Privacy Policy
Overview
At Pinehill Watercolor, we collect only the information needed to provide our courses, maintain account security, and improve learning outcomes. This policy explains what we collect, why we collect it, how we store and protect it, and the rights you may have under applicable laws.
By using our site and services, you acknowledge this Privacy Policy. If you disagree with any part, you should discontinue using our services and contact us with any concerns.
Effective date: 06 Jan 2026
Data we collect
- Account data: name, email address, and a hashed password you create.
- Course activity: enrollment, progress checkpoints, lesson timestamps, notes you save, and completion status.
- Support correspondence: messages you send to our support team and their outcomes.
- Technical data: device type, operating system, browser, IP address (stored in logs for short periods), and approximate location for performance and abuse prevention.
- Cookies and similar technologies: preferences like theme, font size, and consent settings. See Cookies and tracking below for details.
We do not collect sensitive categories of data (e.g., health, political opinions) and we do not sell personal data.
How we use data
- Deliver, administer, and improve our courses and learning features.
- Provide support, investigate issues, and protect account security and integrity.
- Monitor performance, fix bugs, and analyze aggregated usage to improve clarity and outcomes.
- Comply with legal obligations, enforce our terms, and prevent misuse or fraud.
Legal bases for processing
Where required by law (such as in the EEA/UK), we process your personal data under these legal bases:
- Contract: to create and maintain your account, deliver purchased or enrolled courses, and provide support.
- Legitimate interests: to secure our services, prevent abuse, understand aggregated usage, and improve features. We balance these interests against your rights.
- Consent: for non-essential cookies and communications where consent is required. You can withdraw consent at any time.
- Legal obligation: to comply with applicable laws and lawful requests.
Cookies and tracking
We use a small number of cookies to operate our site and remember preferences. Categories include:
- Strictly necessary: keeps you signed in, maintains session security, and stores your cookie choices.
- Preferences: remembers theme (light/dark) and UI settings like font size.
- Analytics (optional): aggregated metrics to understand course clarity and performance. When enabled, these are configured to minimize data collection.
You can control cookies in your browser settings. You may also manage your preferences via the Cookie banner on this page. Some features may not work correctly if you disable certain cookies.
Data retention
We keep personal data only as long as necessary for the purposes described in this policy:
- Account data is retained while your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we must retain information for legal obligations or legitimate interests (for example, records of purchases).
- Technical logs are typically retained for up to 30 days unless needed to investigate security incidents or abuse.
- Aggregated or anonymized data may be retained without time limit.
Sharing and third parties
We do not sell your personal data. We share personal data only with:
- Service providers (processors) who assist with hosting, email delivery, support tooling, and security. They are bound by contracts to process data only under our instructions and with appropriate safeguards.
- Authorities when required by law or to protect rights, safety, and security.
- Business transfers in the event of a merger, acquisition, or asset sale, subject to continued protection of your data and notice to you where required.
International transfers
When personal data is transferred across borders, we implement safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms, and we assess the legal environment to protect your information.
Security
We use technical and organizational measures to protect data, including encryption in transit (HTTPS), access controls, auditing, and least-privilege principles. No method of transmission or storage is 100% secure; we continuously improve our safeguards.
Children’s privacy
Our services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us and we will take appropriate steps to remove such information.
Your rights
Depending on your location, you may have rights to:
- Access, correct, or delete your personal data.
- Port your data to another service.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact us using the details below. We may need to verify your identity before responding.
Your choices
- Access, update, or delete your account data by contacting us.
- Opt out of marketing emails at any time via unsubscribe links.
- Adjust cookie preferences in your browser or through our cookie banner.
- Choose your theme (light/dark). If you opt in, we remember your preference with a cookie or local storage entry.
Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
Changes to this policy
We may update this policy to reflect changes in our practices, technologies, or legal requirements. We will post the updated policy on this page and revise the effective date above. For material changes, we will provide additional notice (for example, by email or prominent notice on our site).
Contact
Questions about this policy or your data? Contact our privacy team:
- Email: [email protected]
- Phone: +1 646-384-1207
- Preferred subject line: “Privacy Request — Pinehill Watercolor”
We aim to respond to verified requests within 30 days, or earlier where required by law.