Privacy Policy
Effective date: January 1, 2026
CastSpirit Studio (“we”, “our”, “us”) operates training services and the website castspirit.bond. This Policy explains what personal data we collect, how we use it, and your choices. We keep language straightforward and avoid dark patterns.
1. Data we collect
- Account data: name, email, optional phone, password hash
- Enrollment data: selected classes, payments (via our payment processor)
- Communications: emails, form submissions, feedback notes
- Usage data: pages viewed, device/browser information, coarse location
- Recordings: optional class recordings when you consent
2. How we use data
- Provide and improve classes, scheduling, and support
- Process payments and issue confirmations
- Send class updates and policy notices
- Secure the site, prevent fraud, and diagnose issues
3. Legal bases
We rely on contract performance (enrollments), legitimate interests (service safety and improvement), consent (marketing, class recordings), and legal obligations (tax and accounting).
4. Sharing
We share data with vetted processors only: payment providers, email services, and analytics. We do not sell personal data. When legally required, we may disclose information to authorities.
5. Data retention map
- Account data: retained while your account is active and 24 months after last activity
- Enrollment and invoices: retained for 7 years to meet accounting rules
- Support messages: 24 months
- Class recordings: 90 days unless you request earlier deletion
- Cookies: 12 months, see cookie banner for details
6. Your choices
- Access, correct, delete your data
- Opt out of marketing at any time
- Decline recordings or choose audio-only appearance where available
- Manage cookies via the banner on this site
7. Security
We apply encryption in transit, access controls, limited retention, and regular audits. No method is perfect; we monitor and improve continuously.
8. International transfers
When data moves across borders, we use standard contractual clauses or equivalent safeguards.
9. Children
Our services target adults 18+. If we learn a minor provided data without consent, we will delete it.
10. Contact
Questions or requests: [email protected] or +1 (332) 555-0146.
11. Updates
We may update this Policy. We will change the “Effective date” and, for material changes, notify you via email if you have an account.