Privacy Policy
Last updated: 2026-07-01
SteadyPeak Public Speaking (“SteadyPeak”, “we”, “us”) respects your privacy. This policy explains what personal data we collect, how we use it, the legal bases for processing, and the choices you have.
1. Data we collect
- Account data: name, email, password hash, and optional profile details.
- Transaction data: courses purchased, timestamps, and limited billing metadata (processed by our payment provider).
- Usage data: pages visited, device/browser information, and approximate location derived from IP (for security and analytics).
- Support data: content of messages you send via forms or email.
2. Purposes and legal bases
- Service delivery: provide access to courses and cohorts (contract necessity).
- Customer support: respond to inquiries and troubleshoot (legitimate interests, contract necessity).
- Security: detect abuse and maintain service integrity (legitimate interests).
- Legal compliance: tax and accounting obligations (legal obligation).
- Optional updates: send course announcements with your consent; you can opt out any time.
3. Sharing
We share personal data with trusted processors only: hosting, analytics, email delivery, and payments. We do not sell personal data. Processors are bound by contracts to process data solely on our instructions and to maintain appropriate security.
4. Retention
We retain account and transaction data for as long as you maintain an account and as required by law. Support messages are kept for up to 24 months unless removal is requested and lawful.
5. International transfers
When data is transferred across borders, we use appropriate safeguards such as Standard Contractual Clauses and data minimization practices.
6. Your rights
- Access, rectification, deletion, and portability.
- Restriction or objection to processing where applicable.
- Withdrawal of consent for optional communications.
7. Security
We use encryption in transit, access controls, and regular reviews. No method is perfectly secure; we encourage strong unique passwords and caution when sharing personal information.
8. Cookies
We use strictly necessary cookies for authentication and preferences, and optional cookies for analytics. You can manage preferences via your browser and our cookie banner.
9. Children
Our services are intended for individuals 16+ years old. If we learn that a child provided personal data, we will delete it.
10. Contact
Questions or requests: [email protected] • +1 (415) 555-0137
If you are in the EEA/UK, you may lodge a complaint with your local supervisory authority. We encourage contacting us first to resolve concerns calmly and promptly.