Privacy Policy

1. Overview

Sara Bensalem ("we," "us," or "our") operates the website sarabensalem.com (the "Site"). This Privacy Policy explains how we collect, use, and protect information when you visit the Site or use our services, including our workshop platform.

We are committed to protecting your privacy. We do not sell, rent, or trade your personal information to third parties. We collect only the minimum data necessary to operate the Site and process transactions.

2. Information We Collect

2.1 Information You Provide

When you create an account or purchase a workshop, we may collect:

• Account information: Name, email address, and profile photo (provided via Google Sign-In)
• Payment information: Payment details are processed directly by Stripe and are never stored on our servers
• Communications: Any information you send us via email

2.2 Information Collected Automatically

When you visit the Site, the following data may be collected automatically:

• Usage data: Pages visited, time spent, referring URL, and browser type
• Device data: Device type, operating system, and screen resolution
• IP address: Used for analytics and security purposes; anonymized where possible

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain access to workshop content you have purchased
• Process payments and manage your account
• Understand how visitors use the Site so we can improve it
• Respond to your inquiries or support requests
• Comply with legal obligations

We do not use your data for marketing, advertising, or profiling purposes.

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Google Analytics - for anonymous website usage statistics. Google Privacy Policy
• Firebase Authentication (Google) - for secure user login via Google Sign-In. Firebase Privacy
• Firebase Firestore (Google) - for storing your account data and course enrollments. Firebase Privacy
• Stripe - for processing payments. Stripe handles all payment card data directly; we never see or store your full card number. Stripe Privacy Policy
• GitHub Pages - for hosting the website. GitHub Privacy

5. Cookies and Tracking

The Site uses cookies and similar technologies:

• Essential cookies: Required for authentication and site functionality (e.g., Firebase session tokens)
• Analytics cookies: Google Analytics uses cookies to collect anonymous usage data. You can opt out by installing the Google Analytics Opt-Out Browser Add-on

We do not use advertising cookies, social media tracking pixels, or retargeting technologies.

6. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may disclose information only in the following circumstances:

• Service providers: To the third-party services listed in Section 4, solely for the purposes described above
• Legal requirements: If required by law, subpoena, or other legal process
• Protection of rights: To protect the rights, safety, or property of Sara Bensalem or others

7. Data Retention

We retain your personal data only as long as necessary to provide the services you have requested:

• Account data: Retained while your account is active. You may request deletion at any time
• Purchase records: Retained for the duration required by applicable tax and accounting laws
• Analytics data: Google Analytics data is retained for 14 months, after which it is automatically deleted

8. Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and the Site is encrypted via HTTPS/TLS
• Authentication is handled by Google/Firebase using secure OAuth 2.0 protocols
• Payment data is processed by Stripe, a PCI DSS Level 1 certified payment processor
• Access to administrative accounts is protected by two-factor authentication

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure.

9. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: You may request a copy of the personal data we hold about you
• Right to rectification: You may request that we correct inaccurate or incomplete data
• Right to erasure: You may request that we delete your personal data ("right to be forgotten")
• Right to restrict processing: You may request that we limit how we use your data
• Right to data portability: You may request your data in a structured, machine-readable format
• Right to object: You may object to our processing of your data for certain purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@sarabensalem.com. We will respond within 30 days.

Legal basis for processing: We process personal data on the following legal bases:

• Contract: To fulfill purchases and provide access to workshop content
• Legitimate interest: To improve the Site and ensure security
• Consent: For analytics cookies (you may opt out at any time)

10. Children's Privacy

Our kids workshops are designed for children ages 3-10, but all accounts and purchases must be made by a parent or legal guardian. We do not knowingly collect personal information directly from children under 16. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

12. Contact

If you have questions about this Privacy Policy, your personal data, or wish to exercise your GDPR rights, please contact:

Sara Bensalem
Email: info@sarabensalem.com
Website: sarabensalem.com