Privacy policy.
Last updated · 2026-07-20
This site (the “Site”) is operated by Tia Tshabola(“we”, “us”). We try to collect as little information about you as possible. This policy explains what we do collect, why, and what choices you have.
What we collect
Account information. If you create an account, we store your email address and, if you provide it, your name. Your password is handled by our authentication provider (Supabase) and stored only as a secure hash — we never see or store your actual password.
Sign-in cookies. When you log in, we set session cookies on your device so you stay signed in as you move between pages. These are strictly-necessary cookies under UK GDPR and do not require consent. We do not use cookies for advertising or analytics.
Purchase records.When you buy the course, we store a record linking your account to the course you now have access to, along with the date. We use this solely to know what you're entitled to watch.
Payment data. Payments are processed by Stripe. Your card details go directly to Stripe and are never seen or stored by us. Stripe shares limited information back with us, such as your email address and whether the payment succeeded.
Newsletter signup (if you submit it). If you sign up for the newsletter, we store your email address in our own database for the sole purpose of sending you the newsletter. You can unsubscribe at any time.
Server logs.Like any website, our hosting provider (Netlify) automatically receives standard request data — IP address, user agent, requested URL, response code, timestamp. These logs are used to operate and secure the Site, and are retained per Netlify's policies. See Netlify's privacy policy.
What we do not collect
- No analytics or tracking pixels.
- No advertising cookies.
- No third-party social media trackers.
- No fingerprinting.
- No card or payment details — those stay with Stripe.
- We do not sell, rent, or share your data with third parties for marketing.
Third-party services
The Site uses the following third parties to operate. Each has its own privacy policy:
- Netlify — hosting.
- Supabase — database and account authentication (stores your account details, newsletter signup, and purchase records).
- Stripe — payment processing.
- Google Fonts — typography.
Your rights
Depending on where you live (UK GDPR if you're in the UK, GDPR in the EU, CCPA in California), you have the right to:
- Request a copy of the data we hold about you.
- Request correction or deletion of that data.
- Object to or restrict its processing.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at t@nuvisionstudio.xyz. We'll respond within 30 days. Note that deleting your account also removes your access to the course.
Data retention
Account details and purchase records are kept for as long as your account exists, and purchase records may be retained afterwards where we need them for accounting and tax obligations. Newsletter subscriber emails are kept until you unsubscribe. Server logs are typically rotated within 30 days.
Children
The Site is not directed to children under 13 (or 16 in the EU). We do not knowingly collect data from them.
Changes to this policy
If we change this policy in a material way, we'll update the date at the top and, if you're a customer, send you an email.
Jurisdiction
We are based in United Kingdom. By using the Site you consent to your data being processed there.
Contact
Questions about this policy? Email t@nuvisionstudio.xyz — or, for non-privacy stuff, see our terms.