Information We Collect
We collect information that you provide directly to us, such as your name and email address when you purchase the course, and your payment details when you complete checkout. We also automatically collect technical information when you visit the site, including your IP address, browser type and version, device information, the pages you view, the links you click, and timestamps. We use cookies and similar technologies to collect some of this information, as described in the Cookies section below.
How We Use Your Information
We use the information we collect to process your purchase and provide you access to the course, send transactional emails such as the welcome and access email, communicate with you about your account and any support requests, measure the performance of our advertising and improve our marketing, analyze how the site is used so we can improve it, and prevent fraud and abuse.
Third Parties We Share Data With
We share limited information with the following third-party services so they can perform their function. Each provider has its own privacy policy, linked below.
Payment processors
Stripe processes credit and debit card payments. When you pay by card, your card details are submitted directly to Stripe and we do not see or store your full card number. We share your name, email, and purchase amount with Stripe so they can complete the transaction. See Stripe's privacy policy.
PayPal processes payments made through the PayPal option at checkout. PayPal handles the transaction inside its own window and we receive a confirmation along with your name and email address from PayPal once payment completes. See PayPal's privacy policy.
Analytics
Google Analytics helps us understand how visitors use the site, such as which pages are visited and how people arrive at the site. Google Analytics receives a pseudonymous identifier, your IP address, and information about your browser and the pages you view. You can opt out using the Google Analytics opt-out add-on. See Google's privacy policy.
Microsoft Clarity records aggregated and anonymized session information such as scroll behavior and clicks, which helps us see how visitors interact with the page so we can improve the layout. Clarity does not record passwords or payment fields. See Microsoft's privacy statement.
Advertising
We use Meta Pixel and the Meta Conversions API to measure the effectiveness of our advertising on Facebook and Instagram and to help Meta deliver our ads to people who are likely to be interested in the course. The data shared with Meta includes a hashed version of your email address if you make a purchase, your IP address, browser and device information, the pages you view, and identifiers from Meta's tracking cookies (_fbp and, if you arrived from a Meta ad, _fbc). Email addresses are hashed using SHA-256 before being sent so the plaintext email is not transmitted. You can manage how Meta uses your data for advertising at Meta ad preferences. See Meta's privacy policy.
Hosting, infrastructure, and transactional email
We use third-party hosting, content delivery, and transactional email services to operate the site and send you account-related emails such as the course access email. These providers process technical information including your IP address and request metadata, and your email address for the purpose of email delivery. They act as our service providers and do not use your information for their own marketing.
Cookies and Tracking Technologies
We and our analytics and advertising partners use cookies and similar technologies (such as pixels and browser local storage) to keep your session active during checkout, remember which page you came from, measure site performance, and measure ad performance. You can disable cookies in your browser settings. If you do, parts of the site such as checkout may not work correctly.
Data Retention
We keep your purchase record and the associated email address for as long as needed to provide course access and meet our tax, accounting, and fraud prevention obligations. Analytics and advertising data are kept according to the retention periods set by Google, Microsoft, and Meta, which range from a few months to a few years. If you ask us to delete your personal information, we will do so unless we are required to keep it for legal or accounting reasons.
Your Rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct inaccurate information, request deletion of your information, restrict or object to certain uses of your information, withdraw consent you previously gave, and request a copy of your information in a portable format. To exercise any of these rights, email us at support@heartfeltbrush.com. We will respond within a reasonable timeframe.
Children's Privacy
This website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@heartfeltbrush.com and we will delete it.
Security
We take reasonable measures to protect the information we collect. Payment card details are handled directly by Stripe or PayPal and never reach our servers. However, no method of transmitting or storing information over the internet is completely secure, and we cannot guarantee absolute security. If you have a security concern, please contact support@heartfeltbrush.com.
Links to Other Sites
This site contains links to other websites. We are not responsible for the privacy practices of sites we link to. We encourage you to read the privacy policy of any site you visit.
Changes to This Policy
If we change this policy, we will post the updated version at this URL and update the date below. Material changes may also be communicated by email if we have your address on file.
Contact
If you have any questions about this policy or how we handle your information, email us at support@heartfeltbrush.com.
Privacy Policy last updated May 21, 2026.