PRIVACY POLICY

We will keep this list reasonably current. If you want to know exactly who has your data at any given moment, email us at [email protected] and we will tell you.

5.2 Advertising partners. We use pixels and tags that allow advertising platforms to recognize your device and show you our ads elsewhere. Under some U.S. state privacy laws this can be considered “sharing” for cross-context behavioral advertising, or a “sale.” See Section 9 for how to opt out.

5.3 Legal and safety. We may disclose information if required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to protect our rights, enforce our Terms, investigate fraud or unauthorized distribution of our Products, or protect the safety of any person.

5.4 Business transfers. If The Alcove LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to honor this Policy or give you notice and a choice.

5.5 With your direction. We share information where you ask us to, such as when you publicly post a testimonial or agree to be featured.

5.6 Aggregated and de-identified data. We may create and use aggregated or de-identified data — for example, “62% of buyers are service businesses” — that cannot reasonably identify you. We will not attempt to re-identify it.

6. COOKIES AND TRACKING

Our full Cookie Policy sets out every category, every vendor, how long each cookie lasts, and how to turn the non-essential ones off. This section is the summary.

6.1 What we use.

· Strictly necessary — keep you logged in, hold your cart, process checkout, and secure the site. These cannot be turned off without breaking the site.

· Analytics — help us understand how people find and use the site.

· Advertising — let us measure ad performance and show you relevant ads on other platforms.

· Pixels, web beacons, and tags — small snippets in pages and emails that report engagement.

6.2 Your choices. Most browsers let you block or delete cookies through their settings; blocking necessary cookies may prevent checkout or course access from working. You can opt out of Google Analytics using Google’s browser add-on, and you can manage advertising preferences through your ad platform account settings and through industry opt-out tools such as the Digital Advertising Alliance and Network Advertising Initiative opt-out pages.

6.3 Do Not Track and Global Privacy Control. Browsers send “Do Not Track” signals inconsistently and there is no common standard, so we do not respond to DNT. We do treat a Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for the browser sending it.

7. MARKETING EMAILS AND TEXT MESSAGES

7.1 Email. If you buy from us or opt in, we may send you marketing emails. Every marketing email includes an unsubscribe link, and we honor unsubscribes promptly. You cannot unsubscribe from transactional messages — receipts, delivery emails, and notices about a Product you bought — while you hold an active purchase.

7.2 Text messages. If you provide a mobile number and consent to texts, message and data rates may apply. Reply STOP to opt out and HELP for help. Consent to marketing texts is not a condition of purchase.

8. HOW LONG WE KEEP INFORMATION AND HOW WE PROTECT IT

8.1 Retention. We keep personal information for as long as needed for the purposes described in this Policy. In practice that means: order and payment records for at least seven (7) years for tax, accounting, and dispute purposes; account and course access records for as long as your access is active plus a reasonable period after; marketing contact data until you unsubscribe or ask us to delete it; and analytics and log data for the retention period set by the relevant provider. We may retain information longer where required by law or where necessary to resolve a dispute or enforce our agreements.

8.2 Security. We use commercially reasonable administrative, technical, and physical safeguards, and we rely on our vendors’ security programs for data they hold. But no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential.

9. YOUR CALIFORNIA PRIVACY RIGHTS

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), gives California residents specific rights. We offer the rights below to California residents whether or not the CCPA currently applies to us by its own terms, because we would rather just honor them.

9.1 Categories we have collected in the last 12 months. Identifiers; customer records information; commercial information; internet or other electronic network activity information; approximate geolocation; audio/visual information (if you attend a recorded live session); and professional or employment-related information. Sources, purposes, and recipients are described in Sections 2, 3, and 5.

9.2 Sale and sharing. We do not sell personal information for monetary consideration. We do use advertising cookies and pixels, which may constitute “sharing” for cross-context behavioral advertising under the CCPA. We do not knowingly sell or share the personal information of consumers under 16.

9.3 Your rights.

· Know / access — what we collected, from where, why, and with whom we shared it, and a copy of your information.

· Delete — ask us to delete personal information we collected from you, subject to legal exceptions (for example, we must keep transaction records for tax purposes).

· Correct — ask us to fix inaccurate personal information.

· Opt out of sale/sharing — tell us to stop sharing your information for cross-context behavioral advertising.

· Limit use of sensitive personal information — we do not use or disclose sensitive personal information for purposes requiring this right, so there is nothing to limit.

· Non-discrimination — we will not deny you products, charge you a different price, or give you a lesser experience for exercising these rights.

9.4 How to exercise them. Email [email protected] with the subject line “Privacy Request” and tell us which right you want to exercise. We will verify your identity by matching your request against the email address and order details we have on file, and may ask for additional information for a high-risk request. We respond within 45 days, and may extend once by another 45 days with notice.

9.5 Authorized agents. An authorized agent may submit a request on your behalf with written permission signed by you; we may still contact you to confirm.

9.6 Shine the Light. California residents may request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

10. YOUR RIGHTS IN OTHER U.S. STATES

If you are a resident of a state with a comprehensive consumer privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect — you may have rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale, and certain profiling. Some states also give you the right to appeal a denied request. Submit requests the same way, at [email protected], subject line “Privacy Request.” If we deny your request, we will explain why and tell you how to appeal.

11. YOUR RIGHTS IN THE EEA AND UK

If you are in the EEA or UK, you have rights to access, rectify, erase, restrict, and object to processing of your personal information, to data portability, and to withdraw consent at any time (which does not affect processing already carried out). Contact [email protected]. You also have the right to lodge a complaint with your local supervisory authority.

International transfers. We are based in the United States and our service providers are primarily U.S.-based, so your information will be transferred to and processed in the United States, which may not offer the same level of data protection as your jurisdiction. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

12. CHILDREN

The Atelier is intended for people 18 and over. We do not knowingly collect personal information from anyone under 18, and we do not direct the site to children under 13. If you believe a child has provided us personal information, email [email protected] and we will delete it.

13. THIRD-PARTY WEBSITES

The site may link to third-party websites, platforms, and social media accounts. We are not responsible for their content or privacy practices. Read their policies before providing information.

14. CHANGES TO THIS POLICY

We may update this Policy from time to time. We will post the revised version with a new “Last updated” date, and for material changes we will provide additional notice on the site or by email where practical. Your continued use after the update constitutes acceptance.

15. CONTACT US

Questions, requests, or complaints about privacy:

The Alcove LLC d/b/a The Agreements Atelier. Email address: [email protected]

We read every one of these. If something in here isn’t clear, ask us and we’ll explain it.