Student privacy notice

Collect what the course needs.

This notice explains the information used to operate Tour Management 101, protect accounts, record learning progress, process purchases, and provide support.

Last updated September 1, 2026

Information collected

  • Account information, including name, email address, user identifier, and authentication records.
  • Enrollment and purchase information, including transaction identifiers, amount, status, refund activity, and access source.
  • Learning records, including lesson progress, playback position where supported, assessment responses and results, assignment confirmations, reflections, and certificate records.
  • Support and administrative records, including messages, gift-access details, access changes, and administrator audit entries.
  • Technical and security information reasonably needed to operate, diagnose, and protect the website, such as request, browser, device, and network information made available through hosting and security logs.

How information is used

Information is used to create and secure accounts, process enrollment, deliver course access, preserve progress, grade assessments, issue certificates, provide support, administer refunds and gifts, prevent fraud and misuse, troubleshoot the service, maintain records, and meet applicable business and legal obligations.

Service providers

The academy uses Supabase for accounts and course records, Stripe for checkout and refunds, Hostinger for application hosting, and configured email-delivery providers for account and support communications. These providers process information to perform their contracted services. Payment-card details are collected by Stripe and are not stored in the academy database.

The academy does not sell student personal information and does not use course activity for third-party behavioral advertising. No advertising or marketing analytics service is currently integrated into the course application.

Cookies and local storage

Necessary authentication cookies keep students signed in and protect authorized access. A temporary reviewer cookie may be used during private pre-launch review. The course may use browser storage to preserve limited lesson-interface state. These technologies are used for operation and security, not third-party advertising.

Retention

Account, enrollment, progress, assessment, assignment, and certificate information is retained while needed to provide and document the course. Payment, refund, security, and administrator-audit records may be kept longer when needed for accounting, fraud prevention, dispute handling, or legal obligations. Support correspondence is retained only as long as reasonably useful for resolving the request and maintaining an appropriate business record.

When information is no longer needed, the academy will delete, de-identify, or securely dispose of it as reasonably practical. Retention practices are reviewed as the service and applicable obligations change.

Security

The academy uses encrypted connections, restricted administrative access, server-side payment verification, role-based database controls, and multifactor authentication for sensitive administration. No online service can promise absolute security. Students should use a unique password and report suspected account misuse promptly.

Choices and requests

You may ask to access, correct, or delete account information, subject to identity verification and records the academy must or reasonably needs to retain. Deleting an account may remove course access and may limit later verification of progress or a certificate.

Send privacy questions or requests to chief@fouledanchormusic.com. Rights may vary by location, and applicable non-waivable rights remain available.

Updates

This notice may be updated as the academy’s services, providers, or legal obligations change. Material changes will be communicated reasonably and the updated date will appear above.