Privacy Policy
Clay Workshop (“we”, “us”) provides pottery education and related services. This policy explains what we collect, why we collect it, how we protect it, and the choices you have.
Introduction
This Privacy Policy applies to our website, course enrollment flows, customer support, and communications (collectively, the “Services”). We aim to keep our practices lawful, fair, transparent, and proportionate.
- Controller: Clay Workshop Courses (brand name used on clayworkshop.click).
- Scope: Information you provide, and data generated by your use of the Services.
- Not covered: Third-party websites you navigate to from our Services.
Data We Collect
We collect data to operate the Services, provide support, improve course quality, and comply with legal obligations. Categories may include:
- Contact details (name, email, phone number if supplied).
- Enrollment preferences (course dates, time zone, skill level).
- Support messages and attachments you send us.
- Billing-related metadata from payment providers (we do not store full card numbers).
- Device and usage data (pages viewed, clicks, referrer, approximate location).
- Technical identifiers (IP address, browser type, OS version).
- Cookies and similar technologies (see dedicated section below).
- Crash/diagnostics information where enabled.
We do not intend to collect sensitive personal data (e.g., health, biometric, religious beliefs). Please avoid sending it via forms or support channels.
How We Use Data
We process personal data only when we have a lawful basis. Depending on your region, this may include contract necessity, consent, legitimate interests, or legal obligations.
- Provide and manage course enrollments and communications.
- Authenticate sessions and maintain service reliability.
- Deliver essential service updates (schedule changes, policy updates).
- Respond to support requests and prevent fraud/abuse.
- Understand what content is helpful and improve course materials.
- Measure performance and fix errors to enhance usability.
- Run aggregated reporting to guide product decisions.
- With consent where required, personalize communications.
- Contract: to deliver courses you request.
- Legitimate interests: to keep the site secure, improve UX, and prevent abuse.
- Consent: for non-essential cookies and optional marketing.
- Legal obligation: to comply with tax, accounting, or applicable law requirements.
Security
We use administrative, technical, and organizational measures designed to protect personal data. No method of transmission or storage is 100% secure, but we work to reduce risk through least-privilege access, monitoring, and incident response processes.
- Use secure transport (HTTPS) for website delivery.
- Limit internal access and log access where appropriate.
- Maintain backups and recovery processes.
- Review and update controls based on risk.
- Use strong, unique passwords where applicable.
- Be cautious with emails and links (phishing protection).
- Keep your browser/device updated.
- Contact us promptly if you suspect unauthorized access.
Retention
We retain personal data only for as long as needed for the purposes described in this policy, unless a longer retention period is required or permitted by law.
- Support messages: typically retained to track and resolve issues.
- Enrollment records: retained for course delivery and accounting needs.
- Analytics: retained in aggregated form where feasible.
International Transfers
We may process data in countries other than where you live. Where required, we use appropriate safeguards (such as contractual clauses) to protect your information.
Your Rights
Depending on your location, you may have rights to access, correct, erase, restrict, object to processing, or request portability. You may also opt out of non-essential cookies.
- Use the “Request a copy” or “Delete your data” tools on this page.
- Or contact us directly using the contact details below.
- We may ask you to verify identity to protect your information.
- We aim to respond within a reasonable timeframe.
- Complex requests may require additional time as permitted by law.
- We’ll explain if we can’t fulfill a request and why.
Children’s Privacy
Our Services are not directed to children under 13 (or the age defined by local law). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will revise the “Last updated” date and, when appropriate, provide additional notice.
Contact
Email: [email protected] | Phone: +1 (415) 555-0132
If you contact us, include the email you used with Clay Workshop and a description of your request. Do not include sensitive information.
For your security, verification codes in our request forms expire in 10:00.