Privacy Policy
1. Data Controller
Personal data collected on the website drawpaintschool.com is processed by Tristan Saint-Michel, acting as the data controller.
For any questions regarding the management of your personal data, you may contact:
[email protected]
2. Data Collected
As part of the use of the website and the purchase of online courses, the following personal data may be collected:
First and last name
Email address
Billing details and payment information, processed securely by our payment providers Stripe and or PayPal
Connection and browsing data, including cookies and IP address
Purchase history and course access data
3. Purpose of Data Processing
The collected data is used to:
Process orders and provide access to purchased courses
Manage customer relations and support requests
Send informational and educational follow up emails if you have given your consent
Improve user experience and measure website audience and performance
4. Legal Basis for Processing
Personal data is processed based on the following legal grounds:
Performance of a contract, including access to purchased courses
User consent, particularly for newsletter subscriptions and non essential cookies
Legal obligations, including invoicing and accounting record keeping
5. Data Retention Period
Billing data is retained for ten years in accordance with legal obligations
Customer data, including name, email address and purchase history, is retained for the duration of lifetime access and then archived for three years after the end of the commercial relationship
Prospect data collected without a purchase is retained for three years after the last contact
Cookies are stored for a maximum period of thirteen months
6. Data Sharing
Personal data is never sold.
It may be shared with trusted service providers strictly necessary for the delivery of services, including:
Course hosting platform Kajabi
Payment service providers Stripe and PayPal
Analytics and advertising tools
These providers process data only in accordance with our instructions and applicable regulations.
7. Cookies
The website uses only essential technical cookies required for its proper functioning, including course access, security and navigation.
No non essential cookies are used without user consent.
8. User Rights
In accordance with applicable data protection regulations, including the General Data Protection Regulation, users have the following rights:
Access their personal data
Rectify or complete inaccurate data
Request deletion of personal data, subject to legal retention obligations
Object to the processing of data for marketing purposes
Request portability of their personal data
To exercise any of these rights, users may send an email to:
[email protected]
9. Data Security
All appropriate technical and organizational measures are implemented to protect personal data against loss, alteration, unauthorized access or disclosure.
10. Policy Updates
This Privacy Policy may be updated at any time to reflect legal, technical or operational changes.
The version in force is always available on this page.
