Privacy Policy

Overview

PatientRise Atelier (“we”, “us”, “our”) provides online drawing education. This policy explains what personal data we collect, why we collect it, how we process it, and your rights. We do not sell personal data.

Information we collect

• Account and contact data: name, email, optional phone.
• Course activity: progress, assignments, feedback preferences.
• Transactional data: purchases, invoices, applied coupons.
• Technical data: IP address, device, approximate location, cookies.

How we use data

• Provide course access and customer support.
• Improve curriculum and site reliability.
• Send essential service emails (and optional updates with consent).
• Detect abuse and maintain security.

Legal bases

We process data under contract (to deliver courses), legitimate interests (to improve and secure services), consent (for marketing), and compliance with legal obligations.

Sharing

We share data with service providers (e.g., payment, analytics, email delivery) under contracts requiring confidentiality and security. We do not permit providers to use data for their independent marketing.

Data retention

We retain personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. We regularly review and minimize stored data.

Your rights

• Access, rectify, or delete your personal data.
• Object to or restrict certain processing.
• Portability of data you provided to us.
• Withdraw consent where applicable.

To exercise rights, email [email protected]. We will verify your request and respond within legal timeframes.

Cookies

We use essential cookies for authentication and preferences and optional cookies for analytics. You can manage preferences through our cookie banner and your browser settings.

Security

We employ administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls, and routine security reviews. No method is 100% secure.

International transfers

Where data moves across borders, we rely on standard contractual clauses and comparable safeguards.

Children

Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child provided data, contact us to remove it.

Changes

We may update this policy to reflect operational, legal, or regulatory changes. Material updates will be communicated via the site or email.

Contact

If you have questions about this policy or our practices, email [email protected] or call +1 (415) 555-0137.