Privacy Policy

Crystal Heart® Academy is operated by Crystal Heart® ("we", "us", "our").

Email: info@crystalheartpsychics.com | Website: crystalheartacademy.com

We are the data controller responsible for your personal data collected through Crystal Heart® Academy.

• Account & Registration Data: full name, email address, password (encrypted), date of registration.
• Purchase & Payment Data: course purchases and order history, payment amounts and dates, Stripe payment reference (we do not store full card details — all card processing is handled securely by Stripe).
• Learning & Progress Data: courses enrolled in and purchased, course completion status, certificates of completion issued, downloads accessed.
• Usage & Technical Data: IP address, browser type and version, device type, pages visited and time spent on the platform, referring website.
• Communications Data: emails you send to us, enquiries and support requests.

• To create and manage your account — Legal basis: Contract
• To process course purchases and payments — Legal basis: Contract
• To provide access to purchased course content — Legal basis: Contract
• To issue Certificates of Completion — Legal basis: Contract
• To send transactional emails (purchase confirmations, access links) — Legal basis: Contract
• To send marketing emails about new courses and offers (with your consent) — Legal basis: Consent
• To improve our platform and user experience — Legal basis: Legitimate Interest
• To comply with legal and financial obligations — Legal basis: Legal Obligation
• To prevent fraud and ensure platform security — Legal basis: Legitimate Interest

If you have opted in to marketing communications, we may send you emails about new courses, special offers, and news from Crystal Heart®. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting info@crystalheartpsychics.com. Unsubscribing will not affect your access to purchased courses.

All payments are processed securely by Stripe. We do not store your full card details. Stripe acts as a separate data controller — see stripe.com/privacy for details.

We use cookies to: keep you logged in (essential), remember your preferences (functional), and analyse platform usage (analytics). Essential cookies cannot be disabled. You can manage non-essential cookies through your browser settings. By continuing to use Crystal Heart® Academy you consent to our use of cookies.

We do not sell your personal data. We may share it with: Stripe (payment processing), Base44 (platform and hosting), email service providers (transactional and marketing emails), and legal authorities (where required by law). All processors handle your data securely and in accordance with applicable data protection law.

• Account data: duration of account plus 2 years after closure
• Purchase records: 7 years (financial and legal compliance)
• Course progress and completion data: duration of account
• Marketing consent records: until consent withdrawn plus 1 year
• Support communications: 2 years from last contact

As a UK or EU resident you have the right to: access your data, correct inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time.

Contact us at info@crystalheartpsychics.com — we will respond within 30 days. You may also lodge a complaint with the ICO: ico.org.uk | 0303 123 1113.

We implement appropriate technical and organisational measures including encrypted data storage, secure HTTPS connections, access controls, and regular security reviews. In the event of a breach likely to affect your rights we will notify you and the ICO as required by law.

Crystal Heart® Academy is intended for users aged 18 and over. We do not knowingly collect personal data from children under 13. Contact info@crystalheartpsychics.com immediately if you believe a child has provided us with data.

Data may be processed outside the UK or EEA by third-party providers. Where this occurs we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or prominent notice on the platform. Continued use constitutes acceptance of the updated policy.