletion.
Logs and security events: typically 12 months.
We anonymize or delete data when no longer needed.

Access, correct, or delete your data
Object to or restrict processing
Port your data
Withdraw consent at any time (e.g., unsubscribe from marketing)
Lodge a complaint with your supervisory authority
To exercise rights, email contact@soundcraftmethod.com. We will verify your request and respond within legal timeframes.

International transfers
We may store or process data outside your country (e.g., the EU/UK/US). We rely on appropriate safeguards such as Standard Contractual Clauses and provider certifications.
Children
Our services are not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect data from children. If you believe a child has provided data, contact us to remove it.
Security
We use technical and organizational measures to protect your data (encrypted connections, access controls, backups, security monitoring and bot protection). No system is 100% secure, but we work to safeguard your information.
Affiliate disclosure (Shop/Gear)
We may include affiliate links (e.g., Amazon Associates). If you click and purchase, we may earn a commission at no extra cost to you. These partners may set cookies or collect data per their policies. We will disclose affiliate relationships on relevant pages.
Changes to this policy
We may update this policy from time to time. Changes take effect when posted on this page. The “Effective date” above shows the latest version.
Contact
Questions about privacy? Email support@soundcraftmethod.com

Notes to implement

Update Effective date.
Replace provider examples with your exact providers if you want to be very precise.
If you activate Google Analytics or an email marketing service (MailerLite/Mailchimp), add them under “Who we share data with” and link to their privacy pages.
If you use a cookie banner (Complianz), link your Cookie Policy page here.