Privacy policy.

This site (the “Site”) is operated by Tia Tshabola(“we”, “us”). We try to collect as little information about you as possible. This policy explains what we do collect, why, and what choices you have.

What we collect

Account information. If you create an account, we store your email address and, if you provide it, your name. Your password is handled by our authentication provider (Supabase) and stored only as a secure hash — we never see or store your actual password.

Sign-in cookies. When you log in, we set session cookies on your device so you stay signed in as you move between pages. These are strictly-necessary cookies under UK GDPR and do not require consent. We do not use cookies for advertising or analytics.

Purchase records. When you buy the course, we store a record linking your account to the course you now have access to, along with the date. We use this solely to know what you're entitled to watch.

Payment data. Payments are processed by Stripe. Your card details go directly to Stripe and are never seen or stored by us. Stripe shares limited information back with us, such as your email address and whether the payment succeeded.

Newsletter signup (if you submit it). If you sign up for the newsletter, we store your email address in our own database for the sole purpose of sending you the newsletter. You can unsubscribe at any time.

Server logs. Like any website, our hosting provider (Netlify) automatically receives standard request data — IP address, user agent, requested URL, response code, timestamp. These logs are used to operate and secure the Site, and are retained per Netlify's policies. See Netlify's privacy policy.

Optional course analytics

With your permission, we record a random 30-minute session identifier, traffic-source and campaign labels, enrolment clicks, successful account creation and checkout creation. We do not include your email, name, password, full referring URL or card details in these analytics records. Verified purchase totals come from signed payment notifications; purchases without analytics consent are counted without a session identifier or browsing history.

The consent preference lasts six months. You can decline or withdraw optional analytics using Analytics preferences in the footer. Event records are kept in Netlify storage and shown in a private sales report. The report covers the last 30 days; records are retained for up to 13 months for trend comparisons, then deleted during report maintenance.

What we do not collect

• No advertising cookies.
• No third-party social media trackers.
• No fingerprinting.
• No card or payment details — those stay with Stripe.
• We do not sell, rent, or share your data with third parties for marketing.

Third-party services

The Site uses the following third parties to operate. Each has its own privacy policy:

• Netlify — hosting.
• Supabase — database and account authentication (stores your account details, newsletter signup, and purchase records).
• Stripe — payment processing.
• Google Fonts — typography.

Your rights

Depending on where you live (UK GDPR if you're in the UK, GDPR in the EU, CCPA in California), you have the right to:

• Request a copy of the data we hold about you.
• Request correction or deletion of that data.
• Object to or restrict its processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at t@nuvisionstudio.xyz. We'll respond within 30 days. Note that deleting your account also removes your access to the course.

Data retention

Account details and purchase records are kept for as long as your account exists, and purchase records may be retained afterwards where we need them for accounting and tax obligations. Newsletter subscriber emails are kept until you unsubscribe. Server logs are typically rotated within 30 days.

Children

The Site is not directed to children under 13 (or 16 in the EU). We do not knowingly collect data from them.

Changes to this policy

If we change this policy in a material way, we'll update the date at the top and, if you're a customer, send you an email.

Jurisdiction

We are based in United Kingdom. By using the Site you consent to your data being processed there.

Contact

Questions about this policy? Email t@nuvisionstudio.xyz — or, for non-privacy stuff, see our terms.