This Privacy Policy explains how Jewel Candle Rail processes personal data in connection with the website jewelcandlerail.beauty and related course services. It describes what we collect, how we use it, when we share it, and the choices and rights available to users.
We may collect identification details, contact details, account information, course registration data, payment-related records handled through our service providers, communications sent to us, and technical data such as device information, log data, and usage activity. Where relevant, we may also process information about course progress, preferences, and feedback.
We receive personal data directly from users when they create an account, enroll in a course, complete forms, or contact us. We also collect data automatically through the website, including cookies and similar technologies, and may receive limited information from payment, hosting, analytics, or other operational providers acting on our behalf.
The website may use essential cookies needed for security, navigation, and basic functionality. It may also use preference cookies to remember settings and analytics cookies to understand how the site is used. In some cases, third-party cookies may be placed by service providers that support hosting, analytics, or embedded features.
Users may block or delete cookies through browser settings. Some browsers allow preferences to be set for certain cookie categories. If cookies are disabled, parts of the website may not function as intended. Where a cookie banner or preference tool is available, users may use it to manage non-essential cookies.
Where GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, or our legitimate interests, depending on the activity involved. We limit processing to what is necessary for the stated purpose and apply appropriate safeguards.
Because the website is offered in the European Union context and targets users in Italy, GDPR applies to personal data processed in connection with the site where the regulation is applicable.
Where the GDPR applies, users may have the right to access, rectify, erase, restrict, or object to processing, and to request data portability in applicable cases. Where processing is based on consent, consent may be withdrawn at any time without affecting prior processing. Users may also lodge a complaint with the competent data protection authority.
Depending on your location and the applicable law, you may have rights to access your data, request correction or deletion, object to certain processing, or ask for restriction of processing. You may also have the right to receive a copy of certain data in a portable format where the law provides for it.
To exercise a privacy right, submit a request through the contact details in this policy with enough information to identify the relevant data and the right you wish to exercise. We may ask for additional information to verify identity or clarify the request. If a request cannot be fulfilled in full, we will explain the reason where required by law.
We retain personal data for the period necessary to provide the services, maintain records, resolve disputes, enforce agreements, and meet legal, accounting, or tax obligations. When data is no longer needed, we delete it or anonymize it, unless a longer retention period is required or permitted by law.
We may update this Privacy Policy from time to time to reflect changes in our services, processing practices, or legal requirements. The revised version will apply from the date it is made available on the website, unless a different effective date is stated. Where changes are material, we will take reasonable steps to draw attention to them.
We use personal data to operate the website, provide and manage course access, process registrations and payments, respond to inquiries, maintain security, monitor performance, improve content and functionality, personalize user experience where appropriate, and comply with legal obligations. We may also use data to communicate important service notices and to keep internal records.
We may share personal data with trusted service providers that support website hosting, analytics, security, payment processing, communications, and course administration. These parties act under contractual or equivalent obligations and may process data only for the services they provide to us. We do not authorize them to use the data for unrelated purposes.
We may disclose personal data where necessary to comply with legal obligations, respond to lawful requests, protect our rights, investigate security incidents, or support the establishment, exercise, or defense of legal claims. Any such disclosure is limited to what is reasonably necessary for the relevant purpose.
