The logo for our online copywriting course features a black circle with the words "Copywriting 101" in the circumference, and "Enhancement Marketing" in the middle

Privacy Policy


Privacy Policy

Last Updated: April 5, 2025

Your privacy matters to us. This Privacy Policy explains how Enhancement Marketing (operated by KNOPP Studios Ltd) collects, uses, and discloses your personal information when you use our website and services. It applies to the website enhancementmarketing.com (the "Site"), our online copywriting course platform, one-on-one coaching communications, and the private Facebook group for students (collectively, the "Services"). By using our Site or Services, you agree to the terms of this Privacy Policy.

We aim to be transparent and use plain English here. In short, we collect only the information we need to run our course and provide a good experience for you. We do not sell your personal information to anyone. Below we detail what information we collect, how we use it, and your rights regarding that data.

1. Information We Collect

We collect a few types of information from you, mainly to set up your account, process your purchase, and improve your experience. Here’s what we collect and how:

  • Account Information: When you register for our course, we ask for some basic personal information – primarily your name and email address. We need these to create your user account and authenticate you when you log in. Your email is also used as our primary way to contact you about course updates, receipts, or support. In some cases, you might provide additional profile details (such as a username or profile photo on our course platform), but those are optional and usually for your own personalization. We keep your account information private and secure.

  • Payment Information: If you decide to purchase our course, you will provide payment details. Importantly, we do not directly collect or store your sensitive payment information (like credit card numbers). Instead, we use Stripe as our third-party payment processor. When you enter your payment details, you are actually doing so on Stripe’s secure system. Stripe then provides us with a confirmation of payment. We receive information such as your name, email, billing address (if provided), and the amount of the purchase – but we never see your full credit card number or banking info. Stripe may send us a partial card identifier (like the last 4 digits and card type) for record-keeping, but that's it. (For details on how Stripe handles your data, you can refer to Stripe’s privacy policy on their website.)

  • Course Usage Data: As you use our online course platform (for example, watching video lessons or taking quizzes), we might collect information about your progress. This can include data like which modules you've completed, quiz scores, and time spent on lessons. We collect this to help you track your own progress and to help us understand how students engage with the material. This data is tied to your account, so we know, for instance, that you (by username/email) finished Lesson 3. Only our team and you have access to your individual progress data; we might also use aggregated data (e.g., "80% of students finished Lesson 3") to improve the course.

  • Website Usage Data (Analytics): When you visit our Site (including the main landing pages and the course platform pages), certain information gets logged automatically. This may include your IP address, the type of device or browser you're using, the pages you visit, and the dates/times of your visits. We also note where you came from (for example, if you clicked a Google search result or a link from an email). We use Google Analytics to help collect and analyze this information. This data is generally aggregated and does not identify you personally by name. It helps us see overall patterns – like which pages are most popular or if people are spending a long time on a particular page – so we can optimize the site. However, because things like IP address or device IDs could be considered personal data in some jurisdictions, we treat this data carefully. (More on analytics and cookies in the Cookies and Tracking section below.)

  • Cookies and Similar Technologies: We use cookies (small text files stored on your device) and similar technologies to make our site work properly and to understand usage. For example, when you log in to the course, a cookie helps keep you logged in as you navigate between lessons. We also use cookies for Google Analytics, which helps track site usage as mentioned. Cookies can also remember certain preferences (like if you dismissed a notification so it doesn’t keep showing up). For more details, see Cookies and Tracking below.

  • Communications (Emails and Messages): If you contact us via email or through a contact form, we will collect whatever information you choose to provide in that communication. Typically, this includes your email address (so we can reply) and the content of your message (which might include additional personal information depending on what you share with us). We keep these communications for record-keeping and to help address any issues you raise. Similarly, if we reach out to you (for example, sending a support email or answering a question you asked), we will have a record of that communication.
    Additionally, if you participate in the private Facebook group, we will see your posts and comments in that group. Your Facebook profile information (like your name and profile photo) may be visible to other group members and to us, but note that Facebook independently collects and handles that information under their own privacy policy. We do not export or store your Facebook content in our systems; we simply view and moderate the group on Facebook’s platform.

  • Other Voluntarily Provided Information: You might provide information in other contexts – for example, responding to a survey about the course, or as part of a coaching session (e.g., telling us about your business so we can give better advice). We will treat this information as confidential. If we run surveys or ask for testimonials, it’s up to you what you want to share. Any feedback you give helps us improve the course. If we want to use a quote from you as a testimonial on our site, we will ask for your explicit permission before doing so.

We make an effort to only collect information that we truly need. You always have the choice not to provide certain information, but keep in mind that if you decline to provide necessary info (like an email for an account or payment details for a purchase), you might not be able to use the Service.

2. How We Use Your Information

We use the information we collect to operate and improve our Services, to communicate with you, and to protect our platform. Here’s a breakdown of the purposes for which we use your data:

  • Providing the Service: First and foremost, we use your information to deliver our course and services to you. This includes creating and maintaining your user account, giving you access to the course content you've purchased, and enabling the one-on-one coaching sessions and community features. For example, our system uses your login credentials to authenticate you and show you your course progress. If the course platform sends out reminder emails like "You haven't logged in for a week" or "Lesson 4 is now available," it uses your info to do that.

  • Processing Transactions: We use payment and order information to process your enrollment. Your name and email (and possibly billing address) are used on invoices or receipts. We keep a record of payments for accounting and to verify that you have paid for access. If you are on a payment plan, we use this info to charge your payment method at the agreed intervals via Stripe.

  • Communicating with You: We use your email (and possibly your name in greetings) to communicate with you. There are a few types of communications you may receive:

    • Transactional Emails: These are emails that are necessary for the service. For example, when you sign up, you get a welcome email or a receipt. If you forget your password, we send a reset link. If we update the course or schedule a coaching session, we might email details. These are not promotional; they're part of making sure you have the info you need to use the course.

    • Course Updates and Announcements: We might send emails to let you know about new content added to the course, upcoming live Q\&A sessions (if we have those), or reminders about your progress. These are meant to enhance your learning experience.

    • Customer Support: If you reach out with a question or problem, we'll use your info to respond. We might also proactively contact you if we notice an issue with your account (for instance, if a lesson didn't unlock correctly or if a payment didn’t go through on the second installment).

    • Marketing and Newsletters (Limited): We understand you don’t want spam. We may occasionally send you newsletters or promotional emails, but only if they are relevant to our course or related offerings. For instance, we might announce a new advanced course or a workshop that complements what you've learned. We keep such emails infrequent. And of course, you can opt out of these at any time (see Your Rights & Choices below). If you're not interested, no hard feelings – you can unsubscribe and we'll stop.

  • One-on-One Coaching: If your package includes coaching, we'll use your contact info to arrange sessions (e.g., emailing to schedule a Zoom call or phone call). During coaching, you might share details about your business or ask specific questions. Our coaches might keep notes on what advice was given or what challenges you are facing, so that we can follow up effectively in later sessions. We treat these coaching notes as confidential and use them solely to provide you better service. We do not share your individual coaching discussions with anyone outside our small team of coaches.

  • Community (Facebook Group) Management: If you're in the Facebook group, we use your info to confirm you're a customer (only course members can join). For example, if your Facebook account name/email differs from the one you signed up with, we might ask you to verify your identity as a student before approving group access. We also may occasionally use email to remind group members of the community guidelines or to invite you to join the group if you haven’t already. Within the group, as administrators, we might use information about your group activity to moderate the community (e.g., if someone reports a post you made that violates rules, we would review it).

  • Improving Our Services: We continuously want to make our course better. We might analyze the data we collect to identify trends or areas for improvement. For instance, if many users stop watching videos around the 10-minute mark, maybe our videos are too long and we should adjust the format. If a majority of students get a particular quiz question wrong, maybe the material needs clarification. We also look at site analytics to see if our website is user-friendly – for example, if a lot of people visit the pricing page but don’t sign up, that tells us something could be improved in our messaging. All this analysis is typically done on aggregated data (we look at overall patterns, not "John Doe did this, Jane Smith did that" in a personalized way).

  • Personalization: Over time, we might use data to personalize your experience. For example, if the platform supports it, we could greet you by name, or suggest lessons you haven’t finished. If we know you have an interest in a particular sub-topic (say, email marketing copy), and we create new content on that, we might notify just the people for whom it's most relevant.

  • Security and Fraud Prevention: Information like IP addresses, log-in history, and usage patterns can help us detect and prevent security incidents. For instance, if we see an IP address from a far-off location attempting to log in to your account, we might flag it or alert you. If multiple users share credentials (which they shouldn't), unusual access patterns might hint at that. We use this info to keep your account safe and to protect our content from unauthorized access. We also use contact info to verify identity if you have a support request that involves sensitive changes (like changing an email associated with an account).

  • Legal Compliance: Sometimes we may need to use or retain your information to comply with laws. For example, for tax and accounting reasons we keep records of transactions. If required by law enforcement or regulatory authorities (with proper documentation like a warrant or court order), we may process and provide data as needed. We also use info in compliance efforts, such as honoring "Do Not Email" lists (to comply with anti-spam laws) or age-related restrictions if it applied (currently we don't restrict by age beyond what's noted, but if that changed, we would use birthdate info if we had it to enforce it).

  • Other Purposes (with notice/consent): If we ever want to use your information for a purpose that isn't covered by this Privacy Policy, we'll get your consent if required. For instance, if down the line we partner with another company to offer a new service and it requires sharing some of your info, we would inform you and, if necessary, ask permission.

In summary, we use your data to run our business and provide you with a great learning experience – account creation, course delivery, communication, improvement, and safety. We do not use your personal information for any unrelated marketing purposes without your consent, and we try to be considerate in how often we message you.

3. Cookies and Tracking

Like most websites, we use cookies and similar tracking technologies to collect usage data and improve our Site. Here's more detail on how we use these tools and how you can manage them:

  • What Are Cookies: Cookies are small text files placed on your device (computer, tablet, smartphone) when you visit a website. They allow the website to recognize your device and remember certain information about your visit. There are also similar technologies like web beacons (tiny graphic images) or local storage, but for simplicity, we'll refer to all of these as "cookies."

  • Essential Cookies (Functionality): These are cookies that are necessary for our Site and course platform to function properly. For example, when you log into your account, an essential cookie keeps you logged in as you navigate from page to page, so you don't get logged out every time you click something. If our site has a shopping cart or checkout page (for purchasing the course), cookies would remember what you've selected. Without these, basic features may not work.

  • Preference Cookies: These cookies remember choices you may have made, such as your preferred language (if we support multiple languages) or presentation settings. They make the site more user-friendly for you.

  • Analytics Cookies: We use Google Analytics to understand how visitors find and use our Site. Google Analytics sets cookies that track things like how long you stay on a page, what pages you click on, if you've visited before, etc. This information is aggregated and helps us see overall patterns in site usage. For instance, analytics can tell us "X number of people visited the site this week, and the most viewed page was the course curriculum page." It does not tell us personal details like "John Doe visited at 3 PM." Google Analytics might record your IP address, but we have configured it to anonymize IP addresses in many cases (Google shortens or masks the IP as a privacy measure). We don’t get personally identifying information through analytics – it's mostly numbers and graphs for us. Google may use and store this information as described in their privacy policy. If you're curious, Google also provides a browser add-on that lets you opt-out of being tracked by Google Analytics across all websites.

  • Third-Party and Advertising Cookies: Currently, we do not run third-party ads on our Site, so we don’t use ad-targeting cookies that some sites use. If in the future we ever partner with advertisers or use retargeting (like showing our ads on Facebook to people who visited our site), we would update this policy. Right now, the primary third-party cookies in use would be from Google (analytics) and possibly from Stripe (during payment, Stripe might set cookies on their checkout domain for fraud prevention and session management). If you interact with the Facebook group through our site (like clicking a link to it), Facebook might set cookies too, but that’s similar to any link to Facebook.

  • Do Not Track (DNT): Some browsers let you send a "Do Not Track" signal to websites, indicating you don't want to be tracked. However, there's no standardized way that all websites interpret DNT. At this time, our Site does not respond differently to a DNT signal – we treat all visitors according to this privacy policy. If you want to minimize tracking, it's more effective to use the opt-out methods described (like blocking cookies or using private browsing).

  • Your Choices for Cookies: You have several options to control or limit how cookies are used on your device:

    • Browser Settings: Most web browsers allow you to refuse or delete cookies. Check your browser’s help section for instructions on how to delete cookies or disable them entirely. Keep in mind, if you disable all cookies, our Site’s essential features (like logging in) may not work properly.

    • Cookie Banner/Preferences: If our Site shows a cookie consent banner or settings, you can use that to adjust your preferences (accept only certain types of cookies, etc.). We comply with cookie consent requirements as applicable.

    • Google Analytics Opt-Out: As mentioned, Google offers an Google Analytics Opt-out Browser Add-on that you can install which stops Google Analytics from collecting information on your browser for any site.

    • Advertising Opt-Outs: While we aren’t running targeted ads, if you want to opt out of interest-based advertising cookies in general, websites like the Network Advertising Initiative (NAI) opt-out page or Your AdChoices in Canada allow you to manage preferences for many advertising networks.

In summary, we use cookies to provide and improve our services, and you have control over how cookies are used through your browser and other tools. We do not currently use cookies for third-party advertising purposes on our Site.

4. How We Share Your Information

We take your privacy seriously, and we do not sell your personal information to third parties. However, we do share certain information with third parties in the following circumstances:

  • Service Providers and Partners: We use a number of trusted third-party companies to help us run our business and provide the Services to you. These third parties only receive the information necessary for them to perform their specific services, and they’re contractually obligated to protect your data and use it only for our purposes. Key examples include:

    • Stripe (Payment Processor): As described, Stripe handles all payment transactions. When you enter payment info, that data goes directly to Stripe. Stripe then tells us if the payment was successful and provides basic details like your name, email, and amount paid for our records. We may also see your billing address if it’s included in the transaction for receipt purposes. We rely on Stripe’s security and PCI-compliance to safeguard your payment info. (Stripe’s privacy policy is available on their site if you want more details on how they handle your data.)

    • Web Hosting and Course Platform: Our main website pages (like the homepage and info pages) are hosted on GitHub Pages (a hosting service by GitHub, Inc.). GitHub may automatically log basic technical info (such as IP addresses and request details) when serving our site, primarily for performance monitoring and security. Our course itself is hosted on a private server that we manage (using the Moodle platform). This server might be physically located in a data center operated by a third-party hosting provider. That means your course data (account info, progress, etc.) is stored on servers that we rent or own space on. The hosting provider’s role is simply to keep the servers running and secure at the infrastructure level; they do not access your data for their own purposes. We ensure any hosting provider we use has appropriate security measures in place (firewalls, encryption, etc.).

    • Email and Communication Services: We use Google Workspace for our business email. So, when you email admin@knoppstudios.com, your email is stored on Google’s servers (in our Gmail account). Google is a service provider in this context, meaning they process emails on our behalf. We also may use Gmail to send out some of our automated or group emails (for example, announcements might be sent via our Google mail if the volume is low, or via an email marketing tool if high volume). If in the future we use an email marketing service (like Mailchimp, SendGrid, etc.) for newsletters, that would involve sharing your email address and name with that provider. We would ensure any such provider is reputable and compliant with privacy laws.

    • Analytics and Tracking: We share usage data with Google Analytics, as explained. Google acts as a data processor by analyzing how users use our site. They have their own strict privacy and security standards. We have not enabled any features that allow Google to use our data for ad purposes (like we haven’t linked Google Analytics to Google Ads for retargeting, etc., as of this writing). The data we see from Google is aggregated statistics.

    • Facebook: If you join our private Facebook group, some information is inherently shared with Facebook. For example, Facebook knows you joined the group, and your interactions (posts, comments, reactions) are stored on Facebook’s platform and visible to other group members. We (Enhancement Marketing) do not provide Facebook with your course data or personal info from our side, but Facebook obviously has whatever information you provide on their platform. Our involvement is that we might know your Facebook profile name or email to invite you to the group or verify you. Facebook is a separate entity with its own privacy policy. We recommend reviewing Facebook’s privacy settings to control what you share on that platform. Remember, anything in the group is subject to Facebook’s data practices.

    • Other Tools: There might be other ancillary tools we use that process data. For example, if we have a support ticket system or chat widget on the site (not currently, but possible in future), that tool would process any info you input. Or if we conduct a survey using Google Forms or Typeform, that platform will handle your responses for us. In all cases, we choose reputable providers with privacy commitments.

  • Legal Requirements and Safety: We may disclose your information if required by law or if we have a good-faith belief that such action is necessary to (a) comply with a legal obligation (for example, to respond to a subpoena, court order, or legally binding request by authorities), (b) protect and defend our rights or property, (c) prevent or investigate possible wrongdoing in connection with the Services (such as fraud or security incidents), (d) protect the personal safety of users of the Services or the public, or (e) protect against legal liability. In plain terms, if law enforcement properly comes knocking, or if a user is doing something harmful that we need to report, we will share data as needed in those scenarios.

  • Business Transfers: If KNOPP Studios Ltd (Enhancement Marketing) is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be transferred as part of that transaction. For example, if another company acquires us or the course, they would likely acquire the user data as well. If that happens, we will ensure that your personal information remains subject to protections consistent with this Privacy Policy, and we’ll notify you (by posting on our site or sending an email) if a transfer like that occurs and if the data might become subject to a different privacy policy.

  • With Your Consent: In any situation not covered by the above, we will ask for your consent before sharing your personal information. For instance, if you asked us to collaborate with another service or if you wanted us to share your testimonial including your name/photo on our site, we would only do so with your permission. You are in control in those cases.

  • De-Identified or Aggregated Data: We may share information that has been aggregated or anonymized in a way that it doesn't identify you personally. For example, we might publish or share statistics like "90% of our students work in marketing" or "We have students from 10 different countries." This information wouldn't include any names or contact info – it's just high-level stats about our user base. Sharing such insights (say, in marketing materials or with potential partners) poses no privacy risk to you individually.

To reiterate, we do not sell your personal data. We share it only with service providers who help us deliver our service, with Facebook as needed for the group (since that’s user-initiated), or in other limited scenarios like legal compliance. Our service providers are bound to keep your information secure and confidential. If you ever have questions about whom we share data with, just ask us – we aim to be open about it.

5. Data Retention

We keep your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for satisfying any legal, accounting, or reporting requirements. How long that is can vary depending on the type of data and our relationship with you:

  • Account Data: If you have an active account with us (meaning you’re enrolled in the course and have access), we will retain your account information for as long as your account exists so that we can provide the service to you. If your course access is for a defined period (say one year) and that period ends, or if you request to cancel, we may move your account to an inactive status. We typically keep inactive account information for a while in case you return or there is an issue to resolve. Unless you request deletion, we might retain your account data for a period (for example, 1-2 years) after it becomes inactive, just in case you decide to rejoin or had downloaded materials we need to track license-wise. However, this is just an example period – we evaluate necessity. If storage of your data is no longer necessary, we will either delete it or anonymize it.

  • Course Progress and Content: Data like your course progress, quiz results, etc., is tied to your account. We’ll keep that as long as we keep your account, since it’s part of your experience (no point deleting your progress while your account exists). If your account is deleted, those records are deleted too, or they are anonymized to contribute to general statistics.

  • Payment Records: We are required by law to retain certain transaction records for a minimum period (for tax and financial audits). For example, in Canada, businesses often keep records for 6-7 years. This means your name, contact, and transaction details on receipts/invoices will be kept in our financial records for that time. However, this does not mean we keep your credit card info – remember, we don't have that. It just means we keep records of what was purchased, when, and by whom (name/email).

  • Emails and Communications: If you correspond with us, we may retain those communications for our records as long as needed. For support emails, we often keep them to refer back if you have follow-up questions and to improve our support process. If you request, we can delete email threads, but note that backups or email server logs might retain them for a short period after deletion.

  • Analytics Data: Data collected via Google Analytics is stored by Google. We have set our Google Analytics data retention period to a certain length (commonly 26 months by default for user-level data). This means that data about your site visits will be automatically deleted from Google’s servers after that time. We don’t manually identify or purge specific analytics records since they are aggregated, but they naturally expire in Google’s systems.

  • Facebook Group Content: Anything on the Facebook group lives on Facebook. If you leave the group or if we remove you, generally your posts may remain (with your name usually changed to something like "Former Member") unless you delete them. We do not copy your group posts to our own storage. However, we might keep records of any incidents (like if someone violated rules, we may note what happened and when for our own reference).

  • Backup Storage: Our course platform and website likely have routine backups (to prevent data loss in case of system failure). Backup files might contain your personal data. These are stored securely. If you request deletion of your data, we will remove it from our live systems, and then as our backups cycle, it will be overwritten in due course. We typically do not restore backups just to delete a single user's data, because that would affect other users' data consistency, but backups are only retained for a limited time and are securely protected.

  • Legal Holds: If we are dealing with a legal issue, we might be required to retain certain data longer than usual (for example, if there’s a dispute or we receive a lawful preservation request). In such cases, we keep the data until the issue is resolved and then only for as long as necessary.

Once we decide that we no longer need your personal information, we will either delete it or anonymize it (strip out personal identifiers so it can’t be linked to you). For instance, we might keep aggregate stats like "X users took the course" but not keep your name attached to it.

In summary, our goal is not to hold onto your data indefinitely. We retain what we need for the reasons we need it, and then we remove it when it's no longer necessary. If you have specific questions about our retention practices for a certain type of data, let us know.

6. Data Security

We understand that the security of your personal information is important. We take reasonable and appropriate measures to protect your data from loss, misuse, and unauthorized access or disclosure. Here are some of the security practices we follow:

  • Encrypted Website (HTTPS): Our Site and course platform use HTTPS encryption. This means that the data transmitted between your browser and our servers is encrypted. You can verify this by looking for the padlock icon in your browser’s address bar and the "https://" in the URL. Encryption helps prevent eavesdropping on data as it travels over the internet.

  • Secure Payment Processing: We rely on Stripe for payments, which is a PCI-DSS compliant service (the industry standard for payment security). When you enter payment details, it's done on Stripe’s secure forms. We never handle unencrypted credit card information. Stripe transfers payment data over secure channels and stores it securely on their end. They also employ robust fraud prevention tools.

  • Access Controls: Internally, access to personal data is restricted to those who need to know it. For example, our instructors or support team can access your account information and progress to assist you, but we limit who can access sensitive data. Administrative access to the database or server is limited to authorized personnel and protected by strong authentication (passwords/keys) and, where possible, two-factor authentication.

  • Password Protection: Your account password is your first line of defense. We store passwords in hashed form (which means we don't keep the actual password text, but an encrypted representation of it). This is a standard security practice so that even if our database were compromised, your plaintext password would not be exposed. We strongly encourage you to choose a unique, strong password for our site (and frankly, for every site).

  • Regular Software Updates: We keep our website platform, course software (Moodle), and any related plugins or tools updated to the latest secure versions. Software updates often include security patches, so staying current helps protect against known vulnerabilities.

  • Firewalls and Monitoring: Our servers are protected by firewalls and security software that monitor for unusual activities or attacks. We also monitor login attempts and may employ tools to limit or block suspicious behavior (like multiple failed login attempts could trigger a temporary lockout for safety).

  • Employee and Contractor Training: Anyone on our team who handles user data is briefed on confidentiality and privacy best practices. We ensure that those who work with us (employees or contractors) are bound by appropriate confidentiality obligations.

  • Data Breach Procedures: Despite all precautions, no system is impervious. We have a plan in place for how to deal with a data breach if one were to occur. This includes notifying affected users and authorities as required by law. If something ever looks amiss with your account (like you suspect unauthorized access), please inform us immediately so we can investigate and take action.

  • Third-Party Security: We carefully select third-party service providers and review their security measures too. Companies like Stripe, Google, and GitHub are industry leaders and invest heavily in security. We rely on their security as well for the parts of the service they handle.

  • Backups: We maintain backups of critical data to prevent data loss. These backups are encrypted and stored securely. Only authorized personnel can access backups when necessary for restoration.

  • No Guarantee: While we are committed to protecting your data, we also need to be transparent: no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. However, we do our best to use commercially acceptable means to protect your personal information.

Your Role: Security is also a shared responsibility. You can help keep your data safe by using a strong, unique password for our site, not sharing your login credentials with others, and logging out after using the service (especially on public computers). If you ever receive an email from us that you find suspicious (like asking for your password – which we will never do), or notice anything odd like fake websites impersonating us, please let us know.

In case of any security questions or incidents, contact us immediately (see Contact section below). We will address security issues with urgency and transparency.

7. Your Rights & Choices

You have rights regarding your personal information and how it’s used. We want to empower you to exercise those rights. Below is an outline of what you can do and how to do it:

  • Access Your Information: You have the right to request a copy of the personal data we have about you. This is sometimes known as a Subject Access Request. In plain terms, you can ask us, "What information do you have about me?" and we will provide you with the details that we can reasonably pull together – likely your profile info, purchase history, and any other data connected to your identity.

  • Correct or Update Your Information: If you believe any information we have is inaccurate or incomplete, you have the right to ask us to correct it. For example, if you realize you spelled your name wrong in your profile, or you changed email addresses, you can update that in your account settings, or ask us to help update it. We strive to keep your info accurate and up-to-date.

  • Delete Your Information: You can request deletion of your personal data. This is sometimes called the "right to be forgotten." If you want us to delete your account and erase your personal information from our systems, you can contact us with that request. Unless we have a valid legal reason to keep it (like an obligation to retain transaction records for tax purposes, or an outstanding issue to resolve), we will honor such requests. Be aware that deleting your data means you will lose access to the course and any progress data, and it’s not reversible. We’ll let you know what can be deleted immediately and what might be retained (if anything) due to legal requirements.

  • Portability: For certain data, you might have the right to get your information in a commonly used, machine-readable format, so you can transfer it to another provider. In practice, this mostly applies to things like a list of the data you've provided. We can export your account info or transaction history for you if needed, though our system isn't very likely to be transferred to another because it’s a unique service.

  • Withdraw Consent: In cases where we are processing your information based on your consent (e.g., you consented to receive a newsletter or you consented to be in a testimonial), you have the right to withdraw that consent at any time. For example, if you gave us a testimonial and later change your mind, you can ask us to stop using it. Withdrawing consent does not affect the lawfulness of processing we did up to that point, but it means we will stop the particular usage going forward.

  • Opt-Out of Marketing: If you no longer want to receive our marketing or promotional communications, you can opt out at any time. The easiest way is usually to click the "Unsubscribe" link at the bottom of an email newsletter. You can also email us directly and say "please remove me from your mailing list." Note that even if you opt out of marketing emails, we will still send you transactional and service-related emails (such as purchase confirmations, password resets, or important course notices), as those are not promotional.

  • Cookie Preferences: As discussed in the Cookies section, you can manage cookies through your browser settings. You can also opt out of Google Analytics tracking with their add-on. If we have a cookie consent banner on the site (for users in jurisdictions like the EU), you can use that to adjust settings.

  • Do Not Sell My Info: Some privacy laws (like California's CCPA) have a concept of "Do Not Sell My Personal Information." We don't sell personal info, so this isn't really applicable in our case. If that ever changes, we'd implement a way for you to opt out of any "sale" of data, but again, we do not do that.

  • Complaints: If you have a concern or complaint about how we’re handling your data, we would like you to tell us so we can address it. However, you also have the right to lodge a complaint with a data protection authority. For example, if you're in Canada and feel we breached your privacy rights under PIPEDA, you could contact the Office of the Privacy Commissioner of Canada. If you're in the EU, you could contact your country’s data protection authority. We respectfully ask that you give us a chance to fix the issue first, but it's your right to go directly to the authorities if you choose.

Special Note for EU/EEA/UK Residents: If you are in the European Economic Area or the UK, you have specific rights under the GDPR (General Data Protection Regulation) or UK GDPR. This includes all the rights mentioned above (access, rectification, deletion, restriction of processing, objection to processing, and data portability). You also have the right to object to processing of your personal information in some cases, such as processing for direct marketing or any processing based on legitimate interests (if you object, we’ll evaluate if we have compelling grounds to continue or if we must comply and stop). Additionally, you can set guidelines for the handling of your data after your death (in some jurisdictions). If you are in the EU/UK and wish to exercise any GDPR rights, just reach out – we will assist you and provide the required information/action within the timeframe required by law (typically within 30 days).

Special Note for Canadian Residents: We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws like BC’s Personal Information Protection Act (PIPA). Canadian users have rights to access their information and challenge its accuracy. We also comply with Canada’s Anti-Spam Legislation (CASL), so we only send you commercial electronic messages with consent, and we always provide a way to unsubscribe. If you are in Canada and have any questions about your data or our privacy practices, you can contact us or the relevant Privacy Commissioner’s office.

Identity Verification: When you make a request about your personal data, we may need to verify your identity to ensure that we're giving the info to the right person (you) and not someone else. For example, if you email us asking for a copy of your data, we might reply with a request that you send the email from the address associated with your account, or answer a question to verify it's you. This is to protect your privacy.

We will not discriminate against you for exercising any of these rights. Our goal is to be helpful and honor your requests where possible. Most requests (access, deletion, etc.) are free of charge. However, if you make repetitive, excessive requests, or require additional copies of data, we might charge a reasonable fee or decline the request as allowed by law (but we’ll explain why if that’s the case).

To exercise your rights, please contact us (see Contact Us below). Let us know what you would like to do (for example, "I’d like to see my data" or "Please delete my account and all data"). We’ll respond as soon as we can, generally within 30 days.

8. International Users and Data Transfers

Our Services are operated from Canada, and we primarily store data on servers located in Canada or the United States. If you are accessing our Site from outside of Canada, be aware that your information may be transferred to, stored, or processed in Canada or the USA (or other countries where our service providers are located).

Data Transfers from the EU/EEA or UK: If you are in the European Union, European Economic Area, or the United Kingdom, and you provide us with personal information, that information will likely be transferred to Canada and/or the United States. The European Commission has determined that Canada (for commercial organizations, under PIPEDA) provides an adequate level of data protection. However, the United States does not currently have a blanket adequacy decision, so for transfers to the US, we rely on lawful transfer mechanisms. Those might include things like Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement, which are legal contracts approved by regulators to ensure your data is protected even after it leaves the EU/UK. For instance, our contract with Stripe or Google likely includes such clauses to cover EU data.

Safeguards: We take steps to ensure that international transfers of personal information comply with applicable law. As mentioned, we use reputable service providers who implement strong security and privacy measures. Whenever possible, we anonymize or aggregate data to minimize exposure of personal info across borders. If we were to store data in additional countries, we would ensure those countries have either an adequacy decision or that appropriate safeguards are in place.

Your Choices: If you are not comfortable with your data being transferred to or stored in Canada or the US, you should not provide that information to us or use our Services. We understand that different countries have different privacy expectations. We try our best to meet high standards across the board, but we acknowledge that storing data in a foreign country might concern some users. We can provide more information on how we handle international transfers if you contact us.

By using our Site and Services or by interacting with us, you are consenting to the transfer of your personal information to Canada, the US, and potentially other jurisdictions as necessary for the purposes described. We will process your information in accordance with this Privacy Policy no matter where it resides.

If you have questions about our data transfer practices, or need more specifics on the safeguards we use (for example, if you want a copy of the Standard Contractual Clauses we use with a provider), please contact us and we’ll do our best to provide helpful information.

9. Children's Privacy

Protecting children’s privacy is extremely important to us. Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not attempt to register for the course or send any personal information about yourself to us.

If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as soon as possible. For example, if a 12-year-old manages to sign up using false information and we later discover their age, we will cancel the account and remove their details.

If you are a parent or guardian and you become aware that your child under 13 has provided us with personal information, please contact us immediately so that we can take appropriate action.

For minors aged 13 and older: Our policy, as noted in the Terms, is that those under the age of majority should only use our Services with parental or guardian consent. We don’t actively verify ages at sign-up (we don’t ask for birthdate), so we expect users (and their parents) to be truthful. If you are between 13 and 18 (or the age of majority in your jurisdiction), please seek permission from a parent or guardian before using our course, especially before making a purchase.

Parents and guardians are encouraged to talk to their children about online safety and privacy. If your teen is using our course, you might want to supervise their involvement, ensure they understand not to share personal details publicly in the Facebook group, etc. While our content is generally appropriate for a broad audience and not objectionable, younger users may still need guidance.

In summary, we treat any personal data from a minor with great care and primarily upon consent of a guardian. If you have concerns about your child’s use of our Services, please reach out to us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will:

  • Update the "Last Updated" date at the top of this Privacy Policy.

  • Provide a short summary of any material changes if appropriate (either within the policy or in a notice on our Site or via email).

  • If the changes are significant and you have an account with us, we may notify you directly (for example, by email) to explain the changes and any choices you may have.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. If you continue to use the Site or our Services after a Privacy Policy update, it means you acknowledge and agree to the revised policy.

If we were to make a change that alters how we handle your data in a way that requires your consent (for example, if we ever decided to start collecting a new type of sensitive information or using your data for a new purpose not covered here), we would obtain your consent before doing so.

In case you missed it, the most recent update is at the top. For transparency, if you ask, we can provide a summary of what changed from the previous version.

11. Contact Us

We always welcome your questions, concerns, and feedback about privacy. If you:

  • Want to access, correct, or delete your data (or exercise any of your rights).

  • Have a question about this Privacy Policy or how we handle your information.

  • Have a concern or complaint about privacy that you'd like to discuss with us.

Please don’t hesitate to contact us:

Email: admin@knoppstudios.com
Mailing Address: KNOPP Studios Ltd (Enhancement Marketing)
1322 Rockland Avenue, Suite 18
Victoria, BC V8S 1V6
Canada

When you contact us, please provide sufficient information for us to verify your identity (if it's a data request) and to understand your request or concern. We will respond as promptly as we can, generally within a few business days for general inquiries, and within 30 days for formal data requests.

We appreciate the trust you place in us with your personal information. Your privacy and satisfaction are important to us, and we will do our best to address any issues.

Thank you for reading our Privacy Policy. We hope it has given you a clear understanding of how your information is handled. Enjoy the course and happy learning!

Ā Ā Victoria, BC V8S 1V6