Privacy Policy

Last updated: January 1, 2025

Bright Folio Art Education ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, enroll in our courses, or use our services.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you provide to us, including:

• Name and contact information (email address, phone number, mailing address)
• Payment information (credit card details, billing address)
• Educational background and art experience level
• Course preferences and enrollment history
• Communication preferences
• Any other information you choose to provide

1.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and location information
• Browser type and version
• Device information
• Pages visited and time spent on our site
• Referral source
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our educational services
• To process enrollments and payments
• To communicate with you about courses, schedules, and updates
• To send newsletters and marketing communications (with your consent)
• To improve our website and services
• To analyze usage patterns and preferences
• To comply with legal obligations
• To protect our rights and prevent fraud

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

3.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing
• Email marketing and communication
• Website hosting and maintenance
• Analytics and reporting
• Student management systems

3.2 Legal Requirements

We may disclose your information if required by law or if we believe such disclosure is necessary to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our students or others
• Investigate fraud or security issues

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. We use:

4.1 Essential Cookies

Necessary for basic website functionality, security, and to remember your preferences.

4.2 Analytics Cookies

Help us understand how visitors interact with our website to improve user experience.

4.3 Marketing Cookies

Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

You can manage your cookie preferences through our cookie consent banner or your browser settings.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure servers and databases
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Generally:

• Student records: 7 years after course completion
• Marketing communications: Until you unsubscribe
• Website analytics: 26 months
• Payment information: As required by financial regulations

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request information about the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us using the information provided below.

8. Children's Privacy

Our services are primarily designed for adults (18+). We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

If you are located outside Canada, please note that your information may be transferred to and processed in Canada, where our servers are located. By using our services, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Providing notice through our services

Your continued use of our services after any changes indicates your acceptance of the updated policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Governing Law

This Privacy Policy is governed by the laws of Ontario, Canada, and applicable federal privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA).