This Privacy Policy explains how Loft Attic Academy processes personal data when you use loftatticveil.store, including course registration, account use, communications, and related site functions.
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing, and to receive a copy of data you provided in a portable format. Some requests may not be granted where we must keep information for legal, security, or contractual reasons.
To exercise a privacy right, submit a clear request using the contact details in this policy and describe the data or action you are requesting. We may ask for information needed to verify your identity and to locate the relevant records before responding.
We retain personal data for the period necessary to provide the service, meet legal and accounting obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete it or anonymise it, unless a longer retention period is required by law or justified by a legitimate operational need.
We may update this Privacy Policy from time to time to reflect changes in our services, processing practices, or legal requirements. The revised version will apply once posted on the site, and we may provide additional notice where a change is material.
We use personal data to create and manage accounts, provide course access, process enrolments and payments, communicate about services, respond to enquiries, maintain security, prevent abuse, analyse site performance, and comply with legal and accounting obligations. Where required, we rely on consent for specific optional features or cookies.
We may share personal data with hosting providers, payment processors, analytics services, email or messaging providers, and other operational partners that help us run the site and deliver courses. These parties act under contractual or other legal obligations appropriate to their role and may process data only for the services they provide to us.
We may disclose personal data where necessary to comply with legal obligations, respond to lawful requests, protect our rights, investigate misuse, or support the prevention of fraud and security incidents. We limit such disclosures to what is reasonably necessary in the circumstances.
We may collect identifiers, contact details, account credentials, course enrolment information, payment-related records, communications, device and browser data, usage logs, and other information you choose to provide. We also process limited technical data needed to operate the site, maintain security, and support course access.
We receive personal data directly from you when you create an account, enrol in a course, submit forms, or contact us. We also obtain data automatically through cookies and similar technologies, and from third parties that support payments, hosting, analytics, or fraud prevention where permitted by law.
Our site may use essential cookies to support login, navigation, and security; preference cookies to remember settings; and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their function and lifespan.
You can manage cookies through your browser settings and, where available, through on-site preference controls. Disabling some cookies may affect site functionality, course access, or saved preferences. Essential cookies are used where needed to provide the service and maintain security.
Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. We limit processing to what is necessary for the stated purpose and apply appropriate safeguards.
Where applicable, you may request access, rectification, erasure, restriction, portability, or objection to processing, and you may withdraw consent where processing relies on consent. You also have the right to lodge a complaint with a competent supervisory authority, subject to local rules.
