Privacy Policy

Privacy Policy for CharacterArtSchool.com

Last Updated: 11/17/2025

CharacterArtSchool.com (“we”, “us”, “our”, or “the Company”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, purchase courses, or interact with our services.

If you do not agree with this Privacy Policy, please discontinue use of CharacterArtSchool.com.

1. About Us

CharacterArtSchool.com
Email: community@characterartschool.com
Website: https://CharacterArtSchool.com

We sell online art and design courses to customers worldwide.

For the purposes of the General Data Protection Regulation (GDPR), CharacterArtSchool.com is the Data Controller for all personal data collected on this website, except where noted (e.g., payment processing by Paddle).

2. What Data We Collect

We collect information in the following categories:

2.1. Information You Provide Directly

  • Name

  • Email address

  • Account login credentials

  • Billing address (only when required for tax compliance)

  • Course enrollment information

  • Messages sent through contact forms or customer support channels

2.2. Automatically Collected Information

When you visit the site, we automatically collect:

  • IP address

  • Device information

  • Browser type and settings

  • Usage data (pages visited, time spent, interactions)

  • Cookies and similar technologies

2.3. Payment Information (via Paddle, PayPal)

All payment transactions are processed by our payment providers, Paddle.com and PayPal.

We do not store or process your full payment card details.

Paddle and/or PayPal may collect:

  • Payment card information

  • Billing address

  • VAT/GST information

  • Transaction verification data

  • Fraud-prevention identifiers

Paddle acts as a Merchant of Record and a Data Controller for payment-related data.
Please review Paddle’s privacy policy for more details.

3. How We Use Your Data

We process personal data only when legally permitted under GDPR (contractual necessity, legitimate interests, consent, or legal obligation).

We use your data to:

  • Provide access to the courses and account dashboard

  • Process and manage payments (via Paddle)

  • Deliver purchased content

  • Send transactional emails (receipts, login links, course access)

  • Provide customer support

  • Improve website performance and user experience

  • Comply with tax, legal, and regulatory requirements

  • Prevent fraud and secure the platform

We do not sell or rent your personal data to any third parties.

4. Legal Basis for Processing (GDPR)

We process your data under the following bases:

  • Contract – To deliver your purchased course or service

  • Consent – For email marketing, analytics cookies, or optional data

  • Legal obligation – Recordkeeping for VAT/GST compliance

  • Legitimate interests – Improving services, preventing fraud, protecting systems

5. How Your Data Is Shared

We only share information when necessary to operate the service, including:

5.1. Paddle (Merchant of Record & Payment Processor), PayPal

Paddle and PayPal process your payments securely and may request personal data required for:

  • Fraud screening

  • Payment authentication

  • Tax compliance

  • Transaction receipts and invoicing

5.2. Service Providers

We may use additional third-party services for:

  • Email delivery (e.g., SendGrid, MailerLite)

  • Analytics (e.g., Google Analytics, Plausible)

  • Cloud hosting and backups

  • Online course delivery infrastructure

All third-party providers are GDPR-compliant and act as Data Processors under data processing agreements.

5.3. Legal Requirements

We may disclose data if required:

  • To comply with applicable laws

  • To respond to lawful government requests

  • To protect our legal rights and enforce our Terms

6. Cookies and Tracking Technologies

We use cookies to:

  • Provide website functionality

  • Enable login sessions and course access

  • Analyze site traffic and performance

  • Manage marketing preferences (only with consent where required)

You may control or delete cookies through your browser settings.

A detailed Cookie Policy may be provided separately.

7. Data Retention

We retain personal data only as long as necessary for:

  • Contract fulfillment

  • Legal and financial recordkeeping

  • Tax and audit obligations

  • Customer service and account recovery

Payment-related data is stored by Paddle in accordance with their retention policies.

8. Your Rights (GDPR)

If you are located in the EEA, UK, or other jurisdictions with similar laws, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (right to be forgotten)

  • Withdraw consent for optional processing

  • Object to certain processing activities

  • Request data portability

  • Lodge a complaint with your local data authority

To exercise any rights, email us at [Insert Contact Email].
We may require identity verification.

9. Data Security

We use industry-standard security practices to protect your information, including:

  • Encrypted HTTPS traffic

  • Secure database storage

  • Restricted access to personal data

  • Regular security audits

No system is entirely secure, but we take every reasonable precaution to protect your data.

10. International Data Transfers

Our servers or third-party providers may be located outside your country.

When transferring data internationally, we rely on:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Other GDPR-compliant safeguards

11. Children’s Privacy

Our website and courses are not intended for users under 16 years old.

We do not knowingly collect personal data from children.

12. Links to Third-Party Websites

Our website may contain links to external websites.

We are not responsible for the privacy practices of third-party sites.

13. Updates to This Privacy Policy

We may update this policy from time to time.
The “Last Updated” date at the top will reflect the latest revision.

Material changes will be communicated through:

  • A website notification, or

  • Email (when appropriate)

14. Contact Us

For privacy concerns or data rights requests, contact us at:

Character Art School
Email: community@characterartschool.com
Website: https://CharacterArtSchool.com

Character Art School is a division of Epic Legend PTY (LTD).