Privacy Policy

This Privacy Policy explains how FloraCraft Academy collects, uses, shares, and protects personal data, and the choices available to you.

Back to Home

Scope & definitions

This policy applies to FloraCraft Academy websites and services. “Personal data” means information that identifies or can reasonably be linked to an individual. “Processing” means collecting, storing, using, disclosing, or deleting personal data.

What this policy does not cover
This policy does not cover third-party websites, services, or payment processors you may access via our platform. Their privacy practices are governed by their own policies.
1.Data we collect

We collect account details (name, email), course progress, and payment confirmations. We do not store full payment card numbers.

We may also collect limited technical data such as IP address, device type, browser version, and approximate location derived from IP for security, fraud prevention, and service reliability.

Sensitive data
We do not intentionally collect special categories of personal data (e.g., health, precise geolocation). If you share such data in support messages, you consent to processing for the purpose of addressing your request.
2.Why we process data

To provide course access, certificates, support, and essential communications, and to improve our curriculum.

We also process data to maintain security, prevent abuse, debug issues, enforce our terms, and comply with applicable legal obligations.

Legal bases (where applicable)
Depending on your region, processing may rely on contractual necessity (providing the service), legitimate interests (security and improvement), consent (non-essential cookies), and legal obligation (tax or compliance records).
3.Cookies

Essential cookies maintain sessions and preferences (e.g., theme). You can opt in via our cookie banner.

If you decline non-essential cookies, core functionality remains available; however, some enhancements may be limited.

Manage cookie preferences
You can change your preferences at any time by clearing local storage in your browser (this will reset the cookie banner state and theme preference on this device).
4.Your rights

You can request access, correction, deletion, or export of your data. Contact: [email protected].

We may ask you to verify your identity before acting on a request. Some data may be retained where required for legal, security, or fraud-prevention reasons.

Typical response times
We aim to respond within 30 days. If your request is complex, we may need additional time and will keep you informed.
5.International transfers

Data may be processed across regions with safeguards such as SCCs and encryption in transit and at rest.

Where required, we implement additional technical and organizational measures to ensure an equivalent level of protection.

Security overview
We use access controls, least-privilege practices, monitoring, and secure transport (HTTPS). No method of transmission or storage is 100% secure; we continuously improve controls to reduce risk.

Contact

For privacy questions or requests, email [email protected] or call +1 (415) 739-2864.