Privacy Policy

1. Who We Are

Art Flaneur Global Pty Ltd (ABN as registered) is an Australian company offering online creative education. Our registered address is in Sydney, New South Wales, Australia. You can contact us at privacy@artflaneur.global.

2. What Data We Collect

• Account data: name, email address, hashed password, profile image.
• Payment data: processed by Stripe — we do not store card details.
• Course activity: lesson progress, assignment submissions, certificates.
• Communications: email notifications you have opted into.
• Technical data: IP address, browser type, session tokens (via cookies).

3. How We Use Your Data

• To provide and maintain your access to courses.
• To process payments and issue tax invoices.
• To send transactional emails (enrollment, assignment feedback, certificates).
• To send marketing emails, only if you have given explicit consent (you may unsubscribe at any time).
• To comply with Australian legal and tax obligations.

4. Legal Basis (GDPR)

If you are located in the European Economic Area, we process your personal data under the following legal bases: contract performance (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), and consent where required (Art. 6(1)(a)).

5. Data Sharing

We do not sell your personal data. We share data only with trusted service providers necessary to operate the platform: Stripe (payments), Resend (email), Bunny.net (video delivery), Amazon Web Services (file storage). All providers are bound by data processing agreements.

6. Data Retention

We retain your account data for the duration of your account and up to 7 years after deletion for tax and legal compliance (as required by Australian law). Course activity and certificates are retained indefinitely unless you request deletion.

7. Your Rights

Under the Australian Privacy Act 1988 and (where applicable) the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your profile settings.
• Request deletion of your account and personal data (subject to legal retention obligations).
• Object to or restrict processing.
• Data portability (GDPR only).
• Withdraw consent at any time without affecting prior processing.

To exercise any right, email privacy@artflaneur.global. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication and session management. With your consent, we may use analytics cookies to understand how learners engage with our content. You can withdraw cookie consent at any time by clearing your browser storage.

9. Security

We implement industry-standard measures including TLS encryption in transit, bcrypt password hashing, TOTP two-factor authentication, and rate limiting. No system is completely secure; we encourage you to use a strong, unique password.

10. Changes to This Policy

We may update this policy from time to time. We will notify enrolled students of material changes via email. Continued use of the platform after changes constitutes acceptance.