Privacy policy
Last updated: [date]
Who is responsible for your data
[Your full legal name or company name], [address], Ireland, is the data controller. Contact us about privacy at hello@inthisworldacademy.com.
What we collect, and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Your email address | To create your course account, send your login and password emails, and answer your messages | Contract |
| Your password | To log you in. It's stored encrypted (hashed) by Supabase; we can't see it. | Contract |
| Purchase details: email, amount, currency, date, country, Stripe payment reference | To give you access, handle refunds, and keep accounts for tax | Contract; legal obligation |
| Lessons you've marked as done | To show your progress on your dashboard | Contract |
| Technical data such as IP address and browser type, in server logs | To run the website securely and stop abuse | Legitimate interests |
| Anything you send us by email | To reply and give support | Contract; legitimate interests |
We don't use analytics or advertising trackers, we don't sell your data, and we don't send marketing emails. We don't make automated decisions about you.
Payments
Payments are handled by Stripe (Stripe Payments Europe, Limited, Ireland), which acts as an independent controller for payment data. We receive your email, country and payment status, but never your full card number. See stripe.com/privacy.
Service providers we use
These companies process data for us, only on our instructions:
- Supabase: accounts, database and file storage, hosted in the EU ([region you picked, e.g. Ireland])
- Bunny.net (BunnyWay d.o.o., Slovenia): lesson video streaming
- [Resend]: sends account emails
- [Vercel]: website hosting
Some providers are based in the United States. Where data leaves the EU/EEA, it's protected by safeguards the law recognises, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep data
- Your account and progress: while you have access to the course. You can ask us to delete your account at any time.
- Purchase and refund records: 6 years, as Irish tax law requires.
- Support emails: up to 2 years after the conversation ends.
- Server logs: kept briefly by our hosting providers under their own retention rules.
Your rights
You can ask to access, correct, delete or export your data, or object to or restrict how we use it. Email hello@inthisworldacademy.com; we'll reply within one month. If you're not happy with how we handle your data, you can complain to the Data Protection Commission (dataprotection.ie).
Children
The course is sold to adults. If you're under 18, a parent or guardian must buy it for you.
Cookies and similar storage
We only use storage that's strictly needed to log you in and run your dashboard. See the Cookie policy.