Privacy Policy

At CraftNest Studio, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, register for workshops, or interact with our services.

1. Information We Collect

1.1 Personal Information You Provide

When you register for workshops, create an account, or contact us, we may collect the following personal information:

• Contact Information: Name, email address, phone number, mailing address
• Account Credentials: Username, password (encrypted)
• Payment Information: Credit card details, billing address (processed securely through third-party payment processors)
• Workshop Preferences: Skill level, interests, accessibility requirements
• Emergency Contacts: For minors or participants with special needs
• Communication Records: Emails, messages, feedback, and support inquiries

1.2 Information Automatically Collected

When you visit our website, certain information is automatically collected through cookies and similar tracking technologies:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Location Data: General geographic location based on IP address
• Cookies: Session cookies, preference cookies, analytics cookies

1.3 Information from Third Parties

We may receive information from third-party services you use to interact with us, such as:

• Social media platforms (if you connect your account or share our content)
• Payment processors (transaction confirmations, fraud prevention data)
• Marketing partners (if you arrive through affiliate links or campaigns)

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Service Delivery

• Process workshop registrations and manage bookings
• Send confirmation emails, reminders, and class updates
• Provide customer support and respond to inquiries
• Administer accounts and maintain records
• Facilitate payments and issue receipts/invoices

2.2 Communication

• Send newsletters and promotional offers (with your consent)
• Notify you about new workshops, events, and studio updates
• Conduct surveys to improve our services
• Respond to your questions and feedback

2.3 Improvement and Analytics

• Analyze website usage to enhance user experience
• Develop new workshops based on participant interests
• Conduct market research and trend analysis
• Optimize website performance and troubleshoot technical issues

2.4 Legal and Security

• Comply with legal obligations and regulations
• Prevent fraud, unauthorized access, and abuse
• Enforce our Terms of Service and policies
• Protect the rights and safety of CraftNest Studio and our community

3. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your data in the following limited circumstances:

3.1 Service Providers

We work with trusted third-party vendors who assist with:

• Payment processing (e.g., Stripe, PayPal)
• Email delivery and marketing automation (e.g., Mailchimp, SendGrid)
• Website hosting and cloud storage
• Analytics and performance monitoring (e.g., Google Analytics)
• Customer support tools

These providers are contractually obligated to protect your data and use it only for specified purposes.

3.2 Legal Requirements

We may disclose information if required by law, court order, or governmental request, or to:

• Comply with legal processes (subpoenas, warrants)
• Enforce our Terms of Service
• Protect against fraud or security threats
• Safeguard the rights, property, or safety of CraftNest Studio, our users, or the public

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change and provide options regarding your data.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption: SSL/TLS encryption for data transmission
• Secure Storage: Encrypted databases and secure servers
• Access Controls: Limited employee access on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Payment Security: PCI-DSS compliant payment processing

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for site functionality (login sessions, shopping cart)
• Performance Cookies: Collect anonymous data on site usage
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track visits for advertising purposes (with consent)

5.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block all cookies (may impact site usability)
• Clear cookies when closing the browser

6. Your Rights and Choices

6.1 Access and Correction

You have the right to access, update, or correct your personal information at any time by logging into your account or contacting us directly.

6.2 Data Deletion

You may request deletion of your personal data, subject to legal retention requirements (e.g., tax records, transaction history). To request deletion, contact us using the information below.

6.3 Marketing Opt-Out

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or by updating your communication preferences in your account settings.

6.4 Do Not Track

Our website does not currently respond to "Do Not Track" browser signals, but you can manage cookies through your browser settings.

7. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. Minors aged 13-15 may participate in workshops with parental consent. If we discover we have inadvertently collected data from a child under 13, we will delete it promptly.

8. Third-Party Links

Our website may contain links to third-party websites or services (e.g., social media platforms, payment processors). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your residence. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your data.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Retention periods vary based on data type:

• Account Data: Retained until account deletion or 3 years of inactivity
• Transaction Records: Retained for 7 years for tax and legal compliance
• Marketing Data: Retained until opt-out or 2 years of inactivity
• Support Communications: Retained for 2 years after resolution

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top indicates the most recent revision. Significant changes will be communicated via email or prominent website notice. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of data collected, used, and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of sale of personal information (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, contact us using the information below. We will verify your identity before processing requests.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Access to your personal data
• Rectification of inaccurate data
• Erasure of data ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent

To exercise these rights or file a complaint with a supervisory authority, contact us using the details below.