Privacy Policy
Effective date: January 1, 2026
1. Introduction
Crystalpeak Floristry Institute (“we”, “us”, or “our”) provides professional floristry education. This Privacy Policy explains how we collect, use, and share information about you when you use our websites and services.
2. Information we collect
- Account data: name, email address, and password (hashed).
- Contact records: messages submitted via forms and support channels.
- Transaction data: course selections and enrollment history.
- Usage data: device, browser, and analytics events (aggregated).
- Cookies: essential and preference cookies (see Cookie Policy below).
3. How we use information
- Provide and improve our courses and support.
- Process enrollments and communicate about services.
- Secure our platform, prevent fraud, and enforce Terms.
- Comply with legal obligations and respond to lawful requests.
4. Legal bases
We process personal data on the basis of contract performance, legitimate interests, consent (where required), and legal obligations.
5. Sharing information
We do not sell your personal data. We may share information with service providers under contract (e.g., analytics, email delivery) bound by confidentiality; with professional advisors; or as required by law.
6. International transfers
Your information may be processed outside your country. Where applicable, we use appropriate safeguards for cross-border transfers.
7. Data retention
We retain data for as long as necessary to deliver services, comply with law, and resolve disputes. Typical retention: account and transaction records for 7 years; support tickets for 24 months; analytics data for 14 months.
8. Your rights
Subject to local laws, you may request access, correction, deletion, restriction, objection to processing, or data portability. You may also withdraw consent where processing is based on consent.
9. Security
We use administrative, technical, and physical safeguards appropriate to the nature of the data we process. No system is entirely secure; please use unique passwords and protect your account.
10. Cookies
We use essential cookies for authentication and preferences. Analytics cookies help us understand usage in aggregate. You can manage preferences through your browser and our cookie banner.
11. Children
Our services are intended for individuals 16 years or older. If you believe a child provided us data, contact us and we will take appropriate steps.
12. Contact
Email: [email protected] • Phone: +1 (646) 555-0197 • Address available upon request.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be indicated by updating the effective date and providing notice where appropriate.