This privacy statement was last updated on September 1, 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.
In this privacy statement, we explain what we do with the data we obtain about you via https://braveart.academy. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:
- we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
- we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
- we first request your explicit consent to process your personal data in cases requiring your consent;
- we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
- we respect your right to access your personal data or have it corrected or deleted, at your request.
If you have any questions, or want to know exactly what data we keep of you, please contact us.
1. Purpose, data and retention period
We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)1.1 To sell or share data with a third party
1.1 To sell or share data with a third party
For this purpose we use the following data:
- Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
The basis on which we may process these data is:
Upon the provision of consent.
Retention period
We determine the retention period according to fixed objective criteria: Analytics data shared with third-party service providers is retained according to the configured retention settings of those services. Google Analytics user-level data is configured to be retained for 14 months.
1.2 Contact – Through phone, mail, email and/or webforms
1.2 Contact – Through phone, mail, email and/or webforms
For this purpose we use the following data:
- A first and last name
- An email address
The basis on which we may process these data is:
Retention period
We determine the retention period according to fixed objective criteria: We retain contact data for as long as necessary to answer the enquiry and complete any reasonable follow-up. Data may be retained longer where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
1.3 Payments
1.3 Payments
For this purpose we use the following data:
- IP Address
- An email address
- Account name or alias
- A first and last name
- Financial information such as bank account number or credit card number
- Commercial information, including records of personal property, products or services purchased, obtained, or considered
The basis on which we may process these data is:
Retention period
We determine the retention period according to fixed objective criteria: Payment and transaction records are retained for as long as required by applicable tax and accounting laws. In the Netherlands, basic financial administration is generally retained for 7 years. Records relating to transactions covered by the EU One Stop Shop (OSS) are retained for 10 years.
1.4 Registering an account
1.4 Registering an account
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
The basis on which we may process these data is:
Retention period
We determine the retention period according to fixed objective criteria: Account data is retained for as long as the account remains active or is required to provide access to purchased courses. If an account is deleted, personal data that is no longer required for legal, accounting or other legitimate purposes will be deleted or anonymised.
1.5 Newsletters
1.5 Newsletters
For this purpose we use the following data:
- A first and last name
- An email address
The basis on which we may process these data is:
Upon the provision of consent.
Retention period
We determine the retention period according to fixed objective criteria: Newsletter data is retained for as long as the person remains subscribed. If they unsubscribe, their details may be retained on a suppression list as necessary to ensure that no further marketing emails are sent and to retain evidence of consent where required.
1.6 To support services or products that a customer wants to buy or has purchased
1.6 To support services or products that a customer wants to buy or has purchased
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
The basis on which we may process these data is:
Retention period
We determine the retention period according to fixed objective criteria: Customer support data is retained for as long as necessary to provide support, resolve enquiries and maintain access to purchased products or services. Relevant correspondence may be retained longer where necessary to establish, exercise or defend legal claims or comply with legal obligations.
1.7 To be able to comply with legal obligations
1.7 To be able to comply with legal obligations
For this purpose we use the following data:
- A first and last name
- A home or other physical address, including street name and name of a city or town
- An email address
- Financial information such as bank account number or credit card number
- Commercial information, including records of personal property, products or services purchased, obtained, or considered
The basis on which we may process these data is:
For compliance with a legal or regulatory obligation.
Retention period
We determine the retention period according to fixed objective criteria: Data required for tax, accounting and other statutory record-keeping obligations is retained for the period required by applicable law. In the Netherlands, basic financial administration is generally retained for 7 years. Records relating to transactions covered by the EU One Stop Shop (OSS) are retained for 10 years.
1.8 Compiling and analyzing statistics for website improvement.
1.8 Compiling and analyzing statistics for website improvement.
For this purpose we use the following data:
- IP Address
- Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement
- Geolocation data
The basis on which we may process these data is:
Upon the provision of consent.
Retention period
Upon termination of the service we retain this data for the following period: 14 months.
2. Sharing with other parties
We only share this data with processors and with other third parties for which consent must be obtained.
Processors
Name: Cloudways, LLC
Country: United States
Purpose: Website hosting and server infrastructure
Name: Brevo (Sendinblue SAS)
Country: France
Purpose: Newsletter delivery and email marketing
Name: BunnyWay d.o.o. (bunny.net)
Country: Slovenia
Purpose: Video streaming and content delivery
Name: Stripe Payments Europe, Limited
Country: Ireland
Purpose: Payment processing and fraud prevention
Name: PayPal (Europe) S.Ã r.l. et Cie, S.C.A.
Country: Luxembourg
Purpose: Payment processing and fraud prevention
Name: Cloudflare, Inc.
Country: United States
Purpose: DNS, content delivery, website performance and security
Third parties
Name: Google Analytics (Google Ireland Limited)
Country: Ireland
Purpose: Website analytics and statistics
Data: Internet activity, page views, device/browser information, IP address used for processing and approximate geolocation
3. Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.
4. Disclosure practices
We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.
If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.
We have concluded a data Processing Agreement with Google.
Google may not use the data for any other Google services.
The inclusion of full IP addresses is blocked by us.
5. Security
We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
6. Third-party websites
This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.
7. Amendments to this privacy statement
We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.
8. Accessing and modifying your data
If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:
- You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
- Right of access: You have the right to access your personal data that is known to us.
- Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
- If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
- Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
- Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.
Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.
9. Submitting a complaint
If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.
10. Contact details
Verolme Consultancy & Media Services, trading as ‘Brave Art Academy’
Betsy Perkhof 18, 1963CV Heemskerk
Netherlands
Website: https://braveart.academy
Email: help@ex.combraveart.academy
11. Data Requests
For the most frequently submitted requests, we also offer you the possibility to use our data request form
Annex
Woocommerce
What we collect and store
We collect information about you when you browse our store, create an account or purchase one of our online classes.
While you visit our site, we may collect information such as the classes or products you view, your IP address, approximate location, browser/device information and the contents of your shopping cart. We use this information to operate the store, calculate applicable taxes, maintain your shopping cart and improve the purchasing experience.
When you make a purchase, we ask you to provide information including your name, billing address, email address and, where applicable, telephone number. We also store information about the classes or products you purchase, the amount paid, the payment method used and your order history.
Payment information is processed securely by our payment providers, Stripe and PayPal. We do not store your complete credit-card number or card security code on our website.
We use this information to process your order and payment, provide access to purchased classes, create and maintain your student account, send information about your account and purchases, provide customer support, process refunds where applicable, prevent fraud and abuse, and comply with tax, accounting and other legal obligations.
Marketing emails are sent only where you have subscribed or otherwise provided the appropriate permission.
How long we retain your information
Account information is retained for as long as your account remains active or is necessary to provide access to classes you have purchased.
Order, transaction and accounting information is retained for as long as required by applicable tax and accounting law. Dutch financial administration is generally retained for 7 years. Where transactions fall under the EU One Stop Shop (OSS) rules, the relevant records may need to be retained for 10 years.
Personal information that is no longer required for providing our services, complying with legal obligations or establishing, exercising or defending legal claims will be deleted or anonymised where appropriate.
Who on our team has access
Authorised members of our team may access customer and order information where this is necessary to administer the academy, provide access to purchased classes, process payments and refunds, provide customer support, maintain the website and comply with legal obligations.
This may include information such as your name, email address, billing information, account information, classes purchased and order history.
Access is limited to team members who require this information to perform their duties.
What we share with others
We share personal information with service providers where this is necessary to operate Brave Art Academy and provide our services. These include our website hosting and infrastructure providers, email delivery provider, video delivery providers and payment processors. Further information about these service providers is included elsewhere in this Privacy Statement and our Cookie Policy.
Payments
We accept payments through Stripe and PayPal.
When you make a payment, information required to process and support the transaction is passed to the payment provider. This may include your name, email address, billing information, IP address, purchase total and transaction information.
Stripe and PayPal may also process information for payment authentication, fraud prevention, dispute handling and compliance with financial regulations.
Learndash
What we collect and store
Brave Art Academy uses LearnDash to provide access to our online classes and to record students’ progress through those classes.
When a student account is created, we may store information including your name, username and email address, together with information about the classes in which you are enrolled.
While you use our classes, LearnDash stores information relating to your course progress, such as which courses, lessons and topics you have completed and your enrolment status.
If a class includes quizzes, assignments or other interactive learning activities, we may also store the results, submissions or completion information associated with those activities.
This information is used to provide access to purchased classes, remember your progress, provide student support and administer the academy.
Account and course-progress information is generally retained for as long as your student account remains active or as long as necessary to provide access to classes you have purchased. Information may be retained longer where necessary to comply with legal obligations or to establish, exercise or defend legal claims.
Who on our team has access
Authorised administrators and other team members who require access in order to operate Brave Art Academy may view information associated with your LearnDash account.
This can include your name, username, email address, enrolled classes, enrolment status and course progress. Where quizzes, assignments or similar activities are used, authorised team members may also be able to view the associated results or submissions.
Access is limited to people who require this information to administer the academy or provide student support.
What we share with others
Information associated with your student account may be processed by service providers that help us operate Brave Art Academy, including our website hosting, email delivery and video-delivery providers. These service providers are described elsewhere in this Privacy Statement and our Cookie Policy.
LearnDash itself does not process payments for purchases made through our website. Course purchases and payments are handled through WooCommerce and our payment providers Stripe and PayPal, as described elsewhere in this Privacy Statement.
