Privacy Policy

1. Overview

LayerMix Academy (“LayerMix,” “we,” “us,” or “our”) provides educational content and related services. This Privacy Policy describes how we handle information when you visit our website, create an account, enroll in courses, contact support, or otherwise interact with our services (collectively, the “Services”).

This policy is written for general transparency and may reference rights that apply in certain jurisdictions (e.g., GDPR/UK GDPR, CCPA/CPRA). Some provisions may not apply to you depending on where you live and how you use the Services.

2. Scope & Controller

For most data processing described here, LayerMix Academy acts as a “controller” (or equivalent) determining how and why personal information is processed. If we process personal information on behalf of a customer or partner under their instructions, we may act as a “processor.”

Contact point for privacy: [email protected] (for policy questions) and [email protected] (for general help).

3. Data We Collect

We collect information in three ways: (a) information you provide; (b) information collected automatically; and (c) information from third parties (where applicable).

3.1 Information you provide

Account data: name, email address, password (hashed), profile details you choose to add.
Course and learning data: enrollments, progress, quiz results, certificates, saved items.
Support and communications: messages you send, attachments, and metadata needed to respond.
Payment information: billing details and transaction identifiers. Card details are typically processed by a payment processor; we do not store full card numbers on our servers.

3.2 Information collected automatically

Device and usage data: IP address, browser type, device identifiers, language, pages viewed, referral URL, timestamps, clicks, and performance diagnostics.
Log data: server logs used for security, abuse prevention, and troubleshooting.
Cookies and similar technologies: see the Cookies section for details and controls.

3.3 Information from third parties

Service providers: analytics, hosting, security, customer support tools, and payment processors may provide us with limited data required to perform services.
Compliance and fraud signals: if required to protect the Services or comply with law.

4. How We Use Your Data

We use personal information for the following purposes:

Provide and operate Services: create accounts, deliver content, and maintain learning progress.
Security and fraud prevention: protect users, prevent abuse, enforce terms, and secure systems.
Customer support: respond to requests and resolve issues.
Improve and develop: analyze usage to enhance features, accessibility, and performance.
Communications: send service-related messages and optional marketing (where allowed and with appropriate choices).
Legal compliance: tax, accounting, and regulatory requirements.

5. Legal Bases (GDPR/UK GDPR)

Where applicable, we process personal data under one or more legal bases:

Contract: to provide Services you request.
Legitimate interests: to secure and improve Services, prevent abuse, and understand usage, balanced against your rights.
Consent: for certain cookies/analytics or marketing communications where required.
Legal obligation: compliance with laws (e.g., tax or consumer protection).

6. Cookies & Similar Technologies

We use cookies and similar technologies (localStorage, pixels, SDKs) to keep the site functional, remember preferences (like theme), and measure performance. You can manage preferences using our cookie settings controls (where shown) and your browser settings.

6.1 Categories

Strictly necessary: required for core functionality (e.g., session, security). These cannot always be disabled via our banner.
Preferences: remember choices such as theme, language, or layout.
Analytics: help us understand usage patterns and improve content.
Marketing: used to personalize advertising or measure campaigns (if we run them).

6.2 Your controls

You can (a) accept or reject non-essential cookies via the cookie banner; (b) update settings later via “Cookie Settings” (if available); and (c) clear cookies through your browser. Note that blocking certain cookies may affect features such as staying signed in or saving preferences.

7. Sharing & Disclosure

We may share personal information with:

Service providers: hosting, analytics, email delivery, customer support, security tooling, and payment processing.
Legal and safety: when required by law or to protect rights, safety, and the integrity of the Services.
Business transfers: in connection with a merger, acquisition, or asset sale (you will be notified where legally required).

We do not sell personal information in the conventional sense. Where “sale” or “sharing” has a specific legal meaning (e.g., under CPRA), you may have opt-out rights; see Your Rights.

8. International Data Transfers

Your information may be processed in countries other than your own. Where required, we implement appropriate safeguards for cross-border transfers (such as standard contractual clauses or equivalent mechanisms) and apply security controls designed to protect your data.

9. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the data type and context (e.g., account history, transaction records, security logs).

When we no longer need data, we delete or de-identify it, subject to technical and legal constraints.

10. Security

We use administrative, technical, and physical safeguards to protect personal information. These may include access controls, encryption in transit (HTTPS), monitoring, and least-privilege practices. No method of transmission or storage is 100% secure; we encourage you to use a strong password and avoid sharing credentials.

11. Children’s Privacy

The Services are not directed to children under 13 (or the minimum age required by local law). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can take appropriate action.

12. Your Rights & Choices

Depending on your jurisdiction, you may have rights such as:

Access: request a copy of personal data we hold about you.
Correction: request updates to inaccurate data.
Deletion: request deletion of personal data (subject to legal exceptions).
Portability: request a portable copy of certain data.
Restriction/objection: object to or restrict certain processing.
Consent withdrawal: where processing is based on consent.
Opt-out of sale/sharing: where applicable under CPRA/other laws.

To exercise rights, use the Contact section or the “Request your data” form on this page. We may need to verify your identity and request additional information to process your request.

13. Do Not Track Signals

Some browsers offer “Do Not Track” (DNT) signals. Because there is no widely adopted standard for interpreting DNT, we generally do not respond to DNT signals. You can manage tracking preferences using cookie controls and browser settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date and, where appropriate, provide additional notice (e.g., via in-service notification) if changes are material.

15. Contact

Questions, requests, or complaints about privacy can be directed to:

Email: [email protected]
Support: [email protected]
Phone: +1 (415) 762-4830

You can also use the request form on this page to submit a data subject request.

16. Definitions

Personal information means information that identifies, relates to, describes, or can be reasonably linked to an individual. Processing means any operation performed on personal information (e.g., collection, storage, use, disclosure). Cookies are small text files stored on your device.