Privacy Policy

Overview

SolidCrest Herbcraft (“we”, “us”) provides premium herb gardening courses. This policy explains what personal data we collect, how we use it, and the choices you have. We aim for clarity and restraint: we collect only what we need for a stable learning service.

Data we collect

• Account data: name, email, password (hashed).
• Transaction data: selected courses, payment confirmations (handled by our payment processor; we do not store full card numbers).
• Communications: emails you send us and form submissions.
• Technical data: IP address, device type, and basic analytics (page views, referrers) to maintain service reliability.
• Preferences: theme setting, cookie consent, fallows and cart items (stored locally in your browser).

How we use data

• Provide and improve the course platform.
• Process orders and deliver course access.
• Respond to support requests and feedback.
• Detect abuse and maintain security.
• Comply with legal obligations.

Legal bases

We process personal data based on contract (when you purchase), consent (for optional communications and non-essential cookies), and legitimate interests (service reliability and security).

Sharing

We do not sell personal data. We share limited data with processors who help run our service (e.g., cloud hosting, payment processing, analytics). Each processor is bound by contract to protect data and act only on our instructions.

Cookies and local storage

We use essential cookies for session management. We also store theme preference, fallows, and cart in your local storage to improve your experience. You can clear these at any time in your browser. Non-essential cookies are used only with your consent.

Data retention

We retain account and transaction data for as long as your account is active and as required by law. Support communications are retained to maintain context for future requests and are periodically reviewed for deletion.

Security

We use encryption in transit, hashed passwords, and access controls. While no method is perfect, we review our controls regularly and limit the data we store to what is necessary.

Your rights

• Access, correction, and deletion of your personal data.
• Objection to processing or request restriction, where applicable.
• Portability of data you provided to us.
• Withdrawal of consent at any time for optional processing.

Contact [email protected] to exercise your rights. We may verify your identity before acting on a request.

International transfers

When we transfer data outside your jurisdiction, we use appropriate safeguards such as standard contractual clauses or similar mechanisms permitted by law.

Children

Our courses are intended for adults. If we learn that we have collected data from a child without appropriate consent, we will delete it.

Changes

We may update this policy to reflect changes in our service or the law. We will post the updated policy with a new effective date.