Privacy Policy
This policy explains what personal data Sunny Valley Studio collects when you visit courses.sunnyvalleystudio.com or enrol in a course, why we collect it, how long we keep it, and what rights you have. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), which applies because we are established in Poland.
Who is responsible for your data
The data controller is:
- Sunny Valley Studio
- Email: Contact form
We have not appointed a Data Protection Officer, as we are not required to. Privacy questions and requests should go to the email address above.
What we collect, why, and on what legal basis
| Data | Why we process it | Legal basis (GDPR Art. 6) |
|---|---|---|
| Name and email address | To create your account, give you access to courses you have bought, and provide support | Performance of a contract — Art. 6(1)(b) |
| Record of what you bought and when | To give you access to the right courses, handle refunds and support, and meet our own accounting obligations. Your billing address and payment details are collected by Teachable as seller of record — see section 4 — and are not held by us. | Contract — Art. 6(1)(b); legal obligation — Art. 6(1)(c) |
| Course progress and completion | To show you where you left off and to issue certificates where offered | Contract — Art. 6(1)(b) |
| Support messages and comments you post | To answer you and to run the course community | Contract — Art. 6(1)(b); legitimate interest — Art. 6(1)(f) |
| Marketing emails (newsletter, launch announcements) | To tell you about new courses and content | Your consent — Art. 6(1)(a). You may withdraw it at any time via the unsubscribe link. |
| Website usage measurement (pages viewed, referring site, country) | To understand which pages are read and which content is worth making more of | Your consent — Art. 6(1)(a) — where cookies or an identifier are used. Where you decline, we receive anonymous cookieless counts only, on legitimate interest — Art. 6(1)(f). |
You are never obliged to give us personal data, but we cannot deliver a course you have bought without an account, and we cannot email you without an email address.
Cookies and similar technologies
Strictly necessary cookies
Our course platform, Teachable, sets cookies that are required for the site to work: keeping you logged in, remembering the contents of your cart, and protecting the checkout against fraud. These cannot be switched off without breaking the site, and under the ePrivacy rules they do not require your consent.
Our analytics — off until you say otherwise
We use Google Analytics 4 (property G-0LKLX03PS4) to count page visits and see which pages are read. It is loaded with Google Consent Mode set to denied by default, so nothing is written to your device when you arrive.
If you choose Accept analytics in our cookie banner, Google Analytics sets its own cookies so we can tell a returning visit from a new one. If you choose Essential only, it still runs but without cookies and without any identifier — we get anonymous counts, and we cannot follow you between visits or across other websites.
We do not run advertising, remarketing or ad-personalisation tags of any kind, and we do not sell or share your data with advertisers.
You can change your choice at any time:
Tracking run by Teachable, which we do not control
Our courses are hosted on Teachable, and Teachable loads its own measurement tools on these pages for its own purposes as the platform operator. These include a separate Google Analytics property (G-SL8LSCXHSV), a Google Tag Manager container, Heap and Segment analytics, and affiliate tracking cookies. We do not control this collection, cannot switch it off, and do not receive the data. Teachable's own privacy policy governs it: teachable.com/privacy-policy
Teachable displays its own cookie consent notice on checkout pages to visitors who are not signed in. We cannot customise that notice or extend it to other pages, and our banner does not appear on those pages to avoid showing you two notices at once.
You can block or delete cookies at any time in your browser settings. Blocking strictly necessary cookies will prevent you from logging in or completing a purchase.
Who else receives your data
We do not sell, rent, or trade your personal data. We share it only with the service providers we need in order to run the school.
Teachable (Teachable, Inc., 470 Park Ave South, New York, USA) acts in two distinct roles. As our processor it hosts the school, your account, your course progress and platform emails, under the data processing agreement at teachable.com/dpa. As an independent controller it is the seller of record for your purchase: Teachable collects your billing name, address, country and any VAT number, handles your card payment, determines and remits VAT, and issues your invoice. We never see or store your card details.
Google (Google Ireland Ltd / Google LLC) provides the website measurement described in section 3.
EMAIL PROVIDER — MailerLite. sends our newsletters and course announcements.
We may also disclose data where we are legally required to do so.
Transfers outside the European Economic Area
Some of the providers above are based in the United States, so your data may be transferred there. These transfers are covered by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, together with the safeguards set out in each provider's data processing agreement. You may request a copy of the safeguards that apply by writing to us.
How long we keep your data
| Data | Retention |
|---|---|
| Account and course access | For as long as your account exists, and for 12 months after you ask us to close it |
| Records of your purchase that we hold | For as long as our own accounting and tax obligations require. Your invoice is issued and retained by Teachable as seller of record, under their retention rules, not ours. |
| Newsletter subscription | Until you unsubscribe |
| Support correspondence | 12 months from the last message |
| Your cookie choice | Stored in your own browser only, until you clear it or change it |
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you, and receive a copy of it
- have inaccurate data corrected
- have your data erased, where we have no continuing legal basis to keep it
- restrict how we use your data while a dispute about it is resolved
- receive your data in a portable, machine-readable format, or have it sent to another provider
- object to processing we carry out on the basis of legitimate interest
- withdraw consent at any time, where our processing is based on consent. Withdrawing it does not affect anything we did lawfully before you withdrew it.
To exercise any of these, use this contact form. We will respond within one month.
If you believe we have handled your data unlawfully, you may complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. If you live in another EEA country, you may complain to your own national authority instead.
Automated decision-making
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Children
Our courses are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, please contact us and we will delete it.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. If we make a change that materially affects how we use your data, we will tell registered students by email rather than relying on you to re-read this page.
Sunny Valley Studio · courses.sunnyvalleystudio.com