Privacy Policy

1. Introduction

This Privacy Policy explains how ZenVault Mindspace (“we”, “our”, “us”) collects, uses, and safeguards personal information when you use our website and services. We apply a minimal data approach consistent with our calm design philosophy.

2. Information we collect

• Account data: name, email address, password (hashed).
• Transaction data: purchased courses, billing details processed by payment providers.
• Communications: messages sent via our contact form.
• Usage data: page views, device/browser info, approximate location from IP.
• Cookies: functional cookies for session and preferences (e.g., theme, cookie consent).

3. How we use information

• Provide and maintain services, including course access and support.
• Process transactions and prevent fraud.
• Improve content and usability with aggregated analytics.
• Send essential service communications (e.g., receipts, policy updates).
• Honor legal obligations and enforce our Terms.

4. Legal bases

Where applicable, processing relies on consent (preferences), contract (purchases), legitimate interests (security, product improvement), and legal obligations (records, tax).

5. Data sharing

We do not sell personal data. We share limited data with processors who help deliver our services (payment, hosting, analytics), bound by confidentiality and data protection terms.

6. Data retention

We keep data only as long as necessary for the purposes described or as required by law. We periodically review and delete data that is no longer needed.

7. Your choices and rights

• Access, correct, or delete your data.
• Object to or restrict certain processing.
• Withdraw consent where consent was given.
• Portability of data, where technically feasible.

To exercise rights, contact us at [email protected]. We may require verification.

8. Security

We use industry-standard safeguards including encryption in transit, access controls, and regular review. No system is perfectly secure; please use strong, unique passwords.

9. International transfers

Where data crosses borders, we apply appropriate safeguards such as standard contractual clauses.

10. Children’s privacy

Our services are not directed to children under 16. If you believe a child provided personal information, contact us to remove it.

11. Changes to this policy

We may update this Policy from time to time. Material changes will be announced on this page with a new effective date.