Privacy Policy

Who we are

The course creator operating this site is the data controllerof your personal data. The Social Target provides the platform and acts as a data processor on the creator's behalf (see our Data Processing Agreement).

What we collect

  • Account data: name, email, country, language
  • Purchase data: orders, subscriptions, payment status (card data is held by Stripe, never by us)
  • Usage data: course progress, logins, email engagement
  • Marketing data: tags, consent state, analytics events (only with cookie consent)

    • Legal bases

    We process data to perform our contract with you (providing access), for legitimate interests (improving the service, fraud prevention), and with your consent (analytics cookies, marketing email).

    Cookies & tracking

    Non-essential analytics/marketing pixels (Meta, TikTok, Google) load ONLY after you accept them via the cookie banner. You can decline.

    Where a creator offers private lessons, the booking calendar is provided by Calendly, loads only if you choose to load it on the booking page, and Calendly then asks you about its own cookies.

    Your rights

    You may access, export, correct, or delete your data. Use the data & privacy page in your account, or contact us. UK residents may complain to the Information Commissioner's Office (ICO); EU residents may complain to their local supervisory authority.

    Retention

    We keep your account and course-progress data for as long as your account is active. If you ask us to delete your account, we erase your personal details from the live system without undue delay. Records of purchases and payments are kept for as long as tax law requires. After erasure those records no longer carry your name or email address.

    Copies of our database are kept in encrypted backups for up to 90 days, and in the database provider's restore history for up to 7 days. After that, deleted data is gone from them too. If you unsubscribe from marketing email, we keep a one-way coded record of your address, which cannot be read back as an address, so that we never email you again by mistake.

    Sub-processors

    We use vetted sub-processors to run the service. See the full list at /legal/subprocessors.

    Where your data is processed

    Our database is hosted in the UK (London region). Some of the providers that help us run the platform are based in, or process data in, the United States: Vercel (hosting), Clerk (sign-in), Stripe (payments), Resend and Amazon SES (email), Inngest (background tasks), Calendly (the lesson booking calendar, only if you choose to load it), and, only if you accept analytics or marketing cookies, Sentry, PostHog, Meta, TikTok and Google.

    When your personal data leaves the UK or the EEA, we rely on a safeguard the law recognises, such as Standard Contractual Clauses (with the UK Addendum where it applies) or an equivalent safeguard. You can ask us for details of the safeguard that applies to a given provider. The full provider list is on our sub-processors page.

    Contact

    Privacy questions: hello@thesocialtarget.com.