Privacy Policy
Effective date: 01 Jan 2026
This Privacy Policy explains how PlayFolk (“we”, “us”) collects, uses, shares, and protects information when you use our website and related services. We aim to be transparent and to process data in accordance with applicable privacy laws, including GDPR and CCPA where relevant. We do not sell personal data.
1) What we collect
We collect information that is reasonably necessary to provide and secure our services, communicate with you, and improve the website experience.
- Account: name, email, hashed password (when an account feature exists or is enabled).
- Course preferences: tracked courses and cart stored in your browser (localStorage).
- Technical: device type and time zone for scheduling compatibility.
- Communications: messages you send to support, plus basic metadata (time sent, subject).
2) Why we collect (purposes)
- Provide services: create and manage accounts, deliver enrolled courses, and respond to requests.
- Personalization: remember preferences such as theme and in-browser course/cart state.
- Security: protect against abuse, fraud, and unauthorized access.
- Product improvement: understand how users navigate and identify usability issues.
3) Lawful basis (GDPR)
Where GDPR applies, we process personal data on the following lawful bases:
- Contract: to deliver courses and features you request or enroll in.
- Consent: newsletters and promotional updates (when you opt in; you can withdraw anytime).
- Legitimate interests: improving navigation and course relevance, maintaining platform security, and preventing misuse.
- Legal obligations: when we must comply with applicable laws (e.g., tax, regulatory, lawful requests).
4) Cookies, localStorage, and similar technologies
We use browser storage (such as localStorage) to remember preferences and maintain some client-side state. You can manage these choices via the cookie banner (if presented) and your browser settings.
Required to provide core functionality (e.g., storing a cookie consent decision; basic preference storage such as theme).
Used to improve your experience (e.g., theme selection, UI state, course/cart preference state stored locally).
5) Sharing and disclosures
We may share data with service providers (processors) that help us operate our services (e.g., hosting, email delivery, customer support tools). These providers process data under contractual obligations and only as necessary to provide their services.
- No sale of personal data: we do not sell personal information.
- Legal: we may disclose information if required by law or to protect rights, safety, and security.
- Business transfers: if we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.
6) Data retention
We retain personal data only as long as needed for the purposes described above, unless a longer retention period is required or permitted by law.
We keep account data while your account is active and for up to 2 years after inactivity unless law requires longer. Support communications may be retained for a limited period to help resolve issues and improve service quality.
7) Your rights and choices
Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to certain processing. You can also withdraw consent where processing is based on consent.
- Access, correct, or delete: email [email protected].
- Cookie choices: manage via cookie banner (when shown) and browser settings.
- Marketing: you can opt out of promotional emails using the unsubscribe link (where available) or by contacting us.
- CCPA: California residents may have additional rights; we respond to verifiable requests as required.
To protect your information, we may ask for reasonable verification before fulfilling certain requests (for example, confirming control of the email address associated with an account).
8) Security
We use appropriate technical and organizational measures to protect information. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security.
9) International transfers
Our service is accessible globally. When transferring data across borders, we use appropriate safeguards (such as contractual protections) where required by law.
10) Children’s privacy
Our services are not directed to children under 13 (or the age defined by local law). If you believe a child has provided us personal data, contact us and we will take appropriate steps to remove it.
11) Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and, where appropriate, provide additional notice.
12) Contact
If you have questions, requests, or concerns about privacy, contact us: