Privacy Policy
Last Updated:
Introduction
This Privacy Policy describes how Artwarmlight ("we," "our," or "us") collects, uses, and protects your personal information when you use our online painting and drawing school services. We are committed to protecting your privacy and ensuring the security of your personal data.
Information We Collect
We collect information that you provide directly to us, including:
- Name and contact information (email address, phone number)
- Mailing address
- Payment information (processed through secure third-party providers)
- Course preferences and enrollment information
- Communications you send to us
- Information you provide in course submissions and feedback
- Account credentials and profile information
- Billing and transaction history
- Artwork and creative content you submit
We also automatically collect certain information when you visit our website, including:
- IP address and geographic location
- Browser type and version
- Device information (operating system, device type)
- Usage patterns and website navigation
- Referring website addresses
- Pages viewed and time spent on pages
- Click patterns and interaction data
This information is collected through cookies, web beacons, and similar tracking technologies as described in our Cookies Policy.
How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: Provide, maintain, and improve our educational services, process enrollments, and manage your account
- Communication: Send you course updates, respond to inquiries, provide customer support, and send administrative notices
- Marketing: Send you educational content and promotional materials about our courses and services (only with your explicit consent)
- Personalization: Customize your learning experience, recommend courses, and tailor content to your interests
- Analytics: Analyze website usage patterns, track user behavior, and improve user experience
- Security: Detect and prevent fraud, unauthorized access, and other security threats
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
- Business Operations: Conduct business analytics, manage our operations, and make business decisions
Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Consent: When you have given clear consent for us to process your personal data for specific purposes
- Contract: When processing is necessary for the performance of a contract with you
- Legal Obligation: When we need to comply with a legal obligation
- Legitimate Interests: When processing is necessary for our legitimate interests, such as improving our services and website functionality
Information Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party service providers who assist in operating our website and services, such as payment processors, hosting providers, email service providers, and analytics services. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
- Legal Requirements: When required by law, court order, or government regulation, or to respond to legal processes, protect our legal rights, or prevent harm to our users or the public
- Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, where your information may be transferred as part of the business assets
- With Your Consent: When you have explicitly consented to the sharing of your information
- Protection of Rights: To protect the rights, property, or safety of Artwarmlight, our users, or others
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Data Protection
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS protocols
- Secure storage of sensitive information with encryption at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection and privacy
- Regular backups and disaster recovery procedures
- Monitoring and logging of system access
However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.
Your Rights and Options
You have the right to:
- Access and receive a copy of your personal data
- Rectify inaccurate or incomplete information
- Request deletion of your personal data
- Object to processing of your personal data
- Request restriction of processing
- Data portability - receive your data in a structured format
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
- Opt-out of marketing communications
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.
When we transfer your personal data to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data. These safeguards may include:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions by the European Commission recognizing certain countries as providing adequate data protection
- Other legally recognized transfer mechanisms
By using our services, you consent to the transfer of your information to countries outside your country of residence, including the United States, where data protection laws may differ.
Data Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:
- Account Information: Retained for as long as your account is active, plus a reasonable period thereafter for business and legal purposes
- Course Records: Retained for the duration of your enrollment and for a period thereafter to provide support and maintain records
- Payment Information: Retained as required by law for tax and accounting purposes, typically 7 years
- Marketing Data: Retained until you opt-out or withdraw consent, after which we will delete or anonymize your data
- Legal Requirements: Some information may be retained longer if required by applicable laws, regulations, or legal processes
When we no longer need your personal data, we will securely delete or anonymize it in accordance with our data retention policies. If you request deletion of your data, we will comply with your request subject to any legal obligations to retain certain information.
Children's Privacy
Our services are designed for adults aged 18 and over. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
Third-Party Services
We use various third-party services that may collect information about you. These services help us operate our website, provide our services, and improve user experience. The third-party services we use include:
- Google Analytics: We use Google Analytics to analyze website traffic, user behavior, and website performance. Google Analytics collects information such as page views, session duration, bounce rate, and user demographics. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information, visit Google's Privacy Policy.
- Google Ads Conversion Tracking: We use Google Ads to track conversions and measure the effectiveness of our advertising campaigns. Google Ads may collect information about your interactions with our advertisements and website. This helps us understand which advertisements are most effective.
- Google Ads Remarketing: We may use Google Ads remarketing services to show you relevant advertisements on other websites you visit after visiting our website. This is done through cookies and similar technologies. You can opt-out of personalized advertising through Google Ads Settings.
- Google Maps API: We use Google Maps API to display location information and interactive maps on our contact page. Google Maps may collect information about your location and usage of the map feature. For more information, visit Google's Privacy Policy.
- Payment Processors: We use secure third-party payment processors to handle payment transactions. These processors collect payment information necessary to process transactions. We do not store your full payment card information on our servers.
These third-party services have their own privacy policies and terms of service governing the collection and use of your information. We encourage you to review their privacy policies to understand how they handle your data. We are not responsible for the privacy practices of these third-party services.
Use of Cookies
We use cookies and similar technologies to enhance your browsing experience. For more detailed information about the types of cookies we use and how to manage them, please see our Cookies Policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: privacy@artwarmlight.world
Address: 570 Lexington Ave, New York, NY 10022, United States
Phone: +1 (212) 517-3929
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational, legal, or regulatory reasons. When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Post the updated policy on this page
- Notify you of material changes via email or through a prominent notice on our website
- Obtain your consent if required by applicable law for material changes
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our services after any changes to this policy constitutes your acceptance of the updated policy.